Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS212336.roa
File: AS212336.roa (raw, json)
Hash identifier: fhqjOjEBPlCeg3w3nhmSiljjJgz5+BCfH2c+FAkedZg=
Subject key identifier: 7F:FD:A2:8F:25:93:23:BF:7E:E3:DD:A2:CE:F4:0E:5B:9B:E7:5A:84
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 61D504E0EBB52924BADF12261B80E10B19491B96
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS212336.roa
Signing time: Tue 05 Nov 2024 03:40:07 +0000
ROA not before: Tue 05 Nov 2024 03:35:07 +0000
ROA not after: Tue 04 Nov 2025 03:40:07 +0000
asID: 212336
IP address blocks: 2a06:a005:5f6::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 17:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:d5:04:e0:eb:b5:29:24:ba:df:12:26:1b:80:e1:0b:19:49:1b:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Nov 5 03:35:07 2024 GMT
Not After : Nov 4 03:40:07 2025 GMT
Subject: CN=7FFDA28F259323BF7EE3DDA2CEF40E5B9BE75A84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ff:88:9f:d1:89:6a:41:85:c1:51:fe:2e:46:
99:95:9c:d1:29:00:bd:ab:1c:38:8a:f7:9b:28:8e:
ff:ad:ad:f5:bb:4a:6d:26:d6:6a:81:f1:9f:13:e6:
55:03:d3:21:8b:86:07:6e:1f:6f:7f:ed:d7:9e:cb:
05:ca:47:0e:32:ea:61:99:f9:80:88:38:8c:6a:0e:
ca:9a:28:55:27:e1:b0:11:d4:cb:dd:e3:53:66:4a:
dd:31:ff:3a:c6:87:06:67:03:aa:bb:2b:93:61:90:
5b:37:02:b0:9c:8a:df:59:80:e9:68:28:64:94:03:
ac:22:74:1a:af:c1:d9:14:d4:b0:ab:92:d3:a9:bc:
01:8a:5d:1e:e6:2d:4f:d9:7e:53:fc:75:7e:c3:99:
ec:67:81:8d:75:44:92:13:89:eb:2b:58:b7:01:3b:
51:af:b6:c3:fd:14:94:6a:95:50:1d:b2:6a:5a:b3:
0f:cb:3e:2a:62:df:15:00:25:3f:ea:d8:8d:61:62:
16:b0:7b:5f:e0:4f:55:1d:86:ea:c8:4e:e9:33:31:
66:ec:9c:03:2c:aa:eb:bb:c8:0f:c1:18:5d:60:95:
ce:af:ad:24:14:c0:59:33:c9:6a:c1:7a:0c:af:02:
b7:8c:5b:03:8c:81:f7:b2:61:84:c6:38:16:e0:05:
20:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:FD:A2:8F:25:93:23:BF:7E:E3:DD:A2:CE:F4:0E:5B:9B:E7:5A:84
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS212336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:5f6::/48
Signature Algorithm: sha256WithRSAEncryption
55:af:65:05:cf:c5:17:a7:be:f7:10:be:47:25:c6:43:fb:cc:
e7:df:60:72:92:aa:17:db:21:b6:38:20:75:7d:cb:5b:34:2b:
84:99:a2:fa:60:30:52:62:c2:e7:9f:0f:30:b2:b9:b4:aa:ef:
88:c0:c3:6a:6f:e1:5c:57:79:f9:54:69:70:c6:27:06:c0:fc:
52:f6:06:a2:8f:6b:49:92:28:bc:e1:31:5c:96:8d:6f:36:9f:
f3:a4:22:52:b9:8f:04:7c:3e:df:43:38:9b:b7:c6:8e:00:b2:
d7:27:0e:52:bb:6f:1f:08:56:f5:29:6f:5a:e4:f3:f4:9a:9a:
2c:37:db:c1:fc:da:be:2f:6e:9b:6d:be:78:c3:12:7c:7a:81:
56:24:1f:19:d7:e5:d2:eb:36:a4:26:d0:35:8b:cb:9e:fd:fa:
4a:bf:2b:d0:95:25:d0:14:66:c0:54:8d:c4:93:ba:0f:6b:d7:
be:4d:3b:ba:f6:90:8c:41:c2:40:06:5a:53:87:50:63:4a:cd:
03:84:6e:5c:14:45:5d:fb:18:74:73:0b:fb:ec:54:cf:9f:16:
e6:ce:6a:d2:54:35:e1:db:57:8f:13:3e:f2:67:e4:ef:18:6c:
71:fa:08:50:4e:d9:c6:c1:bc:e7:77:0e:d3:0f:6d:12:a0:87:
af:e2:01:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:03:24 2024 by rpki-client on console-fra.rpki-client.org