Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS212468.roa
File: AS212468.roa (raw, json)
Hash identifier: MdDj1x2fg2zkSYYnoOiZforEyHrkIF4IiK1cW2VTCK8=
Subject key identifier: B3:20:0D:AE:4E:8D:67:CB:7B:01:D2:08:7A:62:6D:7F:F6:47:06:F9
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 2A0D018A752582FF26A32F0C95A6BF931152DA96
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS212468.roa
Signing time: Wed 07 Feb 2024 14:44:24 +0000
ROA not before: Wed 07 Feb 2024 14:39:24 +0000
ROA not after: Wed 05 Feb 2025 14:44:24 +0000
asID: 212468
IP address blocks: 2a06:a005:1d58::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:0d:01:8a:75:25:82:ff:26:a3:2f:0c:95:a6:bf:93:11:52:da:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Feb 7 14:39:24 2024 GMT
Not After : Feb 5 14:44:24 2025 GMT
Subject: CN=B3200DAE4E8D67CB7B01D2087A626D7FF64706F9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:24:f5:9e:80:b0:9a:45:e0:f0:3e:aa:5c:c3:
62:f2:76:dd:f2:d6:13:52:b2:f0:89:5c:6c:6e:44:
d3:48:21:20:30:c5:d5:a5:be:4f:fc:a3:8d:31:3c:
8c:72:67:20:97:bc:24:55:37:9d:34:25:69:d4:c5:
02:d9:13:91:58:10:6d:5a:6b:19:57:4a:dc:ee:01:
a1:ef:1e:32:6f:a9:ca:de:8a:0c:78:b5:d7:ca:0d:
10:68:51:26:69:cc:d8:30:40:da:20:f0:f2:52:26:
b6:05:d0:02:f8:ab:5c:aa:33:3a:b1:05:e2:47:3f:
49:6b:f7:04:d5:38:95:5b:f6:dc:75:5c:0e:97:e8:
32:93:34:91:fd:1a:94:96:e8:0f:70:c9:7b:da:0b:
b6:5e:95:ee:73:ce:e9:e1:b2:8e:f3:74:13:88:47:
64:65:5c:af:e3:14:ee:48:bd:06:74:20:61:91:d5:
8e:cf:c9:71:66:8b:ca:f3:9c:67:07:f2:8b:cc:53:
be:70:8b:50:8e:de:3f:79:75:0a:58:56:43:9c:9c:
3f:3a:f2:26:c5:4b:fa:b5:eb:e5:56:3d:0d:b2:6b:
22:97:b0:6b:d5:c4:ca:ac:0d:e6:8e:e0:05:96:61:
3c:9e:e0:69:6a:53:df:5d:4a:7f:37:42:98:b9:da:
d7:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:20:0D:AE:4E:8D:67:CB:7B:01:D2:08:7A:62:6D:7F:F6:47:06:F9
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS212468.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1d58::/48
Signature Algorithm: sha256WithRSAEncryption
60:c1:d7:79:b2:2a:ca:24:aa:4c:20:b3:a0:df:88:77:ec:ab:
8f:85:10:a6:60:e2:95:77:05:dc:f9:82:1a:ba:14:37:47:c5:
bd:76:96:dc:4c:db:a9:59:46:d5:1c:19:6d:9f:0c:44:4b:2a:
ef:11:f8:54:fc:ea:0e:d0:05:98:a2:a5:6c:c1:d9:a9:8f:c8:
c2:ef:32:7f:24:21:c9:6e:e1:2b:da:22:b8:5f:35:af:b6:f0:
e7:31:58:2a:b5:2c:9d:7f:ca:2b:ec:24:41:33:4c:95:a2:af:
ce:fb:f7:10:a9:20:b4:b9:bf:da:61:f4:20:cf:c2:5e:16:38:
59:3e:ed:6b:0a:d7:eb:6f:4b:cf:52:7d:57:f0:93:30:6c:91:
0c:a7:50:1d:f4:3f:07:11:b7:0a:63:de:d1:d3:40:4c:23:0b:
a5:40:4b:1a:70:ae:18:a5:1a:f6:cd:46:5e:d1:88:e5:ae:5c:
70:73:e9:7b:4a:0b:8e:18:eb:39:d5:6c:e8:54:6f:6c:f2:f2:
bd:ec:1b:92:f6:28:52:bb:25:16:4b:8d:3b:e2:a1:5c:2d:41:
05:26:f9:0e:b0:07:42:0b:4b:c6:f4:b2:9b:6d:51:71:bc:2e:
38:e8:1d:95:88:f6:cb:d9:fc:e1:cf:f2:4e:b1:14:4e:ab:ad:
1a:53:1c:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 12:12:18 2024 by rpki-client on console-ams.rpki-client.org