Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS212895.roa
File: AS212895.roa (raw, json)
Hash identifier: suByTVE7l5j0NGnOecW7Jvszl+4xfYgM9eaGLk2Ke2c=
Subject key identifier: 96:C3:45:0A:BB:CD:04:E3:1B:67:1F:11:9C:F3:FF:83:DD:92:D0:17
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 5B3717FA89C080AB027B117ABCAF6634E3FBBE9A
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS212895.roa
Signing time: Tue 05 Nov 2024 03:40:06 +0000
ROA not before: Tue 05 Nov 2024 03:35:06 +0000
ROA not after: Tue 04 Nov 2025 03:40:06 +0000
asID: 212895
IP address blocks: 2a06:a005:5d0::/44 maxlen: 48
2a06:a005:6d0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:37:17:fa:89:c0:80:ab:02:7b:11:7a:bc:af:66:34:e3:fb:be:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Nov 5 03:35:06 2024 GMT
Not After : Nov 4 03:40:06 2025 GMT
Subject: CN=96C3450ABBCD04E31B671F119CF3FF83DD92D017
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:1a:3e:e3:a7:7a:d8:22:52:48:7f:ec:87:83:
10:63:82:3f:01:72:a6:87:38:34:58:9d:13:7b:08:
91:a1:6f:35:e2:81:55:0a:87:b8:ff:85:9e:9c:6b:
46:9b:32:69:31:b1:85:05:c7:11:f4:a9:16:75:07:
06:6d:bc:5c:08:e9:ce:38:2b:45:80:14:ca:06:a7:
87:58:41:2a:50:15:ad:a2:ac:b2:3d:54:67:45:e1:
ca:08:0a:84:62:e9:cc:62:58:10:35:a5:50:be:7d:
b3:24:57:8c:a2:ea:ed:64:e2:6c:46:ee:3c:5a:7f:
2e:66:9b:21:0f:0c:af:36:00:36:67:04:55:f1:ca:
f9:52:02:83:a1:80:86:9f:3d:23:e4:19:1e:13:75:
65:52:df:b1:8c:d5:ae:6a:9b:8c:c0:6f:22:3b:1b:
2e:46:ad:a2:e8:3b:25:1a:bb:df:e7:6e:99:8e:f4:
c2:e1:8e:18:64:20:07:16:84:dd:ce:9e:84:a7:58:
e7:6a:9f:37:97:40:74:b9:0e:f4:83:d8:19:b7:ee:
66:b8:1b:35:80:6b:df:ad:88:4e:e5:93:56:77:f1:
d2:5f:7f:4e:f9:db:51:71:87:5c:f4:2a:e2:31:ea:
4e:fc:24:5d:8e:9a:15:aa:01:ed:0a:51:a2:07:20:
79:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:C3:45:0A:BB:CD:04:E3:1B:67:1F:11:9C:F3:FF:83:DD:92:D0:17
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS212895.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:5d0::/44
2a06:a005:6d0::/44
Signature Algorithm: sha256WithRSAEncryption
41:2e:fd:8a:f5:b2:0b:9b:de:25:28:4d:17:72:69:72:5b:2b:
2a:ef:83:bc:44:c2:a5:41:c1:7e:e2:41:bf:da:ab:79:c2:de:
0e:4e:3d:2c:ac:b7:a9:f0:48:fc:ff:08:4a:2e:f7:f8:97:4c:
9f:3c:35:ad:ca:33:6e:5e:f2:3b:2d:04:40:47:60:41:b6:57:
c9:eb:ef:57:e4:85:1e:ea:64:e3:78:ae:3e:9e:5c:96:fe:25:
