Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS211810.roa
File: AS211810.roa (raw, json)
Hash identifier: Ha5f2JhHNJ9pVh9I9gaD/+iJ/ACWDlr58V0Sik0xATI=
Subject key identifier: 27:7A:D2:7F:D7:6F:00:92:BA:E2:5E:AA:63:47:23:F3:31:88:EE:62
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 14A1E3118102D26EBEF4CA2DF0AF05D67533BDEF
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS211810.roa
Signing time: Wed 24 Jan 2024 17:44:24 +0000
ROA not before: Wed 24 Jan 2024 17:39:24 +0000
ROA not after: Wed 22 Jan 2025 17:44:24 +0000
asID: 211810
IP address blocks: 2a06:a005:a17::/48 maxlen: 48
2a06:a005:2480::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:a1:e3:11:81:02:d2:6e:be:f4:ca:2d:f0:af:05:d6:75:33:bd:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Jan 24 17:39:24 2024 GMT
Not After : Jan 22 17:44:24 2025 GMT
Subject: CN=277AD27FD76F0092BAE25EAA634723F33188EE62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:78:d9:f1:78:7a:a2:b4:b6:c8:0f:53:aa:e1:
04:75:bd:88:30:a6:7f:e3:0c:be:63:d4:41:2b:80:
b3:a1:53:b2:6f:78:3b:a3:42:5b:3f:32:51:ac:fa:
3e:7c:3a:13:17:a3:4b:fe:ea:b6:e1:91:61:79:d4:
47:43:fa:b3:43:3e:6c:b1:ca:23:39:ab:12:b1:14:
0f:9d:a0:f5:e2:8b:6e:ec:97:2b:e9:38:88:7c:f5:
e5:5e:87:54:50:69:b2:ef:3e:64:fe:79:9c:26:a7:
89:3b:17:cb:eb:a8:b2:9d:e4:28:51:67:ca:29:c3:
07:34:18:1a:bf:f3:7a:10:82:fc:a3:80:7c:d2:db:
7c:01:e1:b9:da:57:3b:24:cb:17:d2:bd:84:f2:89:
87:06:20:cd:69:34:4f:1e:3e:f0:db:cc:c2:d5:a6:
92:87:e4:7b:f4:d2:18:5f:09:8b:16:2a:aa:a4:3c:
09:05:8e:20:c4:10:cc:e2:92:ad:6a:67:8e:41:31:
8c:51:12:d7:02:2c:53:18:e6:d8:53:a6:94:f0:0d:
32:02:ea:20:7c:62:6b:1c:95:e6:6f:cb:ad:2d:7a:
59:c6:d7:c9:24:37:43:29:df:8a:68:e9:38:d5:a3:
6d:a3:42:36:d8:ea:65:c4:23:05:3d:b8:9a:dd:a8:
f8:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:7A:D2:7F:D7:6F:00:92:BA:E2:5E:AA:63:47:23:F3:31:88:EE:62
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS211810.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:a17::/48
2a06:a005:2480::/44
Signature Algorithm: sha256WithRSAEncryption
8a:fd:5d:18:5a:c0:e0:fd:e4:f5:df:9b:35:5e:e2:70:7f:f5:
01:a3:ca:d4:02:33:ab:7c:9c:9a:63:a1:31:09:a4:07:f0:de:
14:83:28:ba:00:80:33:9a:7e:4a:89:74:1f:26:26:5a:16:e7:
cf:43:39:2c:29:30:bc:d9:b6:e2:2f:4b:72:46:d4:c5:c8:dc:
21:cd:32:1c:72:7f:05:18:16:9d:07:1f:9f:41:95:5e:be:ae:
