Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS212336.roa
File: AS212336.roa (raw, json)
Hash identifier: AE8R5j/yYGeK1N0spUmZ8jAhy4irXdunuyVNru++St8=
Subject key identifier: 16:30:D5:F0:5C:9A:8B:5E:A9:DF:84:2F:2D:AC:27:FC:C8:96:3D:57
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 3026D6C67EE6D08A73A87249C154F4EE93CE3D65
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS212336.roa
Signing time: Tue 05 Dec 2023 02:44:19 +0000
ROA not before: Tue 05 Dec 2023 02:39:19 +0000
ROA not after: Tue 03 Dec 2024 02:44:19 +0000
asID: 212336
IP address blocks: 2a06:a005:5f6::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:26:d6:c6:7e:e6:d0:8a:73:a8:72:49:c1:54:f4:ee:93:ce:3d:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Dec 5 02:39:19 2023 GMT
Not After : Dec 3 02:44:19 2024 GMT
Subject: CN=1630D5F05C9A8B5EA9DF842F2DAC27FCC8963D57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:4d:3a:a2:46:16:ba:50:f6:de:6d:cd:d7:62:
ba:a7:8e:03:1f:0b:32:23:fe:51:29:7f:aa:1f:d2:
33:ce:a7:56:25:5d:61:22:72:f6:cb:a9:59:89:01:
7d:1d:c2:9a:86:ad:d0:c0:e4:ed:32:b2:10:33:e8:
de:ab:21:17:15:e1:bf:89:99:8b:49:d2:8f:fd:6a:
d2:f2:66:7c:a2:94:fb:9f:3d:ce:49:4e:2d:e8:86:
a6:b0:30:24:da:a5:38:55:cf:64:60:d2:af:6b:6a:
65:2b:46:ec:7a:9a:50:9c:c7:03:f3:0e:d9:54:b3:
f8:e1:2f:2a:e2:40:d5:08:c8:5d:2a:e6:aa:32:e8:
8e:24:f6:99:4f:59:56:1e:d9:98:49:3f:b2:18:89:
18:1c:cf:87:ea:55:8c:e2:19:86:50:f0:5b:e2:dd:
5e:a8:a5:a5:f8:28:ed:45:da:90:74:af:1b:46:38:
92:58:cf:9e:9a:53:40:8e:a0:ef:2e:68:ac:69:69:
2f:7c:f8:d8:63:da:8a:35:a4:a2:d5:3b:15:ba:98:
fc:01:98:14:f9:1f:a6:55:db:9a:44:d4:70:5e:16:
b0:b4:6a:6d:33:1f:18:c4:08:58:72:ba:8b:6a:88:
37:c9:6a:7c:bc:d1:8a:e8:1f:a9:5c:24:cd:07:2d:
26:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:30:D5:F0:5C:9A:8B:5E:A9:DF:84:2F:2D:AC:27:FC:C8:96:3D:57
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS212336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:5f6::/48
Signature Algorithm: sha256WithRSAEncryption
a9:32:81:ee:87:be:21:4e:76:43:2e:f4:a5:fb:d7:bb:05:a8:
81:39:9d:6b:43:be:75:8d:fe:3d:e2:39:bb:cb:07:e4:3f:f2:
5e:54:83:68:58:c8:22:2c:c6:64:a0:8d:02:8d:a9:f3:48:84:
c3:cb:fe:d2:c4:88:16:38:82:70:16:5d:58:ea:00:74:d7:00:
17:b3:20:b6:77:a9:3c:aa:e8:26:67:c4:77:cb:a1:35:b0:f1:
fd:ae:1a:4e:ae:44:56:63:43:29:8c:7f:74:d9:47:e1:6e:d2:
d2:3b:3e:2b:61:59:28:b7:5f:be:c5:fe:56:46:f6:f7:43:10:
54:cb:00:22:e6:e9:49:1f:eb:19:f0:19:fe:50:a7:25:17:02:
63:49:5f:d0:21:83:75:ab:aa:b3:a8:c3:6d:ca:0a:dd:1d:2e:
7c:ba:a7:0a:2d:bd:5b:7d:9d:79:38:04:67:45:f1:92:89:3b:
8a:45:cf:43:12:da:6a:13:05:da:81:e3:c9:ed:94:8b:8d:7b:
72:8a:a7:7a:2c:87:e0:72:2b:e5:b3:58:2c:cd:25:77:b1:08:
8f:67:c4:dc:a3:8b:6e:bf:5d:61:55:af:66:83:ce:56:89:b1:
e1:94:07:63:23:58:29:90:89:f7:5a:01:31:f1:59:2f:8e:41:
1d:6b:47:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 12:13:13 2024 by rpki-client on console-fra.rpki-client.org