Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS212888.roa
File: AS212888.roa (raw, json)
Hash identifier: 1+axTXmYdJcZIDGlkcCdSVr2x3vx23FgzBLgcuVDmYk=
Subject key identifier: 85:FA:3D:10:04:E4:EC:31:C2:E6:37:4E:07:03:2F:C6:0B:5D:50:D7
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 676E9538DC81E9D5C21E0AB4398D69BBDC50CE8D
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS212888.roa
Signing time: Thu 18 Jan 2024 13:44:24 +0000
ROA not before: Thu 18 Jan 2024 13:39:24 +0000
ROA not after: Thu 16 Jan 2025 13:44:24 +0000
asID: 212888
IP address blocks: 2a06:a005:1::/48 maxlen: 48
2a06:a005:a::/48 maxlen: 48
2a06:a005:b::/48 maxlen: 48
2a06:a005:1990::/44 maxlen: 48
2a06:a005:2220::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:6e:95:38:dc:81:e9:d5:c2:1e:0a:b4:39:8d:69:bb:dc:50:ce:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Jan 18 13:39:24 2024 GMT
Not After : Jan 16 13:44:24 2025 GMT
Subject: CN=85FA3D1004E4EC31C2E6374E07032FC60B5D50D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:d8:55:79:c7:df:90:a7:fe:69:d9:56:ce:ad:
e8:40:bf:ee:b7:b1:a1:16:79:8a:dd:7a:70:76:4a:
d7:36:b9:74:19:b6:6f:02:83:62:c0:47:fc:39:43:
49:c9:c9:ea:02:b3:fa:17:42:e2:c2:18:45:fd:76:
93:56:be:a7:5c:02:20:b5:9e:23:3d:d8:16:12:33:
b9:b3:98:29:01:11:ad:b1:e7:d4:db:da:c3:9a:d9:
92:6d:72:73:95:d6:ce:45:25:5f:7a:dd:6c:7a:69:
ed:6b:e9:d4:07:6d:4d:b6:d8:37:ab:3f:76:e1:67:
b4:ea:ea:eb:d9:19:73:cb:87:c8:15:6a:9f:53:09:
d0:86:9f:ef:ad:d4:27:f0:bf:fc:e5:da:fc:30:bb:
32:98:bf:a9:95:06:77:2f:a4:6e:5b:fe:95:49:46:
dc:16:2b:7a:19:79:c4:71:10:2f:4f:4e:33:fe:ad:
2f:e2:65:7b:e7:06:b5:d0:fb:7f:20:c6:14:00:8b:
91:b6:07:51:c2:25:de:ee:7a:9b:8b:cf:58:cd:25:
07:b1:1a:44:f8:b5:de:a7:3a:4c:f2:c4:c3:73:39:
92:de:fd:e0:47:e3:5c:dc:b2:60:ef:9a:f6:49:20:
1e:ea:3a:ac:9b:df:ad:26:82:35:54:36:7f:d5:34:
9d:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:FA:3D:10:04:E4:EC:31:C2:E6:37:4E:07:03:2F:C6:0B:5D:50:D7
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS212888.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1::/48
2a06:a005:a::/47
2a06:a005:1990::/44
2a06:a005:2220::/44
Signature Algorithm: sha256WithRSAEncryption
85:2d:78:8d:10:e9:d2:f7:ad:0b:c4:ac:ae:4a:d4:1c:fa:67:
63:59:47:5f:aa:ca:42:06:28:29:6b:c7:16:76:28:99:58:f2:
2a:44:9e:c2:0a:aa:cb:91:c1:01:30:6e:77:b8:b6:fa:e1:8f:
da:77:cd:d6:c7:47:39:5f:56:37:29:1c:27:62:c2:09:57:5f:
91:fc:78:b3:2d:11:41:81:57:f7:6f:62:3e:54:87:b4:b3:95:
0c:12:5b:74:51:d2:66:79:2a:ab:dc:31:44:ed:09:13:1b:74:
cd:56:e5:60:ac:1c:43:78:d0:33:81:45:69:08:bd:71:2a:48:
4f:7a:c6:e7:f7:f3:7e:c7:15:c7:6b:6a:72:c2:ea:cc:ef:63:
56:fd:30:aa:19:16:9f:02:65:25:68:9d:7b:84:af:8e:cb:11:
f9:a0:9c:e2:09:34:7c:5d:a4:15:ab:45:16:a1:d1:b8:5e:8f:
22:3d:61:6b:8d:0b:21:23:a0:73:e2:08:39:4e:62:66:fa:cf:
e6:bb:33:fd:56:39:24:ad:d7:d9:14:ac:81:db:8b:8c:9d:c2:
4c:4a:9a:c7:a4:e3:98:9f:89:51:50:5a:ff:aa:86:a1:7a:ce:
93:9a:7b:a5:22:49:75:ad:78:da:3c:24:72:85:c2:94:02:6e:
4b:43:87:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 12:13:13 2024 by rpki-client on console-fra.rpki-client.org