Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS211540.roa
File: AS211540.roa (raw, json)
Hash identifier: 8vUaYHunTP6exwxScxN6PiSrMsl5kACfezjYuGjH0DU=
Subject key identifier: EE:F9:2E:58:D2:35:2C:EF:DB:4A:64:F4:6F:5E:11:BB:8D:FA:9A:9B
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 4C8933687BA979333CAFA891DF481FA91226C027
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS211540.roa
Signing time: Mon 15 Jan 2024 22:44:21 +0000
ROA not before: Mon 15 Jan 2024 22:39:21 +0000
ROA not after: Mon 13 Jan 2025 22:44:21 +0000
asID: 211540
IP address blocks: 2a06:a005:1803::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:89:33:68:7b:a9:79:33:3c:af:a8:91:df:48:1f:a9:12:26:c0:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Jan 15 22:39:21 2024 GMT
Not After : Jan 13 22:44:21 2025 GMT
Subject: CN=EEF92E58D2352CEFDB4A64F46F5E11BB8DFA9A9B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:95:f9:08:cb:89:2a:37:36:69:1b:95:60:63:
81:1c:ae:a8:e2:b7:23:34:fb:93:21:6d:48:75:ed:
52:8e:48:e0:89:11:36:0a:d1:aa:6a:13:5b:ee:10:
78:d2:dc:bc:a6:1a:39:cb:0b:8b:49:0a:73:a0:e9:
ae:d0:9f:71:f6:9f:bf:80:cd:b5:ab:aa:a2:4e:01:
88:05:1f:86:29:0e:14:97:de:a4:f0:d9:c5:05:0e:
a1:d1:59:76:01:94:ab:b8:6f:cf:45:5f:96:01:c7:
fa:a1:8a:9a:70:5b:b1:5e:e9:cf:93:44:52:2d:37:
17:7b:94:af:30:96:33:a8:17:ad:72:3a:57:10:22:
32:83:25:be:e0:26:b8:e9:58:c4:46:ca:14:3a:bb:
ef:61:73:9c:08:ee:56:5b:bf:0c:65:63:c0:e9:40:
d3:71:b6:b7:34:d5:62:08:79:7b:72:c3:0b:d4:59:
f1:89:89:b5:cb:67:58:65:ab:47:6f:ee:b4:f5:9d:
4f:9c:08:c7:f6:04:13:19:a3:11:ac:48:49:8f:7c:
b9:e0:52:fd:cc:ba:d3:96:ea:1e:ea:ab:03:01:31:
20:45:99:d3:a5:1c:0e:a5:b9:b7:ee:b2:4c:e3:84:
77:40:ee:10:1d:b0:8b:6b:e9:7d:0c:9d:43:d2:14:
66:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:F9:2E:58:D2:35:2C:EF:DB:4A:64:F4:6F:5E:11:BB:8D:FA:9A:9B
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS211540.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1803::/48
Signature Algorithm: sha256WithRSAEncryption
8f:bd:00:97:47:b4:33:9a:35:27:3a:f9:ea:c8:6c:e3:0a:4a:
76:bf:40:e2:df:2b:16:4a:95:eb:88:42:89:ec:d0:86:5f:f1:
58:d0:37:12:63:c9:c8:50:21:d1:f9:ea:b1:40:9a:f1:e1:fa:
68:71:60:b9:7f:ab:dd:82:34:bb:36:ce:94:95:7c:65:ea:61:
a6:19:46:9b:69:54:75:62:a5:f6:f2:d4:e6:9f:82:86:ad:8b:
4e:c1:70:7c:5b:91:3f:80:1f:04:62:b2:ae:fe:e7:ec:0c:42:
a2:dd:ca:94:bf:33:1f:02:8c:c2:7b:0e:3f:6a:a3:58:36:2a:
3a:45:de:55:6a:d5:1b:13:dc:77:5f:27:df:1d:93:16:83:27:
b0:0e:2f:70:7f:05:f5:0d:c8:ec:0c:f7:14:fb:b2:9f:f9:4d:
4e:b6:f6:34:55:17:f4:76:f2:f8:65:ee:bd:1c:6c:11:d0:b0:
f7:89:8a:38:8d:59:42:09:45:93:ba:41:ff:3c:8a:e8:4b:e4:
f5:6e:01:b2:ac:c1:d7:ee:b5:9b:84:1e:0a:36:47:f6:23:4b:
70:17:1c:3d:ed:db:c3:0c:0c:06:24:51:50:bb:e6:50:61:69:
83:47:6b:fd:4c:a1:d0:2f:c7:22:de:23:4d:7c:56:26:60:f2:
69:b5:9c:93
-----BEGIN CERTIFICATE-----
MIIE6DCCA9CgAwIBAgIUTIkzaHupeTM8r6iR30gfqRImwCcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzk5NDM4ZjFiMTc2MmFlZWY4YTM1Y2Y0ZTZjYmFlOTc2
OTliZDAyMDAeFw0yNDAxMTUyMjM5MjFaFw0yNTAxMTMyMjQ0MjFaMDMxMTAvBgNV
BAMTKEVFRjkyRTU4RDIzNTJDRUZEQjRBNjRGNDZGNUUxMUJCOERGQTlBOUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDplfkIy4kqNzZpG5VgY4Ecrqji
tyM0+5MhbUh17VKOSOCJETYK0apqE1vuEHjS3LymGjnLC4tJCnOg6a7Qn3H2n7+A
zbWrqqJOAYgFH4YpDhSX3qTw2cUFDqHRWXYBlKu4b89FX5YBx/qhippwW7Fe6c+T
RFItNxd7lK8wljOoF61yOlcQIjKDJb7gJrjpWMRGyhQ6u+9hc5wI7lZbvwxlY8Dp
QNNxtrc01WIIeXtywwvUWfGJibXLZ1hlq0dv7rT1nU+cCMf2BBMZoxGsSEmPfLng
Uv3MutOW6h7qqwMBMSBFmdOlHA6lubfuskzjhHdA7hAdsItr6X0MnUPSFGZTAgMB
AAGjggHyMIIB7jAdBgNVHQ4EFgQU7vkuWNI1LO/bSmT0b14Ru436mpswHwYDVR0j
BBgwFoAUeZQ48bF2Ku74o1z05suul2mb0CAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi83OTk0MzhGMUIx
NzYyQUVFRjhBMzVDRjRFNkNCQUU5NzY5OUJEMDIwLmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZVpRNDhiRjJLdTc0bzF6MDVzdXVsMm1iMENBLmNlcjBwBggrBgEF
BQcBCwRkMGIwYAYIKwYBBQUHMAuGVHJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv
cmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5ZC8yL0FT
MjExNTQwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEH
AQH/BBMwETAPBAIAAjAJAwcAKgagBRgDMA0GCSqGSIb3DQEBCwUAA4IBAQCPvQCX
R7QzmjUnOvnqyGzjCkp2v0Di3ysWSpXriEKJ7NCGX/FY0DcSY8nIUCHR+eqxQJrx
4fpocWC5f6vdgjS7Ns6UlXxl6mGmGUabaVR1YqX28tTmn4KGrYtOwXB8W5E/gB8E
YrKu/ufsDEKi3cqUvzMfAozCew4/aqNYNio6Rd5VatUbE9x3XyffHZMWgyewDi9w
fwX1DcjsDPcU+7Kf+U1OtvY0VRf0dvL4Ze69HGwR0LD3iYo4jVlCCUWTukH/PIro
S+T1bgGyrMHX7rWbhB4KNkf2I0twFxw97dvDDAwGJFFQu+ZQYWmDR2v9TKHQL8ci
3iNNfFYmYPJptZyT
-----END CERTIFICATE-----
Generated at Sat May 4 12:13:13 2024 by rpki-client on console-fra.rpki-client.org