Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS211575.roa
File: AS211575.roa (raw, json)
Hash identifier: C89z7UqaS3mp2v/QuhjMKhOXm49zijPP/SpJES/vOs0=
Subject key identifier: 04:71:E7:F7:35:A2:DC:F3:76:B4:AA:79:AE:60:EB:0C:AE:11:B6:8C
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 4D2FCBC40E12181C2A7E54B7829102B3B41FAE3B
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS211575.roa
Signing time: Tue 05 Nov 2024 03:40:06 +0000
ROA not before: Tue 05 Nov 2024 03:35:06 +0000
ROA not after: Tue 04 Nov 2025 03:40:06 +0000
asID: 211575
IP address blocks: 2a06:a005:436::/48 maxlen: 48
2a06:a005:650::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:2f:cb:c4:0e:12:18:1c:2a:7e:54:b7:82:91:02:b3:b4:1f:ae:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Nov 5 03:35:06 2024 GMT
Not After : Nov 4 03:40:06 2025 GMT
Subject: CN=0471E7F735A2DCF376B4AA79AE60EB0CAE11B68C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:82:b6:cf:92:36:e1:8b:27:32:90:ba:a5:9e:
1d:0f:f0:93:d9:57:d6:a7:23:06:a1:cd:aa:fa:46:
d9:61:a2:5e:4a:a3:53:5b:ba:d7:02:f1:ee:71:a4:
96:56:d5:26:be:75:39:16:5d:77:ea:62:ac:bb:20:
9b:b4:e8:96:61:28:4f:55:4b:86:1a:69:59:b1:bb:
54:bf:9a:19:48:ea:20:64:fa:9f:8b:0f:b9:49:26:
e8:d1:bd:9b:01:81:42:e4:83:db:c1:fa:57:a3:a7:
e6:de:cb:2f:95:41:24:74:3c:3d:f8:88:6b:f2:6a:
bf:8a:27:76:d0:ab:a9:0e:ff:b3:07:e8:4f:de:d1:
ee:45:d1:e7:43:71:1b:74:0d:aa:7d:06:91:25:31:
5d:c9:02:43:a6:09:3f:b4:54:8c:f9:c1:52:17:40:
53:cb:6f:1e:e5:61:ef:69:ed:33:5e:11:06:54:68:
15:12:33:9a:84:e8:71:37:31:5c:c8:ed:9f:61:b8:
bd:b0:6f:32:02:4a:38:cd:1d:d8:2c:35:b5:7b:dc:
11:2b:83:19:55:6f:80:e9:8c:65:b8:19:d2:42:80:
83:c3:85:dd:ef:1f:d8:3a:73:45:98:78:1d:f2:2c:
2e:45:c2:f6:9e:ed:09:4a:54:42:5d:76:d0:18:3b:
67:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:71:E7:F7:35:A2:DC:F3:76:B4:AA:79:AE:60:EB:0C:AE:11:B6:8C
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS211575.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:436::/48
2a06:a005:650::/44
Signature Algorithm: sha256WithRSAEncryption
14:4f:59:aa:09:a6:50:13:af:e0:7a:fe:db:b5:dd:39:fb:2c:
bb:20:db:b1:52:9b:c8:12:05:0b:08:c1:23:f5:c3:e3:34:58:
ed:be:36:b6:09:f2:18:e0:75:aa:63:d0:56:fe:ed:40:5d:bc:
ea:ca:7c:00:74:b3:8e:9f:27:81:83:c3:91:a9:d2:5e:8a:9e:
b6:8f:ed:73:61:da:bb:98:af:cc:12:72:74:c8:d4:7b:6e:c8:
3e:fd:f0:c2:b2:b6:64:d9:c9:0f:65:c3:68:da:b4:a9:3d:44:
6c:47:c6:f9:d6:cc:cf:e4:79:70:03:e6:95:b6:5b:58:14:49:
f2:43:79:5d:dd:f2:fd:e4:de:69:b4:78:93:f9:76:1b:e0:43:
28:c0:c8:53:99:d4:a6:9f:30:f0:d6:67:a1:bf:40:65:c9:be:
16:f0:0d:92:ed:bf:4d:a1:88:d6:f3:68:cd:be:04:c3:b8:06:
ca:3d:c0:0e:4a:e1:d3:ef:8d:68:e8:2c:86:2c:24:76:7f:bc:
b6:d0:d9:6c:13:1c:14:6c:5d:aa:91:bf:fb:d1:6f:1c:d4:46:
eb:24:49:42:4b:ab:f7:35:8f:a6:bf:bd:f3:be:9f:e7:a3:14:
11:5e:83:73:c0:76:8c:d8:31:76:8a:ca:49:51:6a:f7:3b:4d:
25:df:48:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 21:33:12 2024 by rpki-client on console-ams.rpki-client.org