Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS211754.roa
File: AS211754.roa (raw, json)
Hash identifier: U9cgy4qUeETMqgiTgqNLuZQxE3BGOvq8/97JSHGXAEY=
Subject key identifier: 3B:33:13:69:ED:E7:8C:4C:C3:5C:7E:0B:02:6D:27:A2:96:F6:52:E7
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 04A38DD4A2935475531742DAB820019A7D91DCA7
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS211754.roa
Signing time: Tue 05 Dec 2023 02:44:13 +0000
ROA not before: Tue 05 Dec 2023 02:39:13 +0000
ROA not after: Tue 03 Dec 2024 02:44:13 +0000
asID: 211754
IP address blocks: 2a06:a005:c90::/44 maxlen: 48
2a06:a005:ca0::/44 maxlen: 48
2a06:a005:cb0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 14:41:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:a3:8d:d4:a2:93:54:75:53:17:42:da:b8:20:01:9a:7d:91:dc:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Dec 5 02:39:13 2023 GMT
Not After : Dec 3 02:44:13 2024 GMT
Subject: CN=3B331369EDE78C4CC35C7E0B026D27A296F652E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:23:a5:c9:b7:cb:b6:7a:f4:8c:29:e6:91:7e:
72:67:ed:2e:45:c4:79:12:95:f9:5e:3b:38:30:6f:
e5:17:95:9e:b4:cd:43:98:c0:eb:b6:15:d7:4a:da:
1d:9b:b0:8f:bf:22:06:17:c5:7e:2d:66:4b:60:70:
cd:b0:98:34:0e:6d:17:dc:0e:d1:20:14:af:21:5f:
63:18:a9:fe:51:da:d4:eb:06:8a:b5:f8:77:f9:95:
17:33:78:26:56:8b:10:6c:44:f1:77:c2:a6:22:69:
6b:bc:b6:fd:4a:bf:da:ee:ff:e4:d9:e4:f9:c0:71:
3a:f3:51:1a:15:34:87:18:2d:d6:fc:96:5d:a4:76:
6c:76:4a:79:96:59:c0:d3:58:e2:20:34:bd:02:7b:
24:5a:03:70:fa:fe:83:3b:ce:6b:e2:27:6f:45:e4:
c1:2f:99:b4:ce:94:3b:53:e6:52:04:de:00:3d:45:
70:9d:48:b8:4c:62:91:5c:76:12:9a:6f:d3:95:40:
bd:7a:f7:02:68:c2:3d:0a:73:58:18:2b:42:75:cc:
13:df:18:8d:d0:a1:eb:1d:98:a5:de:ee:41:3d:82:
a7:f1:3a:2a:ac:6b:5d:82:fb:83:30:8b:a7:c6:7f:
00:1b:2d:09:12:72:f6:1b:59:c1:49:c3:7c:3f:5a:
f3:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:33:13:69:ED:E7:8C:4C:C3:5C:7E:0B:02:6D:27:A2:96:F6:52:E7
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS211754.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:c90::-2a06:a005:cbf:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
72:67:db:d6:e4:72:eb:f9:56:7d:ca:e4:39:3d:8f:5c:b4:70:
1d:e9:dc:88:f0:e7:d4:4c:79:b9:88:c0:c4:b9:fe:a5:5a:df:
ee:2a:26:f7:59:1b:77:af:ca:c9:f6:c2:17:db:50:7e:c6:eb:
ca:04:61:a6:29:d8:e1:a9:9c:e7:13:c9:ae:e3:ef:a8:d5:bd:
