Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS212173.roa
File: AS212173.roa (raw, json)
Hash identifier: KTrnW15DeqQOyCPW4aTLCOTmJuEMwltqbz0VqAHty2c=
Subject key identifier: 2D:25:A7:65:43:B9:B6:1C:08:74:EE:8E:B1:92:51:35:13:59:A4:63
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 6F522DE0093543A622078B696D5C49D5810E3388
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS212173.roa
Signing time: Tue 05 Dec 2023 02:44:14 +0000
ROA not before: Tue 05 Dec 2023 02:39:14 +0000
ROA not after: Tue 03 Dec 2024 02:44:14 +0000
asID: 212173
IP address blocks: 2a06:a005:24d0::/44 maxlen: 48
2a06:a005:2540::/44 maxlen: 48
2a06:a005:2550::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:52:2d:e0:09:35:43:a6:22:07:8b:69:6d:5c:49:d5:81:0e:33:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Dec 5 02:39:14 2023 GMT
Not After : Dec 3 02:44:14 2024 GMT
Subject: CN=2D25A76543B9B61C0874EE8EB19251351359A463
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d0:3e:d2:b2:71:d8:cf:87:3a:2f:84:ab:7e:
ca:08:71:06:7e:25:67:a0:a3:11:62:30:4e:19:37:
d0:e1:d3:8b:c3:d5:c4:1c:a2:ab:0c:0a:47:d5:11:
2e:66:3a:70:89:ee:15:81:6a:6f:ee:26:8f:f8:67:
82:fe:26:59:ee:93:fc:98:b2:0a:c4:61:7d:d1:9e:
75:71:86:d1:a3:8c:33:9b:ee:ef:46:83:01:26:bc:
a5:90:25:fa:af:b2:0f:14:51:41:c8:ca:52:03:20:
6b:49:f9:68:fd:0f:43:31:b4:86:41:ec:9c:57:e5:
4a:8a:eb:90:38:02:34:77:32:db:f6:60:52:08:fc:
a9:7c:92:61:91:0e:41:b5:dc:f6:c2:0e:55:cf:80:
4c:0b:93:2f:3e:be:e4:e3:7b:0a:64:f5:01:03:79:
4a:38:83:f0:b4:35:13:4e:93:41:4b:72:fc:d6:9d:
9b:23:36:7b:77:bb:c1:8e:7f:3d:46:9f:29:b9:08:
56:e7:a0:65:ad:5f:72:46:a4:fc:cc:1f:cf:fe:fa:
25:63:c9:b3:9d:8a:c5:b0:c0:93:f0:0d:d7:2e:db:
88:0e:d9:91:e3:2a:22:02:da:82:74:13:da:a1:77:
7c:b5:fd:f5:e7:cc:4f:40:45:5d:1f:3a:3b:b3:00:
a4:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:25:A7:65:43:B9:B6:1C:08:74:EE:8E:B1:92:51:35:13:59:A4:63
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS212173.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:24d0::/44
2a06:a005:2540::/43
Signature Algorithm: sha256WithRSAEncryption
25:2a:fe:fd:8a:63:4a:a1:b0:a7:2e:01:03:2e:7a:01:0a:68:
5a:33:cd:56:54:1d:98:da:1a:da:48:5c:8e:0e:8f:56:87:08:
66:77:f3:e3:33:85:63:c6:49:82:ce:67:2a:fe:c7:af:bd:5d:
64:bf:a7:9b:cc:f5:f7:15:61:31:8a:c8:90:a7:ed:04:ab:46:
be:77:4b:ea:29:62:82:cf:5a:6c:db:8f:7b:c9:cb:dc:0b:92:
66:f6:65:56:ce:6a:e7:26:62:fa:6b:c1:40:4a:66:5f:83:07:
69:cd:76:9e:27:e9:4c:32:69:b5:db:ff:78:d5:17:ca:8a:e0:
64:a0:6f:aa:68:79:d1:98:b9:2e:f6:c5:1f:bd:5e:af:65:35:
e9:df:cf:a5:2c:12:e7:02:f3:9d:7f:33:32:b1:23:aa:89:c6:
9a:0d:ef:b4:ef:c3:d8:46:98:13:8f:ce:fe:00:b0:3d:ed:2a:
3a:90:5e:f2:f7:b9:2d:01:fc:3d:d2:4e:97:5e:07:35:aa:7b:
7c:3a:d5:80:43:27:3c:09:56:8d:cf:4b:cf:e2:bc:24:62:f1:
f8:1a:32:da:73:4d:03:c4:38:30:7e:da:75:8c:e3:4f:5f:7e:
e6:e7:aa:8a:d6:be:97:e2:9d:7c:f9:c0:21:b4:c6:fb:78:01:
06:6d:9a:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 20:12:34 2024 by rpki-client on console-ams.rpki-client.org