Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS212049.roa
File: AS212049.roa (raw, json)
Hash identifier: EhnfvJ3JMOJeqN6H6gwWuCxQtMursMbHthYO2TBj4sk=
Subject key identifier: 46:10:DE:0A:2D:24:B5:1A:46:BF:80:DC:16:8A:83:86:AF:07:3D:93
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 38DD843EA6B202F40F06B9D32EC5228E7EEC1BFF
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS212049.roa
Signing time: Tue 05 Nov 2024 03:40:07 +0000
ROA not before: Tue 05 Nov 2024 03:35:07 +0000
ROA not after: Tue 04 Nov 2025 03:40:07 +0000
asID: 212049
IP address blocks: 2a06:a005:1083::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 11:21:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:dd:84:3e:a6:b2:02:f4:0f:06:b9:d3:2e:c5:22:8e:7e:ec:1b:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Nov 5 03:35:07 2024 GMT
Not After : Nov 4 03:40:07 2025 GMT
Subject: CN=4610DE0A2D24B51A46BF80DC168A8386AF073D93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:8e:fb:22:b9:02:ff:f8:f5:17:c8:55:85:24:
35:b8:3c:b1:ef:8b:25:2a:23:0b:15:45:3f:a8:33:
c8:6b:1a:86:c6:cb:67:6d:fb:eb:8e:7e:8e:41:99:
f0:ba:b6:d8:86:10:8d:9d:b2:4b:7e:5c:1d:1d:29:
29:52:e8:39:72:68:45:e0:6f:c0:cb:93:20:da:7b:
5d:d1:f1:39:5c:98:44:02:4e:f0:24:67:88:05:bd:
c7:0f:01:3c:b6:39:d9:93:23:48:03:d1:2a:d1:a3:
18:d3:cf:69:bd:93:df:d2:6b:17:ac:fb:a6:04:02:
49:d5:a2:11:a9:05:03:3e:54:db:36:0f:79:9d:47:
fa:f4:91:37:83:05:61:aa:d6:98:5b:de:a4:c3:c1:
59:3d:ac:e9:94:4b:23:17:8c:9f:67:e6:f9:59:c0:
de:02:3d:bb:9c:d3:5d:13:08:06:39:43:1f:39:8e:
90:92:05:d0:55:ab:5d:75:04:e6:7f:f2:d4:ec:55:
81:dc:05:e4:59:94:a1:40:59:5a:96:16:fb:40:a0:
92:9c:ff:4c:b0:32:3b:b6:90:aa:08:47:dd:b8:dc:
5e:cb:81:48:6c:2a:51:dc:90:2c:07:7b:be:8c:e0:
b1:e5:a3:bf:b6:98:73:7b:f9:81:02:5c:fd:85:e5:
6b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:10:DE:0A:2D:24:B5:1A:46:BF:80:DC:16:8A:83:86:AF:07:3D:93
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS212049.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1083::/48
Signature Algorithm: sha256WithRSAEncryption
99:3e:fb:3a:fc:87:7a:9a:18:29:50:5a:a5:87:fb:d6:9a:9b:
1a:bd:f6:d2:5d:d6:4b:0c:fb:8e:2c:57:65:c4:fa:2c:ba:56:
92:c9:37:f5:ad:86:70:75:66:58:e3:67:f5:d4:30:92:62:cf:
42:3e:b0:0b:45:94:40:f1:28:29:d0:90:d3:50:ec:33:69:49:
df:b2:9b:43:d6:53:d0:27:d4:9d:be:bb:00:44:37:3d:2b:01:
30:3f:f4:b4:80:f2:3a:af:7b:15:ef:72:ac:31:46:63:6a:b2:
9a:72:73:f8:9f:29:5d:08:06:28:94:6c:d2:40:da:4f:70:81:
cf:c6:b7:24:2c:aa:bf:fb:82:20:2f:0f:b6:c8:51:a8:d0:e7:
71:6d:5b:15:da:f0:5f:64:99:4f:9e:12:29:ae:ab:a9:a9:57:
11:03:ac:7f:de:ee:a3:e0:de:86:be:e7:92:7a:c2:97:b4:61:
f6:4b:eb:d3:d7:04:7b:3c:b0:51:03:60:6c:65:99:74:6e:53:
0a:db:d2:06:c3:3b:cc:62:f1:51:f0:8c:9a:5d:8c:5d:13:31:
94:ea:53:22:92:91:b9:dc:f3:01:dc:4e:6d:0a:da:c7:ee:b5:
4c:0d:09:8d:df:ec:72:6d:ab:93:80:45:ed:d7:12:03:e7:32:
f9:b4:38:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:43:53 2025 by rpki-client