bb:1e:c3:7b:cb:d4:12:27:11:7d:92:08:66:70:61:fb:a3:96:
e6:4b:f6:9e:c9:f7:7b:e2:c3:74:02:d9:23:2a:fa:46:b5:11:
4a:0b:c6:ce:cd:c6:ec:ed:c1:37:dd:76:36:5b:eb:0f:f6:68:
8d:2e:5b:bd:47:d8:87:78:68:ea:df:b1:32:41:40:d5:e2:36:
86:97:4a:c8:c9:e3:13:44:9c:28:c2:f9:a9:9f:5c:7e:c7:28:
35:36:37:4a:18:46:bc:ef:00:3b:32:b5:ed:f0:5d:58:69:a5:
d5:1a:25:8d:43:70:a7:a9:bd:49:f0:4f:32:ba:ac:5f:65:72:
f1:41:fe:a4:04:7a:1d:a4:fb:19:10:c0:a4:bb:df:1d:3e:6f:
42:16:b9:b5:a6:48:46:6f:6d:51:c9:23:c1:56:0c:a1:76:65:
bf:00:d2:b0:3e:4a:88:98:3c:99:bc:99:0d:4c:b1:ef:28:fb:
ed:aa:1e:e5
-----BEGIN CERTIFICATE-----
MIIE8zCCA9ugAwIBAgIUBKON1KKTVHVTF0LauCABmn2R3KcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzk5NDM4ZjFiMTc2MmFlZWY4YTM1Y2Y0ZTZjYmFlOTc2
OTliZDAyMDAeFw0yMzEyMDUwMjM5MTNaFw0yNDEyMDMwMjQ0MTNaMDMxMTAvBgNV
BAMTKDNCMzMxMzY5RURFNzhDNENDMzVDN0UwQjAyNkQyN0EyOTZGNjUyRTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVI6XJt8u2evSMKeaRfnJn7S5F
xHkSlfleOzgwb+UXlZ60zUOYwOu2FddK2h2bsI+/IgYXxX4tZktgcM2wmDQObRfc
DtEgFK8hX2MYqf5R2tTrBoq1+Hf5lRczeCZWixBsRPF3wqYiaWu8tv1Kv9ru/+TZ
5PnAcTrzURoVNIcYLdb8ll2kdmx2SnmWWcDTWOIgNL0CeyRaA3D6/oM7zmviJ29F
5MEvmbTOlDtT5lIE3gA9RXCdSLhMYpFcdhKab9OVQL169wJowj0Kc1gYK0J1zBPf
GI3QoesdmKXe7kE9gqfxOiqsa12C+4Mwi6fGfwAbLQkScvYbWcFJw3w/WvOvAgMB
AAGjggH9MIIB+TAdBgNVHQ4EFgQUOzMTae3njEzDXH4LAm0nopb2UucwHwYDVR0j
BBgwFoAUeZQ48bF2Ku74o1z05suul2mb0CAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi83OTk0MzhGMUIx
NzYyQUVFRjhBMzVDRjRFNkNCQUU5NzY5OUJEMDIwLmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZVpRNDhiRjJLdTc0bzF6MDVzdXVsMm1iMENBLmNlcjBwBggrBgEF
BQcBCwRkMGIwYAYIKwYBBQUHMAuGVHJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv
cmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5ZC8yL0FT
MjExNzU0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEH
AQH/BB4wHDAaBAIAAjAUMBIDBwQqBqAFDJADBwYqBqAFDIAwDQYJKoZIhvcNAQEL
BQADggEBAHJn29bkcuv5Vn3K5Dk9j1y0cB3p3Ijw59RMebmIwMS5/qVa3+4qJvdZ
G3evysn2whfbUH7G68oEYaYp2OGpnOcTya7j76jVvbsew3vL1BInEX2SCGZwYfuj
luZL9p7J93viw3QC2SMq+ka1EUoLxs7NxuztwTfddjZb6w/2aI0uW71H2Id4aOrf
sTJBQNXiNoaXSsjJ4xNEnCjC+amfXH7HKDU2N0oYRrzvADsyte3wXVhppdUaJY1D
cKepvUnwTzK6rF9lcvFB/qQEeh2k+xkQwKS73x0+b0IWubWmSEZvbVHJI8FWDKF2
Zb8A0rA+SoiYPJm8mQ1Mse8o++2qHuU=
-----END CERTIFICATE-----
Generated at Fri May 3 20:32:56 2024 by rpki-client on console-fra.rpki-client.org