Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS212948.roa
File: AS212948.roa (raw, json)
Hash identifier: 98wBOFR78q0BLzXh1GaO2JqEHjw9cKv55r+JuTTOSUg=
Subject key identifier: DE:68:7D:1E:43:EA:27:EE:95:80:21:34:00:4B:2C:D2:57:4F:1F:4E
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 24A2B9688D08E07D9289A98A568F3ED1C6F318E6
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS212948.roa
Signing time: Tue 05 Dec 2023 02:44:13 +0000
ROA not before: Tue 05 Dec 2023 02:39:13 +0000
ROA not after: Tue 03 Dec 2024 02:44:13 +0000
asID: 212948
IP address blocks: 2a06:a005:1509::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:a2:b9:68:8d:08:e0:7d:92:89:a9:8a:56:8f:3e:d1:c6:f3:18:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Dec 5 02:39:13 2023 GMT
Not After : Dec 3 02:44:13 2024 GMT
Subject: CN=DE687D1E43EA27EE95802134004B2CD2574F1F4E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:df:12:1b:81:3f:e1:26:d8:70:b8:3c:4a:46:
7c:9d:28:ce:cd:ac:77:ed:42:68:e0:4f:52:a9:c3:
43:49:2f:e1:c1:05:bb:d5:25:90:ff:50:55:41:85:
75:94:74:bb:49:40:3c:6d:aa:93:31:7e:88:7d:fa:
ab:2d:c3:00:1a:85:58:66:63:07:e7:4a:74:e5:47:
66:1e:81:27:b7:13:2b:fc:fc:ee:38:57:37:90:09:
67:c2:9f:4f:59:e0:9d:e4:7c:9a:61:0b:9b:e2:2c:
2b:16:0f:34:f8:ce:f7:c8:36:ca:e3:ac:33:fe:7a:
6a:30:d7:f0:94:73:24:46:f9:bc:8d:28:64:fa:3d:
75:01:b3:85:52:01:29:68:8e:db:b7:a5:55:7a:f6:
f2:41:ab:65:4b:96:8b:86:a5:5b:86:b5:60:e6:8a:
5d:8f:15:8d:38:a1:4c:4f:4e:f2:e0:50:0a:3a:81:
bb:4c:d8:04:be:d3:dc:22:7e:40:b9:d2:f5:21:c7:
84:44:ad:4f:94:f1:4c:e6:12:08:25:3a:91:f5:fb:
10:b6:5f:8e:bc:5b:59:74:a1:3f:4a:cb:80:4a:0b:
d3:55:b7:0c:0d:13:3b:bf:bc:56:d1:ea:ca:34:21:
7a:de:65:af:e4:21:67:d3:f9:76:84:39:e8:03:ba:
a3:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:68:7D:1E:43:EA:27:EE:95:80:21:34:00:4B:2C:D2:57:4F:1F:4E
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS212948.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1509::/48
Signature Algorithm: sha256WithRSAEncryption
ba:dd:fd:9f:d9:43:06:84:3f:41:4d:7f:d6:3a:cb:31:29:65:
2f:44:1d:de:22:37:8d:54:f0:21:aa:8d:b7:84:93:da:32:6e:
e1:e8:20:38:50:0a:92:6d:c7:8e:ed:3f:35:1f:0c:0e:bd:a7:
ef:e1:f8:8e:ce:68:ce:44:d6:59:c1:41:b6:cf:4a:5c:42:76:
86:a7:74:29:1b:39:49:d2:30:69:a2:78:61:c4:46:88:b3:48:
