Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS212071.roa
File: AS212071.roa (raw, json)
Hash identifier: m8QPOcxfBmX4SMqAzDVhTDZU2V/8PUSqclTyHOGCm/s=
Subject key identifier: 67:8E:C9:64:A0:7B:3C:DD:71:C4:A7:B8:6A:78:FE:0D:BD:ED:DE:B2
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 57DF03E74BD5B18635EC14B7D20D02411BE385A2
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS212071.roa
Signing time: Tue 23 Jan 2024 17:44:24 +0000
ROA not before: Tue 23 Jan 2024 17:39:24 +0000
ROA not after: Tue 21 Jan 2025 17:44:24 +0000
asID: 212071
IP address blocks: 2a06:a005:12e0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:df:03:e7:4b:d5:b1:86:35:ec:14:b7:d2:0d:02:41:1b:e3:85:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Jan 23 17:39:24 2024 GMT
Not After : Jan 21 17:44:24 2025 GMT
Subject: CN=678EC964A07B3CDD71C4A7B86A78FE0DBDEDDEB2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:a4:90:42:bd:c4:ef:23:22:a8:e8:cc:24:ce:
ec:ec:82:5b:9a:df:69:89:e8:a4:09:ae:44:94:81:
40:49:48:a6:b9:ec:e4:94:ff:4b:f8:e0:44:ce:3c:
7f:4b:56:8f:e1:09:ea:af:24:a7:9a:9a:b2:88:0e:
bd:64:c7:59:01:3e:54:2d:ee:eb:68:76:9d:20:ba:
9a:87:46:98:fe:60:1d:5e:0f:0e:05:f0:a5:f8:a9:
4a:f2:3f:25:2a:a4:40:b4:fe:ef:09:0a:e7:02:b6:
f9:90:16:9c:2f:98:25:25:38:1a:1c:63:1d:c0:3d:
14:58:32:ad:3c:ca:60:6e:b9:1d:1f:11:66:48:b0:
df:f1:ff:67:09:ba:92:19:34:7a:47:ea:ab:cd:67:
fb:7b:b2:99:68:63:81:e3:69:54:e4:66:60:0c:28:
50:3e:f8:53:c1:5e:d9:db:7c:99:75:07:be:14:90:
ec:5e:57:ee:4e:f9:9f:7e:8d:0c:bf:12:4e:45:0b:
94:22:d5:80:e9:6f:46:8a:ca:95:d1:78:aa:c0:00:
4d:8d:1a:a0:32:85:20:43:ba:33:63:72:fb:e5:ca:
25:78:f0:08:2e:c2:5e:e3:b1:dd:b6:18:a4:ff:59:
97:12:86:7a:4b:a0:23:21:2b:11:6c:ed:89:65:f8:
f9:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:8E:C9:64:A0:7B:3C:DD:71:C4:A7:B8:6A:78:FE:0D:BD:ED:DE:B2
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS212071.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:12e0::/44
Signature Algorithm: sha256WithRSAEncryption
aa:f3:b1:81:1e:4b:7c:2c:57:95:fa:e4:db:d0:cf:c2:22:20:
25:f9:8b:50:d0:48:51:54:8f:2c:46:3a:a7:eb:cd:16:2a:cd:
2e:20:6c:c2:a0:22:bb:0e:69:28:4c:0d:79:c0:25:a9:3f:d0:
d7:a9:85:85:b4:c0:05:d9:a6:ac:a2:93:e6:29:53:e4:5f:66:
cc:b1:d2:b3:6b:39:ff:0a:0b:5f:66:cf:7e:42:84:c2:e9:5d:
f6:2b:18:39:e7:1e:2f:f1:ac:9b:3e:4b:63:80:75:b6:79:de:
37:33:2b:de:2b:75:b0:cf:e5:77:2e:c5:eb:9a:8d:1a:99:1e:
0e:6c:8f:66:5b:02:d5:5a:3b:2b:1b:ee:02:31:21:fa:bd:5e:
8c:f7:39:86:77:70:be:e2:56:68:85:3b:a9:49:86:ed:17:e9:
9e:2e:d5:ab:cd:f9:93:14:2d:f3:29:cd:f6:1d:fb:e5:0d:01:
75:58:37:26:4f:5d:88:f2:34:70:5a:ae:0a:61:5b:82:7d:08:
ba:d1:08:37:7b:28:29:9d:94:3f:d7:38:6d:fb:46:ea:0b:6a:
41:00:10:4c:3f:a9:12:63:0c:03:67:2c:25:3a:f0:3b:c3:66:
7c:c7:b5:78:f9:17:57:fa:68:50:48:c4:c0:04:8a:ad:54:09:
0f:80:e6:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:45:55 2024 by rpki-client on console-ams.rpki-client.org