Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS212049.roa
File: AS212049.roa (raw, json)
Hash identifier: 7ycE3pKNnm9hevSFPTLGFD44axF8lG/4fZBxoStnl6k=
Subject key identifier: FF:C3:BC:F2:57:49:B2:2C:86:25:DC:8B:58:F5:46:F3:A8:A1:55:17
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 1F88DE33C5CA2D80681EE437F38CAB7005CDCD7D
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS212049.roa
Signing time: Tue 05 Dec 2023 02:44:09 +0000
ROA not before: Tue 05 Dec 2023 02:39:09 +0000
ROA not after: Tue 03 Dec 2024 02:44:09 +0000
asID: 212049
IP address blocks: 2a06:a005:1083::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 14:41:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:88:de:33:c5:ca:2d:80:68:1e:e4:37:f3:8c:ab:70:05:cd:cd:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Dec 5 02:39:09 2023 GMT
Not After : Dec 3 02:44:09 2024 GMT
Subject: CN=FFC3BCF25749B22C8625DC8B58F546F3A8A15517
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:4f:96:47:0f:d5:c5:06:2d:e6:cf:db:81:cf:
77:b6:b9:1c:9c:1d:5e:f5:a3:af:6b:88:a1:67:89:
b4:3d:0b:0e:5c:b1:be:01:25:ce:c0:06:cd:ab:b1:
7a:63:6d:09:6e:d2:6d:ca:b6:4b:6b:07:d4:e3:c5:
0d:de:89:58:0c:38:d6:86:ea:28:cb:66:45:c4:c3:
ff:f5:2f:ff:c7:19:ae:3f:10:88:0d:58:b3:c4:a2:
fb:10:31:20:f8:e9:92:16:d8:7b:95:88:bb:12:e7:
62:77:69:13:75:c0:74:54:8e:83:e8:0d:cf:f2:d4:
84:41:ce:29:82:93:6b:5c:75:17:86:64:d2:29:02:
aa:57:e1:6b:d3:07:36:64:08:09:29:0a:9c:ce:d0:
90:b6:45:b6:b2:f6:43:8c:81:fa:93:a4:b4:e5:5d:
d7:ff:b8:69:42:2d:b8:3c:3c:25:85:08:fa:aa:84:
3c:6e:3e:6a:a4:75:6d:a0:02:2d:37:09:80:aa:4e:
a3:06:02:ce:12:94:37:04:59:d8:1d:6b:bb:88:d8:
bc:7a:e7:2c:20:03:32:63:d4:f4:3c:60:7b:94:e7:
21:40:e0:38:9c:73:a0:81:77:f8:58:8c:21:a0:de:
e6:15:cd:23:75:66:29:07:4e:43:32:dd:39:63:e3:
88:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:C3:BC:F2:57:49:B2:2C:86:25:DC:8B:58:F5:46:F3:A8:A1:55:17
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS212049.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1083::/48
Signature Algorithm: sha256WithRSAEncryption
1b:34:4d:c9:1e:20:1d:3c:00:34:10:14:a3:21:c3:2b:86:ba:
fb:6e:f8:39:50:f0:2c:52:c2:8c:9f:37:02:2d:d1:ea:f9:42:
70:24:aa:16:08:2d:05:9c:f7:bc:36:e2:2b:00:0f:39:90:87:
6e:38:ff:a9:67:aa:a3:9c:ca:e1:51:96:02:40:1f:d3:89:24:
12:16:93:69:13:fd:ab:1e:81:86:6c:8d:46:20:46:24:b9:3f:
29:7d:83:14:32:85:d3:89:a7:f3:60:d4:4f:da:89:2a:eb:72:
b3:ec:d7:ee:37:28:9c:b1:b8:42:70:57:1f:27:f0:18:f6:94:
ff:3d:f9:13:3f:23:92:05:05:84:d9:21:44:aa:30:a9:fb:b3:
bc:93:8b:62:6f:f4:a0:5c:d5:41:ba:70:e5:16:b9:c8:dd:ba:
a5:f4:6e:c7:d6:51:eb:22:01:94:d2:6a:af:92:6d:8c:c1:07:
a2:d9:2d:eb:07:41:9a:0d:36:b2:0e:c5:c6:ee:fe:71:d9:b5:
ed:ed:e8:41:82:4e:57:fe:ca:9d:a1:f9:b0:9a:1b:c6:92:49:
50:73:c1:01:34:46:3b:51:cf:a2:5d:4d:5f:cd:ce:6f:1c:6e:
97:a3:66:13:2c:d5:1b:b8:2c:f6:fc:aa:0c:7a:3d:f2:65:48:
f4:00:03:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 20:32:56 2024 by rpki-client on console-fra.rpki-client.org