ec:99:ee:7e:77:2c:b8:1c:18:1c:76:16:fb:e8:48:56:f0:a8:
b1:0f:93:43:b3:81:e8:fa:d1:37:8a:6d:2b:90:23:d3:0a:80:
e4:c1:b9:36:9d:fe:6c:64:4a:44:33:52:fd:02:6e:c4:67:9b:
ab:67:b6:6b:7a:dd:1f:a6:f9:11:e8:af:6a:1d:82:9b:82:04:
41:37:6c:af:19:cc:a3:ae:56:7b:61:3c:d2:e0:dc:38:02:ba:
f9:84:00:13:0a:54:1e:a3:58:dd:40:87:c4:03:e5:bc:ab:fc:
bc:23:5a:90:fa:36:c7:7b:45:df:6c:be:3e:cd:f9:24:cf:f3:
3b:44:52:43:df:8c:d7:0b:38:2a:c8:09:35:49:12:70:af:04:
2f:03:9f:c3:ae:aa:f9:cf:de:71:ce:ab:c4:07:30:ea:a5:e2:
aa:91:40:c5
-----BEGIN CERTIFICATE-----
MIIE6DCCA9CgAwIBAgIUJKK5aI0I4H2SiamKVo8+0cbzGOYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzk5NDM4ZjFiMTc2MmFlZWY4YTM1Y2Y0ZTZjYmFlOTc2
OTliZDAyMDAeFw0yMzEyMDUwMjM5MTNaFw0yNDEyMDMwMjQ0MTNaMDMxMTAvBgNV
BAMTKERFNjg3RDFFNDNFQTI3RUU5NTgwMjEzNDAwNEIyQ0QyNTc0RjFGNEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv3xIbgT/hJthwuDxKRnydKM7N
rHftQmjgT1Kpw0NJL+HBBbvVJZD/UFVBhXWUdLtJQDxtqpMxfoh9+qstwwAahVhm
YwfnSnTlR2YegSe3Eyv8/O44VzeQCWfCn09Z4J3kfJphC5viLCsWDzT4zvfINsrj
rDP+emow1/CUcyRG+byNKGT6PXUBs4VSASlojtu3pVV69vJBq2VLlouGpVuGtWDm
il2PFY04oUxPTvLgUAo6gbtM2AS+09wifkC50vUhx4RErU+U8UzmEgglOpH1+xC2
X468W1l0oT9Ky4BKC9NVtwwNEzu/vFbR6so0IXreZa/kIWfT+XaEOegDuqPFAgMB
AAGjggHyMIIB7jAdBgNVHQ4EFgQU3mh9HkPqJ+6VgCE0AEss0ldPH04wHwYDVR0j
BBgwFoAUeZQ48bF2Ku74o1z05suul2mb0CAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi83OTk0MzhGMUIx
NzYyQUVFRjhBMzVDRjRFNkNCQUU5NzY5OUJEMDIwLmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZVpRNDhiRjJLdTc0bzF6MDVzdXVsMm1iMENBLmNlcjBwBggrBgEF
BQcBCwRkMGIwYAYIKwYBBQUHMAuGVHJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv
cmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5ZC8yL0FT
MjEyOTQ4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEH
AQH/BBMwETAPBAIAAjAJAwcAKgagBRUJMA0GCSqGSIb3DQEBCwUAA4IBAQC63f2f
2UMGhD9BTX/WOssxKWUvRB3eIjeNVPAhqo23hJPaMm7h6CA4UAqSbceO7T81HwwO
vafv4fiOzmjORNZZwUG2z0pcQnaGp3QpGzlJ0jBponhhxEaIs0jsme5+dyy4HBgc
dhb76EhW8KixD5NDs4Ho+tE3im0rkCPTCoDkwbk2nf5sZEpEM1L9Am7EZ5urZ7Zr
et0fpvkR6K9qHYKbggRBN2yvGcyjrlZ7YTzS4Nw4Arr5hAATClQeo1jdQIfEA+W8
q/y8I1qQ+jbHe0XfbL4+zfkkz/M7RFJD34zXCzgqyAk1SRJwrwQvA5/Drqr5z95x
zqvEBzDqpeKqkUDF
-----END CERTIFICATE-----
Generated at Sat May 4 12:13:13 2024 by rpki-client on console-fra.rpki-client.org