a4:39:c2:f6:ec:ec:16:b8:2d:7b:07:b6:e7:0e:77:15:55:72:
79:44:cb:19:f9:c1:0b:58:82:d8:17:25:94:8d:e7:fc:cb:88:
2c:bd:30:72:17:ed:46:b7:0e:f7:b9:7a:cd:49:12:1d:9a:42:
df:b0:df:30:74:64:1a:7f:24:67:f5:1d:3b:4f:73:de:d9:59:
ef:fc:f4:87:11:5b:fc:98:25:a0:10:4f:c6:81:b7:96:8a:a8:
2d:c2:ab:fa:1b:c1:37:be:47:6e:cf:55:a2:2e:55:ca:a3:f4:
ae:d1:21:7d:fc:c1:4f:02:1b:ef:a1:f2:13:28:6a:8a:fe:a9:
ee:6e:55:20:b0:fc:1a:0e:4b:b8:6f:17:5b:cc:8e:06:31:eb:
22:eb:83:3a:62:a0:56:03:0d:b3:5e:ae:9e:3b:3f:50:2f:68:
8c:f0:84:82
-----BEGIN CERTIFICATE-----
MIIE8TCCA9mgAwIBAgIUFKHjEYEC0m6+9Mot8K8F1nUzve8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzk5NDM4ZjFiMTc2MmFlZWY4YTM1Y2Y0ZTZjYmFlOTc2
OTliZDAyMDAeFw0yNDAxMjQxNzM5MjRaFw0yNTAxMjIxNzQ0MjRaMDMxMTAvBgNV
BAMTKDI3N0FEMjdGRDc2RjAwOTJCQUUyNUVBQTYzNDcyM0YzMzE4OEVFNjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCneNnxeHqitLbID1Oq4QR1vYgw
pn/jDL5j1EErgLOhU7JveDujQls/MlGs+j58OhMXo0v+6rbhkWF51EdD+rNDPmyx
yiM5qxKxFA+doPXii27slyvpOIh89eVeh1RQabLvPmT+eZwmp4k7F8vrqLKd5ChR
Z8opwwc0GBq/83oQgvyjgHzS23wB4bnaVzskyxfSvYTyiYcGIM1pNE8ePvDbzMLV
ppKH5Hv00hhfCYsWKqqkPAkFjiDEEMzikq1qZ45BMYxREtcCLFMY5thTppTwDTIC
6iB8YmscleZvy60telnG18kkN0Mp34po6TjVo22jQjbY6mXEIwU9uJrdqPjBAgMB
AAGjggH7MIIB9zAdBgNVHQ4EFgQUJ3rSf9dvAJK64l6qY0cj8zGI7mIwHwYDVR0j
BBgwFoAUeZQ48bF2Ku74o1z05suul2mb0CAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi83OTk0MzhGMUIx
NzYyQUVFRjhBMzVDRjRFNkNCQUU5NzY5OUJEMDIwLmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZVpRNDhiRjJLdTc0bzF6MDVzdXVsMm1iMENBLmNlcjBwBggrBgEF
BQcBCwRkMGIwYAYIKwYBBQUHMAuGVHJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv
cmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5ZC8yL0FT
MjExODEwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEH
AQH/BBwwGjAYBAIAAjASAwcAKgagBQoXAwcEKgagBSSAMA0GCSqGSIb3DQEBCwUA
A4IBAQCK/V0YWsDg/eT135s1XuJwf/UBo8rUAjOrfJyaY6ExCaQH8N4Ugyi6AIAz
mn5KiXQfJiZaFufPQzksKTC82bbiL0tyRtTFyNwhzTIccn8FGBadBx+fQZVevq6k
OcL27OwWuC17B7bnDncVVXJ5RMsZ+cELWILYFyWUjef8y4gsvTByF+1Gtw73uXrN
SRIdmkLfsN8wdGQafyRn9R07T3Pe2Vnv/PSHEVv8mCWgEE/GgbeWiqgtwqv6G8E3
vkduz1WiLlXKo/Su0SF9/MFPAhvvofITKGqK/qnublUgsPwaDku4bxdbzI4GMesi
64M6YqBWAw2zXq6eOz9QL2iM8ISC
-----END CERTIFICATE-----
Generated at Sat May 4 12:13:13 2024 by rpki-client on console-fra.rpki-client.org