Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS212793.roa
File: AS212793.roa (raw, json)
Hash identifier: dUQZWYFCyflFXPZDIJTMvMKF048+zR5XUP9tRhBvDUM=
Subject key identifier: 65:5F:F3:11:CC:87:22:02:71:B6:69:B0:9E:61:29:4E:74:F1:CD:39
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 26E575904AD12B93E1C88D500D70A9235A45CBE0
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS212793.roa
Signing time: Mon 05 Feb 2024 23:44:24 +0000
ROA not before: Mon 05 Feb 2024 23:39:24 +0000
ROA not after: Mon 03 Feb 2025 23:44:24 +0000
asID: 212793
IP address blocks: 2a06:a005:b69::/48 maxlen: 48
2a06:a005:15da::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:e5:75:90:4a:d1:2b:93:e1:c8:8d:50:0d:70:a9:23:5a:45:cb:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Feb 5 23:39:24 2024 GMT
Not After : Feb 3 23:44:24 2025 GMT
Subject: CN=655FF311CC87220271B669B09E61294E74F1CD39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a1:f3:fa:c3:b1:44:c8:7e:fd:92:c4:5c:79:
65:a1:e3:a3:48:16:69:82:f3:ef:b9:3a:05:2f:30:
db:df:67:80:c7:e3:8f:54:ce:7c:8c:4e:43:59:83:
d2:75:64:31:73:df:11:50:e8:64:71:b8:f1:ce:22:
8d:86:7c:0d:a0:20:19:fb:b7:3c:c9:a7:44:c8:69:
99:db:5c:f3:8a:5f:01:3b:51:7a:3f:61:58:44:92:
11:39:6c:ed:3a:8c:fe:37:ab:ee:cd:9e:cd:fe:e3:
63:0a:41:4f:bc:55:16:52:49:ea:16:fb:00:d8:6e:
98:d2:84:eb:b7:31:f5:6a:96:86:6b:63:70:af:02:
89:8d:8b:76:c0:49:c7:b4:44:f5:60:4e:be:95:ad:
09:8e:8f:1f:9a:fa:e4:8e:f3:90:62:f1:01:28:8b:
75:6a:b4:83:65:be:f1:a2:64:35:43:65:1e:89:d1:
b9:f3:1c:b3:97:28:66:7a:15:16:01:9b:64:09:df:
94:46:12:23:41:57:4a:48:3e:03:7e:1f:bb:b1:b3:
9e:9a:9d:b6:03:e9:c6:c1:fa:5b:73:25:70:26:5d:
a2:90:e5:67:b9:a6:4d:f0:f3:27:74:5d:19:19:89:
d5:2d:c1:20:3b:14:53:df:0c:c6:6e:7e:00:4f:82:
01:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:5F:F3:11:CC:87:22:02:71:B6:69:B0:9E:61:29:4E:74:F1:CD:39
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS212793.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:b69::/48
2a06:a005:15da::/48
Signature Algorithm: sha256WithRSAEncryption
89:47:94:63:0b:7c:eb:a5:51:e6:ea:e8:09:47:9c:f0:3a:03:
21:53:94:0d:cb:12:ef:91:4a:cd:d0:94:1b:ff:5e:e8:bd:3a:
d4:04:08:dc:ed:e8:86:64:63:d4:7b:79:64:30:83:d3:0d:e8:
f2:62:e1:c8:67:aa:fa:73:a0:e9:5c:2e:da:78:f6:bb:45:cf:
f9:95:b9:4b:47:8c:57:a5:59:53:dd:18:86:b2:aa:be:cb:fb:
24:9e:4c:e6:39:11:b3:93:aa:3a:93:a6:4e:ec:e1:9f:e1:5a:
bf:47:72:0c:d6:c0:5e:13:c3:ac:63:67:41:52:e2:59:d0:5b:
bb:0e:b4:76:14:7c:ba:4a:68:01:8b:66:4f:6e:57:31:4c:3f:
c1:aa:03:7e:0f:eb:e1:16:0f:ad:51:50:31:01:53:d3:57:8c:
6b:cc:00:0f:65:4b:28:63:17:cd:72:0b:a6:f0:64:3a:7b:f2:
55:11:d9:6f:c9:ec:ab:00:a8:30:dd:fc:3d:65:51:fd:b4:fa:
56:b0:a3:be:c3:88:83:40:16:24:9f:44:2b:50:fa:7f:11:0b:
3a:f2:28:77:86:46:b6:35:1a:ab:bb:3e:5d:5a:1d:d7:52:1e:
66:97:3b:28:37:f3:32:9e:da:d1:82:c1:63:a0:30:87:f8:0c:
a7:d1:fb:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 21:33:12 2024 by rpki-client on console-ams.rpki-client.org