Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS212164.roa
File: AS212164.roa (raw, json)
Hash identifier: q6wiZHJVchP3N3Bm+X8F4y5erxv9a+PEuseZnqOwg/Q=
Subject key identifier: AC:42:3C:44:FC:F8:0F:35:AB:17:1E:A6:5B:9E:FC:E8:DD:0C:00:AB
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 77993867CBC442B76994C46214CF13AB40EFDBE1
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS212164.roa
Signing time: Tue 05 Nov 2024 03:40:10 +0000
ROA not before: Tue 05 Nov 2024 03:35:10 +0000
ROA not after: Tue 04 Nov 2025 03:40:10 +0000
asID: 212164
IP address blocks: 2a06:a005:1167::/48 maxlen: 48
2a06:a005:1168::/48 maxlen: 48
2a06:a005:1330::/44 maxlen: 48
2a06:a005:25e0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 17:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:99:38:67:cb:c4:42:b7:69:94:c4:62:14:cf:13:ab:40:ef:db:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Nov 5 03:35:10 2024 GMT
Not After : Nov 4 03:40:10 2025 GMT
Subject: CN=AC423C44FCF80F35AB171EA65B9EFCE8DD0C00AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:cc:d1:2c:1f:8b:95:11:81:10:ba:6a:bb:10:
00:fe:19:c7:8c:5a:67:56:16:0c:f2:99:ec:db:fc:
1a:75:38:28:3d:21:26:f7:d6:61:c7:e0:bb:36:ab:
df:05:48:f3:5e:50:bb:5a:9d:7c:9c:8b:7b:a7:f7:
1b:2b:9c:74:79:c6:d2:4d:c8:ab:a5:dc:7c:05:0f:
a7:37:1b:f9:1e:f0:20:d5:a0:7d:e9:21:62:1c:e5:
79:47:81:53:7f:75:e0:68:f7:e4:78:17:ae:ee:93:
bb:78:f6:79:50:d0:7a:64:4f:7b:2d:a3:4b:15:9f:
8e:b9:b8:06:c6:58:63:e9:29:5b:80:fc:6e:02:33:
82:8d:5a:42:08:f0:1a:12:a9:1f:fa:8a:76:4e:a4:
71:44:e5:e4:4e:dd:15:54:e2:45:1f:ed:30:7f:e2:
99:be:35:32:94:b1:44:37:fd:85:ad:fc:80:c4:b6:
7d:4e:e1:ac:2a:12:f9:30:13:18:00:d0:76:c4:a9:
c0:46:c2:08:d4:07:27:47:89:44:b4:01:5f:7a:7b:
1d:10:44:4e:94:9e:e4:e3:1a:00:b0:77:2a:2c:06:
dc:b4:85:aa:0d:45:c6:8a:f4:d5:6e:3d:a4:59:7d:
58:53:05:5d:21:70:56:08:c7:a9:38:82:c7:0a:1b:
cd:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:42:3C:44:FC:F8:0F:35:AB:17:1E:A6:5B:9E:FC:E8:DD:0C:00:AB
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS212164.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1167::-2a06:a005:1168:ffff:ffff:ffff:ffff:ffff
2a06:a005:1330::/44
2a06:a005:25e0::/44
Signature Algorithm: sha256WithRSAEncryption
1d:46:63:c1:28:da:ea:87:89:b7:6e:32:a5:21:64:66:5e:74:
23:26:0f:2e:ff:7f:6b:39:56:a2:06:98:78:eb:79:c9:36:e3:
6f:0b:84:a1:7b:78:47:83:3d:bb:8a:be:b7:a6:7b:4b:f9:7b:
b1:d0:cd:4b:1c:87:e1:d0:06:3a:05:d9:60:12:15:8a:73:36:
c8:3a:ef:2a:2c:39:61:a5:0a:c4:09:01:39:30:b4:9d:5b:d5:
8b:28:88:86:97:60:68:d4:7f:e5:3c:98:05:e0:c6:e4:29:05:
05:b7:cf:24:f2:af:b6:a7:05:a7:f5:d8:42:2b:19:4b:c5:08:
f8:df:da:30:66:2a:08:1f:11:b4:9c:ce:63:3d:a5:d1:30:f8:
bd:26:83:f5:65:09:bf:64:ad:b5:22:cf:ee:91:a1:93:1f:d2:
b0:b7:e8:a0:ad:27:67:a4:fe:bf:9a:6b:cc:6e:6a:ab:59:32:
20:69:f4:9e:1d:a8:9e:57:77:25:62:30:87:6e:d3:7d:43:ba:
0b:25:de:a0:0e:93:1c:38:cf:d5:9a:31:ad:ce:19:a5:43:dd:
fb:4e:46:f7:b3:be:de:0f:5b:49:bf:4d:47:f2:b0:b6:63:a8:
7c:14:b1:19:26:2b:4a:dd:92:d8:98:c1:3d:bf:b9:aa:f6:58:
73:b1:5b:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:03:24 2024 by rpki-client on console-fra.rpki-client.org