Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS212715.roa
File: AS212715.roa (raw, json)
Hash identifier: 4S5zsf4xtvbhbw/e0eG8Kkfzwqv2LhHFHGR7fVRd4oQ=
Subject key identifier: C2:93:45:65:83:6C:82:46:ED:21:03:30:A8:0D:F7:06:30:46:72:3F
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 162B6B09378A68D19C3A0E924D75C50FCAC666DD
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS212715.roa
Signing time: Tue 05 Nov 2024 03:40:10 +0000
ROA not before: Tue 05 Nov 2024 03:35:10 +0000
ROA not after: Tue 04 Nov 2025 03:40:10 +0000
asID: 212715
IP address blocks: 2a06:a005:1087::/48 maxlen: 48
2a06:a005:1088::/48 maxlen: 48
2a06:a005:1089::/48 maxlen: 48
2a06:a005:108a::/48 maxlen: 48
2a06:a005:108b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:2b:6b:09:37:8a:68:d1:9c:3a:0e:92:4d:75:c5:0f:ca:c6:66:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Nov 5 03:35:10 2024 GMT
Not After : Nov 4 03:40:10 2025 GMT
Subject: CN=C2934565836C8246ED210330A80DF7063046723F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:10:2b:21:07:af:0a:e7:8e:ad:05:95:e6:e2:
72:b7:7b:86:c4:fc:f2:31:16:46:19:6b:40:0f:87:
4a:21:76:40:c2:4c:aa:cf:d2:15:12:d6:d0:10:0a:
9d:35:60:26:09:bf:77:20:82:6c:3a:23:4f:b8:22:
01:6f:7d:17:9e:e2:46:ca:9f:62:f0:70:11:a1:02:
5c:d6:da:97:e2:b5:cb:6f:75:7b:a6:90:b0:2f:8b:
a7:54:91:65:e0:2f:7c:42:c4:0f:88:f2:4c:53:80:
8d:21:41:39:e6:7b:e0:15:2d:e6:4c:fe:e9:18:48:
ea:16:d3:10:5b:32:a1:b5:6c:27:4d:21:b4:4e:82:
fc:86:c1:d0:7e:76:ef:01:5a:de:5e:3a:ff:20:9b:
ae:7c:55:ea:98:c6:72:9f:09:c5:24:36:68:a4:12:
df:40:50:ff:47:f1:42:f5:dc:c0:bc:30:de:be:88:
71:e2:fd:73:78:1f:34:c2:96:f6:e7:29:da:f9:78:
be:e3:2b:c0:2b:a7:07:54:26:41:9a:77:ab:30:9c:
13:bd:d2:2f:9b:6a:0b:19:1e:a5:73:5b:1c:00:d8:
59:35:ae:25:13:1c:e6:e5:35:4c:b6:a9:1f:80:8f:
31:f3:47:b6:2f:d8:8d:4d:9a:58:c1:5f:8f:54:a7:
c0:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:93:45:65:83:6C:82:46:ED:21:03:30:A8:0D:F7:06:30:46:72:3F
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS212715.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1087::-2a06:a005:108b:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
d0:7b:a2:fe:2d:36:b9:9b:ec:c6:9a:e9:b6:34:49:e8:35:4c:
e8:f7:e2:ff:a3:a1:7f:b5:1c:50:98:dc:75:48:61:39:1e:f4:
9b:15:d1:ec:29:70:4f:fd:5a:72:9e:ec:2d:88:c2:e1:9c:2c:
fe:05:66:2a:da:92:78:5d:8f:6e:3c:24:0a:c3:a0:8c:c6:67:
53:9a:4a:cc:25:2d:fe:03:45:e3:9a:70:43:8f:13:0f:40:d2:
65:64:f6:ec:b6:c5:ee:a3:f2:21:32:45:b6:58:f6:01:9b:ef:
d7:c7:6e:a2:f1:7c:f9:d4:d5:a8:6b:8e:a9:03:d1:8e:d4:13:
b0:01:37:b6:c2:2f:c4:a4:0e:74:d2:eb:53:95:52:c4:92:ba:
3a:4e:84:c3:6a:1e:5a:0b:ea:e7:00:94:b9:36:8b:f3:a9:93:
28:94:0e:75:73:77:f5:3d:ce:3d:72:23:c5:56:8b:c8:e2:31:
80:db:a7:f4:a1:46:c9:16:f8:70:2e:33:3f:63:82:91:81:73:
b0:3e:00:20:96:d0:62:66:54:0d:cf:b3:89:5d:fd:07:74:fa:
aa:1d:12:f4:ed:88:e4:b5:d3:1d:a0:29:fb:61:38:f0:de:c2:
90:37:bf:10:3c:21:47:d0:9d:45:0f:8a:b0:a5:f3:f9:2a:82:
fe:35:54:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 21:33:12 2024 by rpki-client on console-ams.rpki-client.org