Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS212242.roa
File: AS212242.roa (raw, json)
Hash identifier: 9WtFm6LjsB9/tTU/Gmrm9frb9z//HzojIl9Rc/U8uIc=
Subject key identifier: FF:9D:05:C2:30:1D:4D:B1:9F:BE:6E:8C:5C:E2:F4:02:26:CC:D7:13
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 6AF8B840DC160D8A9D09D90281714676349D0F01
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS212242.roa
Signing time: Tue 05 Nov 2024 03:40:08 +0000
ROA not before: Tue 05 Nov 2024 03:35:08 +0000
ROA not after: Tue 04 Nov 2025 03:40:08 +0000
asID: 212242
IP address blocks: 2a06:a005:2450::/44 maxlen: 48
2a06:a005:24c0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:f8:b8:40:dc:16:0d:8a:9d:09:d9:02:81:71:46:76:34:9d:0f:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Nov 5 03:35:08 2024 GMT
Not After : Nov 4 03:40:08 2025 GMT
Subject: CN=FF9D05C2301D4DB19FBE6E8C5CE2F40226CCD713
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:4b:61:f2:8f:a5:27:97:6c:54:22:6a:ba:68:
19:92:30:cd:cc:07:eb:b5:c0:14:8c:91:2a:f3:cb:
be:13:67:fb:f8:11:2e:40:c3:14:cd:48:30:3b:be:
dc:c1:49:29:8f:51:ba:2c:60:26:c2:aa:6d:72:a3:
92:e9:37:5d:9a:59:59:3c:a7:f5:eb:11:34:6e:84:
88:eb:74:5a:b3:38:67:12:fe:30:af:94:58:4e:d6:
4d:1d:90:d0:4b:f2:93:31:39:b1:b7:62:7a:9b:04:
41:5c:b6:53:25:1a:6c:2e:74:64:32:a4:b0:49:09:
f5:bc:c9:f9:9e:45:4e:71:54:53:e1:05:d1:d8:f1:
e5:68:e4:be:1c:bb:48:95:1d:8c:21:54:ec:b0:76:
c0:13:dd:ad:86:c0:84:1f:dc:4b:16:99:e8:b0:05:
6a:b3:44:65:af:3f:b2:16:e3:f6:2d:20:3b:c3:ff:
e5:48:e7:53:16:a0:22:02:4b:1e:52:fe:09:b5:a1:
f2:61:21:a6:78:b2:e5:db:b3:41:6b:4d:8f:8b:e2:
a4:39:93:c1:c4:b2:f0:4d:84:bc:6a:30:fd:77:0d:
13:de:ca:f9:3b:3f:c4:08:3b:15:93:99:8c:46:a9:
ec:7a:a2:c1:5e:e4:31:b5:89:ad:67:e9:43:9f:f7:
e5:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:9D:05:C2:30:1D:4D:B1:9F:BE:6E:8C:5C:E2:F4:02:26:CC:D7:13
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS212242.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:2450::/44
2a06:a005:24c0::/44
Signature Algorithm: sha256WithRSAEncryption
49:0f:12:63:1e:17:ed:ac:32:57:c9:6c:eb:d6:b8:8b:ce:9c:
95:2b:16:48:56:c7:0a:4e:b2:b5:6e:cc:60:13:9f:7b:8e:ad:
b7:96:c0:a2:f3:45:c5:c4:29:dc:55:e0:d0:3b:38:fc:cd:e8:
0a:f8:37:59:5b:de:11:12:f9:45:4b:c2:4c:b3:5d:23:35:1e:
66:5a:ed:cb:60:3c:e1:7d:fe:7b:aa:45:d1:ff:e7:fb:2b:08:
7f:1d:48:46:9c:30:6c:b9:20:7d:68:42:42:51:17:8c:7e:8c:
21:f4:af:7c:1e:84:ce:b7:35:0c:aa:4f:c0:23:aa:9e:c8:6a:
12:08:b6:37:cd:78:71:11:54:9f:8b:82:6f:d5:b1:f7:83:43:
10:dc:ef:66:09:0e:d6:17:56:aa:9b:5a:d4:a0:29:7b:f9:fb:
84:63:f1:d8:38:74:d0:4f:b4:5f:5a:d2:a3:8f:e2:61:d5:19:
b2:6d:97:04:a7:32:0e:fc:0d:18:81:e3:1b:b5:84:33:25:49:
ee:63:e7:6b:96:3c:a5:54:c5:90:15:0b:b1:22:2f:de:f2:f7:
66:2d:35:15:3d:3f:35:f1:c5:60:80:17:4d:7a:21:45:01:20:
be:88:31:9c:d3:57:dd:94:59:90:43:d8:85:45:ce:cb:54:fa:
ab:88:b5:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 22:04:25 2024 by rpki-client on console-fra.rpki-client.org