Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS212164.roa
File: AS212164.roa (raw, json)
Hash identifier: l9oHxjKJ2X55wu/gzRKJpTvrF++gEMml3VaCHASGu7k=
Subject key identifier: AC:0B:4E:53:3A:7C:9D:E7:6A:FF:B4:10:E3:E4:D6:14:45:E3:35:16
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 29B0F5E760492F6F2146B4DA023C17D0487F6933
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS212164.roa
Signing time: Tue 05 Dec 2023 02:44:13 +0000
ROA not before: Tue 05 Dec 2023 02:39:13 +0000
ROA not after: Tue 03 Dec 2024 02:44:13 +0000
asID: 212164
IP address blocks: 2a06:a005:1167::/48 maxlen: 48
2a06:a005:1168::/48 maxlen: 48
2a06:a005:1330::/44 maxlen: 48
2a06:a005:25e0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:b0:f5:e7:60:49:2f:6f:21:46:b4:da:02:3c:17:d0:48:7f:69:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Dec 5 02:39:13 2023 GMT
Not After : Dec 3 02:44:13 2024 GMT
Subject: CN=AC0B4E533A7C9DE76AFFB410E3E4D61445E33516
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:8e:57:aa:e1:ba:6d:70:b7:29:d5:f6:b6:49:
28:60:f2:08:fc:3e:4a:7d:a0:81:d0:3c:1d:ed:c4:
a6:96:bd:12:1c:d2:fd:27:0a:ed:d6:2f:fa:61:ca:
28:29:a4:61:a1:40:43:01:e3:eb:8c:c2:55:5d:d3:
1a:8a:73:28:c2:66:ec:cf:3d:7f:1b:f6:e7:f9:9d:
e9:a5:70:28:b9:d5:15:37:8a:7e:f4:d9:28:70:fb:
06:c8:c9:be:c1:24:9e:cd:12:d1:d8:cf:e5:ec:1e:
64:a1:90:c8:3c:f7:35:9f:24:ca:6b:20:0b:34:e7:
51:3e:53:13:70:49:05:f2:e4:16:9b:24:4f:e6:4b:
11:86:1d:2f:d4:40:a5:a9:a6:43:53:f1:cb:8e:9c:
bc:d6:f6:bb:fa:45:04:a3:72:8b:be:bc:9f:4e:d4:
a1:98:de:10:d7:63:cb:c8:87:f0:c0:40:0e:ad:1c:
75:5a:ae:d7:7d:bd:0b:58:b5:42:ef:fb:27:4f:85:
92:43:1e:6d:46:08:c9:f4:ac:5c:2c:09:a2:ac:e1:
b9:52:4e:ec:a0:48:1e:aa:b7:0b:4a:5f:bb:9e:63:
20:a2:b8:9d:f9:0d:f9:48:c1:67:7e:0b:81:34:4c:
38:86:76:61:fd:15:7a:06:53:27:05:75:e5:3d:6a:
3c:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:0B:4E:53:3A:7C:9D:E7:6A:FF:B4:10:E3:E4:D6:14:45:E3:35:16
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS212164.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1167::-2a06:a005:1168:ffff:ffff:ffff:ffff:ffff
2a06:a005:1330::/44
2a06:a005:25e0::/44
Signature Algorithm: sha256WithRSAEncryption
0c:36:1f:27:49:af:c8:54:fc:7f:a8:7c:a6:2a:09:cc:2a:0c:
77:a7:d6:65:f8:92:cb:e0:38:0a:6d:da:6b:62:55:43:30:4c:
4d:e3:8f:21:bf:20:bb:84:9e:09:30:b8:df:38:24:63:31:43:
91:78:94:f5:3d:67:99:ba:2e:99:06:e3:0e:64:b8:d8:9b:82:
55:5a:1f:da:d9:eb:99:38:c5:48:63:5d:d4:cd:64:ee:c7:a7:
f3:74:27:6f:be:2f:a0:3e:83:88:62:63:22:df:14:e1:13:82:
36:78:38:7b:dc:3b:3c:f4:38:15:98:50:45:c6:b6:99:52:26:
6f:1b:2e:db:47:e4:48:b9:87:07:59:ac:89:c1:79:04:c3:75:
3b:68:23:a2:47:8c:1b:f1:fd:5e:3d:f8:0a:0c:b7:ce:12:d1:
5a:9f:2d:45:98:13:23:6f:e1:fa:54:8b:c2:c8:39:92:ff:00:
f3:91:2f:0c:c9:38:cd:b5:cf:6a:28:86:3c:62:42:d6:76:54:
36:25:5c:4f:6f:fe:18:c4:0a:e2:3b:cb:3e:1d:09:cd:b2:38:
e2:f8:a6:d1:1a:b4:95:a3:cb:5a:99:8b:a2:61:62:2a:59:60:
30:4b:46:6c:9d:39:cf:6a:9b:5e:a6:c2:79:33:32:0b:6c:28:
c3:58:45:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 12:12:18 2024 by rpki-client on console-ams.rpki-client.org