Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS211514.roa
File: AS211514.roa (raw, json)
Hash identifier: 9W0kjPE7D1pJjw/Z5vBBDa9uSJKtCgZ+CX61EhexYPI=
Subject key identifier: 42:C2:15:B7:32:20:8F:99:26:3E:84:54:4F:F3:27:63:01:1F:3A:D8
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 04A484204928EE2F8D3083EDA6E0E20E7ED85C65
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS211514.roa
Signing time: Sun 18 Feb 2024 22:44:24 +0000
ROA not before: Sun 18 Feb 2024 22:39:24 +0000
ROA not after: Sun 16 Feb 2025 22:44:24 +0000
asID: 211514
IP address blocks: 2a06:a005:484::/48 maxlen: 48
2a06:a005:5ae::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:a4:84:20:49:28:ee:2f:8d:30:83:ed:a6:e0:e2:0e:7e:d8:5c:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Feb 18 22:39:24 2024 GMT
Not After : Feb 16 22:44:24 2025 GMT
Subject: CN=42C215B732208F99263E84544FF32763011F3AD8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:9d:ab:a9:d0:7c:05:d1:1a:16:eb:66:1d:d9:
07:89:65:68:58:ab:a5:53:fe:ab:be:80:ff:15:95:
28:3b:34:c9:b4:ac:bb:2f:17:bd:49:4d:c5:9a:6e:
88:39:2d:1b:a7:ad:f8:16:43:cb:96:94:83:7f:50:
29:17:78:d8:f6:13:dd:b6:72:05:7e:20:ea:3a:01:
99:c9:22:43:22:f4:4d:41:73:74:05:47:fb:3a:ea:
a9:7b:1e:8c:43:5d:24:2c:dd:1d:58:a3:a3:39:6a:
81:d0:ca:65:9c:2f:22:13:0e:ca:b3:e8:48:c9:6c:
42:2d:e2:81:aa:bc:b5:b2:ef:de:30:f2:a3:df:cc:
fa:b9:a0:12:11:4c:b5:bf:45:0d:e5:b2:01:ff:48:
32:f3:21:4e:13:42:7d:a9:cd:db:a5:0c:93:2f:f7:
06:5d:47:42:3d:bc:4d:e8:00:f0:3f:c9:9d:05:9b:
f9:09:4a:09:ee:60:52:5e:4f:6e:00:97:cf:e8:79:
3c:cf:5c:7d:b3:4a:49:3d:f2:a5:12:f0:78:e1:40:
b8:cd:ea:96:46:9d:28:8b:d1:a2:8c:a6:c2:2d:73:
40:98:b1:33:4a:ec:f6:be:69:da:30:a7:a4:68:c6:
31:30:d2:9f:d0:44:b8:6f:81:c2:e6:40:2b:49:f8:
90:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:C2:15:B7:32:20:8F:99:26:3E:84:54:4F:F3:27:63:01:1F:3A:D8
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS211514.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:484::/48
2a06:a005:5ae::/48
Signature Algorithm: sha256WithRSAEncryption
79:06:c3:15:9f:e0:9b:46:b3:fd:36:46:c9:65:d9:42:d1:fe:
16:2f:f4:a4:ab:42:2e:81:13:1c:4d:73:30:4b:01:1d:49:7f:
17:f0:94:d3:83:b7:02:2f:22:58:62:fb:98:ad:b3:6d:1a:d3:
e9:45:7e:3d:96:7f:36:b9:d8:d6:9c:a7:44:60:1b:33:5b:d1:
ac:38:7c:97:90:8b:01:fb:bd:19:80:20:88:f3:45:96:f1:3b:
0c:fe:6d:4b:e4:70:6b:e7:43:3c:d7:b2:f6:c6:f6:a0:94:e1:
30:95:bd:a7:bc:e2:f2:bb:0d:fa:db:fd:7a:6b:e6:dc:99:01:
ad:a5:13:0a:55:ae:f4:9d:e0:1d:b4:e6:dc:59:5b:a2:c4:15:
f2:66:45:79:3d:92:27:23:62:9a:59:b7:bd:25:90:31:72:59:
62:ed:8c:e0:fe:b5:c3:e2:5a:f1:97:a0:83:1b:78:ba:b3:32:
7b:84:14:98:6b:23:4f:51:b6:4c:62:8c:26:68:e9:42:0b:91:
51:7b:41:42:20:57:1b:59:6b:1c:36:90:26:a6:95:d0:39:1c:
2f:2a:56:fc:15:09:a7:54:ce:2e:ca:0e:f5:be:5a:f3:0d:27:
3e:5a:90:a7:fb:f5:f1:d2:b6:62:62:91:65:3b:6b:dc:3b:90:
c1:59:c2:49
-----BEGIN CERTIFICATE-----
MIIE8TCCA9mgAwIBAgIUBKSEIEko7i+NMIPtpuDiDn7YXGUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzk5NDM4ZjFiMTc2MmFlZWY4YTM1Y2Y0ZTZjYmFlOTc2
OTliZDAyMDAeFw0yNDAyMTgyMjM5MjRaFw0yNTAyMTYyMjQ0MjRaMDMxMTAvBgNV
BAMTKDQyQzIxNUI3MzIyMDhGOTkyNjNFODQ1NDRGRjMyNzYzMDExRjNBRDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5naup0HwF0RoW62Yd2QeJZWhY
q6VT/qu+gP8VlSg7NMm0rLsvF71JTcWabog5LRunrfgWQ8uWlIN/UCkXeNj2E922
cgV+IOo6AZnJIkMi9E1Bc3QFR/s66ql7HoxDXSQs3R1Yo6M5aoHQymWcLyITDsqz
6EjJbEIt4oGqvLWy794w8qPfzPq5oBIRTLW/RQ3lsgH/SDLzIU4TQn2pzdulDJMv
9wZdR0I9vE3oAPA/yZ0Fm/kJSgnuYFJeT24Al8/oeTzPXH2zSkk98qUS8HjhQLjN
6pZGnSiL0aKMpsItc0CYsTNK7Pa+adowp6RoxjEw0p/QRLhvgcLmQCtJ+JARAgMB
AAGjggH7MIIB9zAdBgNVHQ4EFgQUQsIVtzIgj5kmPoRUT/MnYwEfOtgwHwYDVR0j
BBgwFoAUeZQ48bF2Ku74o1z05suul2mb0CAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi83OTk0MzhGMUIx
NzYyQUVFRjhBMzVDRjRFNkNCQUU5NzY5OUJEMDIwLmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZVpRNDhiRjJLdTc0bzF6MDVzdXVsMm1iMENBLmNlcjBwBggrBgEF
BQcBCwRkMGIwYAYIKwYBBQUHMAuGVHJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv
cmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5ZC8yL0FT
MjExNTE0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEH
AQH/BBwwGjAYBAIAAjASAwcAKgagBQSEAwcAKgagBQWuMA0GCSqGSIb3DQEBCwUA
A4IBAQB5BsMVn+CbRrP9NkbJZdlC0f4WL/Skq0IugRMcTXMwSwEdSX8X8JTTg7cC
LyJYYvuYrbNtGtPpRX49ln82udjWnKdEYBszW9GsOHyXkIsB+70ZgCCI80WW8TsM
/m1L5HBr50M817L2xvaglOEwlb2nvOLyuw362/16a+bcmQGtpRMKVa70neAdtObc
WVuixBXyZkV5PZInI2KaWbe9JZAxclli7Yzg/rXD4lrxl6CDG3i6szJ7hBSYayNP
UbZMYowmaOlCC5FRe0FCIFcbWWscNpAmppXQORwvKlb8FQmnVM4uyg71vlrzDSc+
WpCn+/Xx0rZiYpFlO2vcO5DBWcJJ
-----END CERTIFICATE-----
Generated at Sat May 4 12:12:18 2024 by rpki-client on console-ams.rpki-client.org