Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS211575.roa
File: AS211575.roa (raw, json)
Hash identifier: nUvsAPO7pQ1kiwqRvqxfn2dK0x/YTrTVEXHGaBtD5qA=
Subject key identifier: 9C:0A:A0:7A:85:CC:1C:7D:39:C5:83:CB:76:22:7A:4A:80:B1:A5:E4
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 4EE2A6D21BBF9C8893AD0A5987ADA77EA4B9411A
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS211575.roa
Signing time: Tue 05 Dec 2023 02:44:11 +0000
ROA not before: Tue 05 Dec 2023 02:39:11 +0000
ROA not after: Tue 03 Dec 2024 02:44:11 +0000
asID: 211575
IP address blocks: 2a06:a005:436::/48 maxlen: 48
2a06:a005:650::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 14:41:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:e2:a6:d2:1b:bf:9c:88:93:ad:0a:59:87:ad:a7:7e:a4:b9:41:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Dec 5 02:39:11 2023 GMT
Not After : Dec 3 02:44:11 2024 GMT
Subject: CN=9C0AA07A85CC1C7D39C583CB76227A4A80B1A5E4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:77:4a:d2:d3:f9:b7:a2:60:47:9a:54:bd:3e:
89:70:f2:e1:b1:b8:7c:07:d7:e6:c4:e0:c4:e6:9d:
bb:23:6b:1b:6f:76:4c:a9:ea:4d:16:94:71:34:11:
be:56:bb:e3:56:72:1d:55:86:31:23:c8:f3:06:ae:
90:2f:59:3d:97:b0:0a:f7:e1:54:86:7c:3a:13:ea:
82:7f:fe:8b:a2:44:8c:ee:91:09:af:f3:94:db:2d:
8e:9a:d9:41:25:8c:f4:66:f9:d5:65:44:7e:7a:2b:
a2:b6:41:f7:40:bd:10:53:b3:f2:c3:55:26:9b:71:
1e:fc:7d:b5:08:fb:1c:31:60:be:8d:f3:4b:6d:d2:
1c:e7:1e:60:81:3f:be:4d:e7:71:1e:27:b4:55:b2:
b4:f4:5b:37:c7:7a:43:c4:95:f2:ae:66:3d:8b:34:
31:22:c5:13:51:12:40:51:65:92:23:03:78:e9:ce:
16:41:55:b6:6f:3c:46:1b:d7:c6:e1:f1:bc:92:50:
c6:eb:73:8f:ff:c0:94:06:2f:6c:ae:1c:61:00:00:
9c:3f:e5:69:3b:41:88:95:06:f1:00:64:99:46:08:
99:6f:86:63:df:1c:a4:7f:73:dd:fd:b7:60:99:b2:
23:f6:af:cd:41:4e:84:8f:42:0b:b7:39:84:cd:c3:
6b:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:0A:A0:7A:85:CC:1C:7D:39:C5:83:CB:76:22:7A:4A:80:B1:A5:E4
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS211575.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:436::/48
2a06:a005:650::/44
Signature Algorithm: sha256WithRSAEncryption
64:f6:f9:b0:c9:5c:96:ed:d8:d8:86:bd:93:17:04:ec:11:00:
7d:80:e9:b6:62:a5:14:7a:aa:f4:b3:5f:0f:87:95:4b:5a:11:
96:39:21:20:ab:14:42:5a:3c:fa:39:15:15:fa:13:2b:28:66:
3e:d8:67:29:96:9f:ed:6a:4b:f4:69:53:b8:8e:4f:bd:43:db:
a3:06:6b:ea:ba:25:f1:b4:23:59:b8:5b:8d:00:c2:7e:30:72:
cf:0e:fd:d3:52:25:00:83:a6:f7:44:fa:67:ae:9b:33:8a:ed:
67:02:ce:d8:80:28:53:c1:16:01:48:e9:0b:e6:ad:c2:ce:66:
3c:f3:dd:2a:42:d1:17:a2:98:cd:0a:04:45:24:81:86:5a:42:
81:0d:2e:25:ae:ce:f5:a2:7e:49:3e:f4:dd:a5:c1:18:5f:fc:
46:80:5f:08:9b:c0:68:bf:2c:84:f7:bf:72:d4:6f:5c:cc:56:
ec:06:82:f8:d7:80:55:f4:88:fb:f9:cc:1d:34:45:0c:4c:75:
b9:96:10:2e:f5:7b:55:31:63:43:bb:59:8f:7d:26:38:de:ed:
0b:85:15:ad:3a:14:e4:a7:eb:f6:b8:6f:f0:7d:dd:14:6d:2c:
cd:6b:f0:35:95:cf:7a:f3:1d:f0:76:c6:9c:d3:d6:4e:27:9c:
bd:89:9c:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 20:32:56 2024 by rpki-client on console-fra.rpki-client.org