Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS212888.roa
File: AS212888.roa (raw, json)
Hash identifier: IkK5ujWOnaexXKzs4xR+LfDwDxwVQR/qwNL98dflftM=
Subject key identifier: 5F:B4:44:EF:EE:73:8D:EB:44:5E:E6:04:03:E3:17:4A:C4:48:E3:B2
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 225299A198A9F569B469A0EC0B343C72BE46F83C
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS212888.roa
Signing time: Fri 13 Dec 2024 02:56:29 +0000
ROA not before: Fri 13 Dec 2024 02:51:29 +0000
ROA not after: Fri 12 Dec 2025 02:56:29 +0000
asID: 212888
IP address blocks: 2a06:a005:1990::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 09:24:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:52:99:a1:98:a9:f5:69:b4:69:a0:ec:0b:34:3c:72:be:46:f8:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Dec 13 02:51:29 2024 GMT
Not After : Dec 12 02:56:29 2025 GMT
Subject: CN=5FB444EFEE738DEB445EE60403E3174AC448E3B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:35:7f:53:53:d5:ed:39:5e:af:f8:8c:fb:1b:
53:d5:0b:8e:9f:37:1c:88:77:98:2a:17:0e:11:6a:
9b:b5:93:05:17:85:78:31:49:20:fc:d2:9f:cf:a5:
22:3b:fb:c6:38:3b:15:7e:b9:80:df:6f:10:ad:4c:
9f:83:a5:16:b0:7c:6e:95:48:97:1a:0b:d6:9d:b4:
3b:0d:7b:4e:a7:80:d1:13:15:07:ed:18:fd:23:99:
85:17:c5:e2:b7:63:01:ac:b1:a2:3b:8d:bf:26:db:
15:bf:ba:15:79:b2:1a:3a:da:6c:ae:ac:5e:be:17:
4d:ce:f1:32:b4:d7:b1:6a:96:ae:71:02:a1:7e:16:
46:a3:e8:a5:f8:5f:8f:e3:74:6c:73:fe:1b:d4:ed:
71:77:b0:5e:68:0e:2f:28:7c:06:d4:80:cb:fa:2c:
a9:3d:79:ea:ab:01:08:eb:15:e6:e7:2b:0a:77:d0:
4d:a3:f7:dd:0c:c6:78:f3:f9:ff:7b:f2:af:e3:26:
63:04:67:6e:b6:77:19:06:08:e5:25:cb:13:dc:88:
56:16:d9:0d:ec:f7:6d:3d:32:20:9e:c1:ec:48:c9:
7e:e4:65:d2:5f:05:1f:06:df:a3:08:c4:45:b5:cf:
23:be:89:60:20:ad:98:0d:c0:23:59:98:c3:5c:ee:
cb:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:B4:44:EF:EE:73:8D:EB:44:5E:E6:04:03:E3:17:4A:C4:48:E3:B2
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS212888.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1990::/44
Signature Algorithm: sha256WithRSAEncryption
3f:4a:16:78:a3:67:8e:ec:45:84:02:23:c9:77:55:a4:f8:58:
d9:a0:d6:a4:6a:19:b0:2e:5c:d9:da:0e:b6:50:e3:71:93:35:
ef:aa:57:0b:75:5f:c6:f5:07:7a:a3:04:e1:b3:b7:77:e1:25:
77:d2:2c:9d:2b:06:86:6b:78:2b:ab:12:b3:59:e4:81:af:66:
ed:95:b2:30:02:f5:74:86:57:cb:59:f7:af:cc:71:19:c2:97:
c4:c4:54:a5:9c:4a:45:7f:84:99:da:5c:75:2a:c2:d1:7a:1b:
e1:21:e1:df:26:66:91:16:74:98:5b:87:91:a4:f6:d4:9f:38:
c1:97:2d:d7:92:f2:92:c3:64:fc:35:9c:6e:05:e4:3a:7b:26:
95:ce:fc:64:9f:b2:54:41:59:f3:b3:ac:dd:7e:2f:8f:34:70:
f8:4a:6b:8b:17:b6:ef:21:88:d2:49:19:dd:f3:67:a4:ef:33:
55:27:0f:ad:43:36:da:9a:ed:c6:49:7a:f0:e4:2c:a3:f0:b9:
53:6a:73:e9:72:2c:5d:61:4e:7d:04:2d:57:14:94:d8:92:43:
76:b2:a8:ec:ff:58:42:b8:1e:ed:ae:58:46:37:25:b5:93:1d:
15:54:3d:74:83:1a:70:08:66:39:fe:62:94:2a:68:64:9b:63:
43:16:23:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:41:22 2025 by rpki-client