Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS212948.roa
File: AS212948.roa (raw, json)
Hash identifier: Ed6gge5jLTrTD9Rc1X4F4YoMm3DLW+WjUCZyPgjsS2E=
Subject key identifier: B8:62:60:11:E2:42:19:C7:38:23:C0:43:B4:89:90:31:BF:BB:72:AE
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 7196393C4DCB66D2B02994FF9B7F183D23188B59
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS212948.roa
Signing time: Tue 05 Nov 2024 03:40:00 +0000
ROA not before: Tue 05 Nov 2024 03:35:00 +0000
ROA not after: Tue 04 Nov 2025 03:40:00 +0000
asID: 212948
IP address blocks: 2a06:a005:1509::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:96:39:3c:4d:cb:66:d2:b0:29:94:ff:9b:7f:18:3d:23:18:8b:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Nov 5 03:35:00 2024 GMT
Not After : Nov 4 03:40:00 2025 GMT
Subject: CN=B8626011E24219C73823C043B4899031BFBB72AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:63:c8:12:23:ec:f8:dc:1e:92:9c:4f:4a:74:
1c:cd:2a:bd:78:1e:9d:e1:1e:a1:10:a7:f8:70:b5:
e7:d8:40:f5:32:22:46:15:97:bc:6a:e1:78:a9:86:
2b:0c:01:02:36:45:4d:39:dc:16:63:80:61:b0:a6:
a8:75:43:a5:1d:22:3b:27:f1:68:00:02:75:a9:fb:
cb:56:3d:14:eb:ac:55:00:2d:28:74:ba:5f:ba:aa:
78:b1:f5:b7:38:28:a5:6f:27:62:23:1c:45:66:77:
2d:dd:3f:a2:a5:40:ad:e3:67:9c:f0:55:cf:20:0b:
d3:aa:75:f4:7e:12:36:23:bc:52:b6:ca:a8:66:9e:
76:57:39:41:da:40:b6:be:7a:75:83:57:60:f0:3c:
0c:af:10:dc:6a:5b:30:30:7c:94:2c:04:92:82:65:
d5:a2:2e:0a:45:18:0b:88:31:70:98:2d:65:f5:c6:
aa:21:02:39:e6:67:8e:8c:1b:f0:0a:4c:3a:a6:70:
d5:b5:d7:12:ae:9a:69:f3:20:ec:ac:99:2d:8f:90:
4c:46:83:cb:fa:df:cd:4a:50:71:6c:15:76:51:ec:
a7:58:07:fd:a1:00:e6:36:01:96:60:05:82:cb:04:
9e:76:e3:71:12:2b:05:4a:ae:91:30:03:49:77:4d:
68:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:62:60:11:E2:42:19:C7:38:23:C0:43:B4:89:90:31:BF:BB:72:AE
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS212948.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1509::/48
Signature Algorithm: sha256WithRSAEncryption
52:1e:a9:9d:03:e8:96:ea:49:ef:ba:48:71:9d:29:30:20:0f:
90:c4:f8:da:75:32:86:02:78:dc:42:6a:72:ef:04:c4:cb:97:
ce:2f:57:b3:86:bd:3e:4d:55:b1:2e:e6:d5:a1:43:cc:61:c5:
f6:2a:a1:28:70:32:86:dc:1c:d3:d0:27:a5:19:e4:9c:9f:a8:
a0:ab:15:3d:5a:35:7b:8c:a4:5d:d3:91:54:27:0c:10:b3:47:
3f:66:15:1d:07:98:f0:8c:a3:c7:db:97:db:fa:75:e8:3a:08:
25:16:26:b3:52:f3:36:8b:58:75:0b:b5:ee:7c:ae:d5:4c:e3:
68:3b:0c:7a:e0:b2:79:b1:bb:96:a5:c5:9b:19:1b:f1:0d:00:
ec:d4:71:1f:df:d3:6c:17:49:0b:8d:6f:e4:8f:01:39:16:dd:
58:e4:99:52:cb:91:a1:af:e8:f3:cb:65:24:13:76:32:70:63:
c7:41:02:9c:5a:2c:cd:ac:a1:41:b9:80:9d:2d:12:a2:e3:08:
91:8e:f9:0d:63:ef:08:7a:8b:b7:ea:03:ae:3b:06:ab:a0:6e:
75:af:ab:f7:c1:3c:2d:f3:d8:a0:4a:e3:dd:44:12:99:05:92:
cf:bb:98:a2:0c:c4:14:f5:49:26:8d:93:48:f5:8a:b5:aa:f9:
0d:ba:bf:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:13:36 2024 by rpki-client on console-fra.rpki-client.org