36:04:72:1c:42:0c:3f:48:2f:41:a2:58:d1:45:cb:da:7a:37:
2b:c3:b8:d3:29:25:27:7c:dd:38:56:ac:fd:8e:bf:66:6a:0e:
2d:5e:8e:5b:c9:29:61:45:37:e1:0b:17:7b:9e:b0:53:dd:8e:
74:31:6e:13:d5:48:b3:7e:6f:9a:c4:8c:3d:0f:76:6f:b8:f8:
ce:17:3e:3c:15:53:56:d0:11:88:8d:27:c6:8a:3f:61:af:3a:
2c:a4:e1:53:76:f8:b8:c3:d6:4b:04:a7:b5:ab:7f:dc:33:15:
86:6b:f9:61:9b:81:27:a1:28:e9:bd:8d:fb:7f:c9:62:0c:6e:
22:13:bc:4e:e9:db:7b:9e:6d:77:59:5c:8f:24:71:24:82:9a:
a2:b4:d9:1c:69:7c:2d:1a:7e:57:b6:f3:84:07:30:e1:1f:9e:
cc:64:57:4c
-----BEGIN CERTIFICATE-----
MIIE8TCCA9mgAwIBAgIUWzcX+onAgKsCexF6vK9mNOP7vpowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzk5NDM4ZjFiMTc2MmFlZWY4YTM1Y2Y0ZTZjYmFlOTc2
OTliZDAyMDAeFw0yNDExMDUwMzM1MDZaFw0yNTExMDQwMzQwMDZaMDMxMTAvBgNV
BAMTKDk2QzM0NTBBQkJDRDA0RTMxQjY3MUYxMTlDRjNGRjgzREQ5MkQwMTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYGj7jp3rYIlJIf+yHgxBjgj8B
cqaHODRYnRN7CJGhbzXigVUKh7j/hZ6ca0abMmkxsYUFxxH0qRZ1BwZtvFwI6c44
K0WAFMoGp4dYQSpQFa2irLI9VGdF4coICoRi6cxiWBA1pVC+fbMkV4yi6u1k4mxG
7jxafy5mmyEPDK82ADZnBFXxyvlSAoOhgIafPSPkGR4TdWVS37GM1a5qm4zAbyI7
Gy5GraLoOyUau9/nbpmO9MLhjhhkIAcWhN3OnoSnWOdqnzeXQHS5DvSD2Bm37ma4
GzWAa9+tiE7lk1Z38dJff07521Fxh1z0KuIx6k78JF2OmhWqAe0KUaIHIHnTAgMB
AAGjggH7MIIB9zAdBgNVHQ4EFgQUlsNFCrvNBOMbZx8RnPP/g92S0BcwHwYDVR0j
BBgwFoAUeZQ48bF2Ku74o1z05suul2mb0CAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi83OTk0MzhGMUIx
NzYyQUVFRjhBMzVDRjRFNkNCQUU5NzY5OUJEMDIwLmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZVpRNDhiRjJLdTc0bzF6MDVzdXVsMm1iMENBLmNlcjBwBggrBgEF
BQcBCwRkMGIwYAYIKwYBBQUHMAuGVHJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv
cmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5ZC8yL0FT
MjEyODk1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEH
AQH/BBwwGjAYBAIAAjASAwcEKgagBQXQAwcEKgagBQbQMA0GCSqGSIb3DQEBCwUA
A4IBAQBBLv2K9bILm94lKE0XcmlyWysq74O8RMKlQcF+4kG/2qt5wt4OTj0srLep
8Ej8/whKLvf4l0yfPDWtyjNuXvI7LQRAR2BBtlfJ6+9X5IUe6mTjeK4+nlyW/iU2
BHIcQgw/SC9BoljRRcvaejcrw7jTKSUnfN04Vqz9jr9mag4tXo5bySlhRTfhCxd7
nrBT3Y50MW4T1Uizfm+axIw9D3ZvuPjOFz48FVNW0BGIjSfGij9hrzospOFTdvi4
w9ZLBKe1q3/cMxWGa/lhm4EnoSjpvY37f8liDG4iE7xO6dt7nm13WVyPJHEkgpqi
tNkcaXwtGn5XtvOEBzDhH57MZFdM
-----END CERTIFICATE-----
Generated at Fri Nov 22 08:13:36 2024 by rpki-client on console-fra.rpki-client.org