Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS212252.roa
File: AS212252.roa (raw, json)
Hash identifier: pAJeC0WR9/I+M5LQYe6VhpE6L35znaJOwYcfEge8Ads=
Subject key identifier: 67:B2:9E:7A:BA:EA:B8:F1:B5:08:B1:A5:71:C5:B1:66:CA:8F:44:BA
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 54A365F92EDED3C853A6AB57D8C92FD3BAEB3DEB
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS212252.roa
Signing time: Tue 05 Dec 2023 02:44:17 +0000
ROA not before: Tue 05 Dec 2023 02:39:17 +0000
ROA not after: Tue 03 Dec 2024 02:44:17 +0000
asID: 212252
IP address blocks: 2a06:a005:2430::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Apr 2024 14:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:a3:65:f9:2e:de:d3:c8:53:a6:ab:57:d8:c9:2f:d3:ba:eb:3d:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Dec 5 02:39:17 2023 GMT
Not After : Dec 3 02:44:17 2024 GMT
Subject: CN=67B29E7ABAEAB8F1B508B1A571C5B166CA8F44BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:30:a2:f2:d3:d4:61:7d:99:f3:62:0a:56:6c:
80:15:26:99:fc:07:f9:1d:68:e9:cf:d3:83:6b:86:
e7:c2:c7:9a:dd:33:25:8f:a4:5d:46:4d:ce:04:8a:
89:21:8f:c9:a5:30:e2:73:b5:62:37:b0:63:c9:4a:
37:2e:17:7f:98:ae:93:85:7a:4c:76:31:e8:4c:bb:
4b:12:c9:be:5c:39:bb:04:fd:99:76:34:91:8d:6f:
6c:79:1a:11:a0:51:22:ee:df:e5:38:34:b0:52:78:
18:83:94:03:88:be:aa:16:62:30:6b:5a:08:a8:10:
84:f3:6c:42:25:8d:56:82:3a:c7:c7:ce:a7:7d:3f:
e6:15:cf:43:c2:ac:46:fe:f3:8f:34:d0:e0:f4:c1:
43:89:e0:a7:e1:c0:32:ec:73:f2:33:48:c5:7d:8c:
58:2d:d2:1a:01:1d:71:01:7f:ba:2c:9e:ce:8f:21:
54:a2:f1:23:0a:90:2d:ef:6f:10:d8:72:54:d2:a5:
c0:5d:17:d7:54:a1:77:20:01:93:c5:88:cd:42:88:
06:41:5f:0c:f5:07:ed:ea:88:d2:cf:e7:bf:75:81:
b4:5b:8d:66:d1:eb:fd:f7:c0:ae:01:65:f1:79:54:
3a:44:eb:28:9b:1c:e2:24:b8:c8:43:5e:ca:7f:eb:
53:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:B2:9E:7A:BA:EA:B8:F1:B5:08:B1:A5:71:C5:B1:66:CA:8F:44:BA
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS212252.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:2430::/44
Signature Algorithm: sha256WithRSAEncryption
2b:19:b1:8b:23:ce:57:59:69:95:6e:49:1e:56:8f:1a:75:3a:
7e:fe:42:6f:b2:be:9f:96:5f:41:3b:a2:14:5b:e4:52:24:4f:
9a:a3:07:6e:b8:8b:63:78:59:9d:6a:64:31:a0:a5:ed:21:a7:
6a:db:a9:f9:3d:d4:f2:6c:d2:58:3f:77:8e:77:51:69:20:95:
cc:3e:23:a5:e6:6a:c0:75:8b:8d:5b:01:80:93:17:fe:9e:27:
22:aa:4c:9c:41:6f:b4:51:5a:da:51:e5:3f:a3:37:cf:c0:fe:
80:15:6e:36:28:71:e3:5b:06:c5:05:31:54:0c:f1:83:1d:88:
4b:04:93:db:80:cb:e6:d2:ff:51:25:b9:17:fa:1f:59:f3:a2:
f7:87:0b:a8:9c:6d:15:23:67:63:16:62:bd:9c:51:21:1b:01:
af:a8:8a:ef:75:4c:f7:5d:d1:53:52:c2:94:c2:33:3b:06:2c:
8f:bb:f7:a2:f3:73:47:13:8e:8e:e7:b7:15:d4:c4:01:db:29:
3f:0c:1b:04:35:d7:61:2a:fd:a4:00:16:8e:9f:d9:fb:09:2e:
04:43:5e:b5:39:fb:cb:4e:28:c7:11:7c:a2:32:75:4b:37:79:
ca:2d:eb:a0:aa:e3:77:0a:74:7b:21:bd:f2:bb:46:71:42:8c:
39:f2:93:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 18 20:09:13 2024 by rpki-client on console-fra.rpki-client.org