Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS212703.roa
File: AS212703.roa (raw, json)
Hash identifier: PVq2X0D74Yt7EI5G11hvmoc/LQb+V+3aiY5OonRNmL0=
Subject key identifier: D6:A1:58:35:0E:0B:E0:66:FD:99:FE:F6:23:4D:B0:E1:C0:DE:49:7E
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 4EBE48716BAB93B6647FD5CAC4B10E1DE134C702
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS212703.roa
Signing time: Sun 05 Jan 2025 10:40:12 +0000
ROA not before: Sun 05 Jan 2025 10:35:12 +0000
ROA not after: Sun 04 Jan 2026 10:40:12 +0000
asID: 212703
IP address blocks: 2a06:a005:187c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 09:24:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:be:48:71:6b:ab:93:b6:64:7f:d5:ca:c4:b1:0e:1d:e1:34:c7:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Jan 5 10:35:12 2025 GMT
Not After : Jan 4 10:40:12 2026 GMT
Subject: CN=D6A158350E0BE066FD99FEF6234DB0E1C0DE497E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:6c:66:94:55:e9:37:a6:45:e1:45:0b:fd:06:
6c:8b:34:37:75:97:96:e9:8f:a4:d1:10:69:68:2e:
92:9d:a1:b0:29:55:ba:11:65:20:31:63:75:bd:f1:
b5:6d:03:4f:62:86:11:3f:59:33:d7:3f:3f:5a:72:
fb:01:6d:34:b0:d6:48:4a:9b:6a:90:c7:0d:9b:bc:
7a:e1:b2:37:35:11:97:8d:2d:11:e3:53:f5:d9:51:
31:30:28:18:39:ac:9c:44:86:52:d8:83:18:f5:b9:
25:8d:50:a2:3b:f3:0f:42:b7:fb:a9:dd:90:2d:1f:
9e:c2:7b:d1:df:56:b7:24:00:06:25:a8:0e:8e:16:
6b:e4:4a:0b:eb:45:fa:91:c2:3c:70:87:6c:a6:3a:
84:bb:ae:37:c6:8e:a8:b5:48:2e:74:4b:6d:a0:22:
0f:f4:6a:4d:dc:90:0e:fa:91:4d:3b:0a:4f:3b:4b:
fd:11:d3:73:ec:e3:a7:72:d4:ea:3f:45:5a:7a:30:
ed:4d:b3:f9:02:06:55:e9:04:9f:30:3c:96:f9:61:
4c:08:de:42:ca:87:c3:a6:68:d8:ec:c4:44:16:38:
35:8e:86:12:5e:99:91:f1:0a:3d:35:df:d1:6d:81:
97:5e:7e:a0:88:bd:56:79:fb:e9:46:10:82:d4:7c:
83:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:A1:58:35:0E:0B:E0:66:FD:99:FE:F6:23:4D:B0:E1:C0:DE:49:7E
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS212703.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:187c::/48
Signature Algorithm: sha256WithRSAEncryption
cd:ef:02:ab:94:c4:6b:b0:51:cc:88:2c:3a:ed:6f:27:48:0e:
d9:5b:97:14:85:8a:ee:49:a1:15:07:a1:8e:c0:53:df:4c:18:
94:58:53:31:62:fe:90:b7:71:b0:2d:de:51:36:21:d0:20:ba:
1c:12:2b:00:78:45:8c:4f:c2:5a:5c:53:7d:2e:a5:d9:f8:da:
2b:e4:f1:0f:d8:d5:13:34:e7:cb:ed:35:ce:a2:e6:1e:d7:35:
e8:47:3d:5d:02:af:f2:c0:29:44:7f:32:7c:f5:bc:a8:aa:3f:
9b:21:be:93:b7:d3:54:85:e5:d6:a1:99:93:ad:0b:c7:a8:67:
5a:d4:28:30:ad:bf:cb:5a:03:33:aa:ff:6a:81:63:43:12:3c:
f9:9b:80:80:9c:94:cf:03:95:9d:20:3d:26:ad:da:78:8e:90:
7f:a9:ee:c8:8e:4c:77:9a:07:e6:35:b2:a9:e7:d4:41:05:c8:
aa:c1:e4:8d:ac:14:ec:21:e9:64:14:e8:96:3b:52:16:d7:0a:
2f:b0:9a:f6:9e:4a:47:48:e7:c2:97:5c:b5:7a:af:96:ba:95:
42:3b:84:9a:b9:03:0a:3d:22:0d:69:63:38:00:04:b7:fa:e8:
43:15:ca:b0:c3:0c:b2:b2:dc:18:fa:4b:a4:8d:6c:39:7d:d3:
61:c1:a3:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:40:23 2025 by rpki-client