Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS212983.roa
File: AS212983.roa (raw, json)
Hash identifier: UFrazUdUQSoON9wPUPyPB5tFKv2WYnejGWDjz0wznCg=
Subject key identifier: BC:C0:87:2B:58:55:56:81:6A:8A:9A:21:B5:AB:0B:02:50:20:5C:4A
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 1697280E16E95B876D429B4C2EC9AD9077B8826B
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS212983.roa
Signing time: Tue 05 Nov 2024 03:40:08 +0000
ROA not before: Tue 05 Nov 2024 03:35:08 +0000
ROA not after: Tue 04 Nov 2025 03:40:08 +0000
asID: 212983
IP address blocks: 2a06:a005:13::/48 maxlen: 48
2a06:a005:43e::/48 maxlen: 48
2a06:a005:480::/48 maxlen: 48
2a06:a005:483::/48 maxlen: 48
2a06:a005:a04::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:97:28:0e:16:e9:5b:87:6d:42:9b:4c:2e:c9:ad:90:77:b8:82:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Nov 5 03:35:08 2024 GMT
Not After : Nov 4 03:40:08 2025 GMT
Subject: CN=BCC0872B585556816A8A9A21B5AB0B0250205C4A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b9:d4:48:ee:b6:59:49:67:45:33:c4:5b:d4:
f0:50:1c:c0:af:90:f8:bc:17:a8:5d:13:51:05:03:
0e:d9:9a:95:37:91:17:0d:82:77:7b:77:f9:8d:29:
24:6c:af:85:a1:92:d5:db:7d:74:48:f1:68:7c:d1:
da:5c:73:3b:0c:85:d7:bc:18:ba:2f:11:b3:53:03:
09:7b:ca:d8:90:d6:2a:88:3b:6e:30:92:a5:d9:82:
da:c9:27:c0:05:b1:de:fa:9e:05:0e:10:3d:af:d3:
54:a1:59:6f:e6:a4:57:17:76:dc:8b:ae:51:f5:eb:
cd:bc:2e:45:1a:bd:35:ec:8c:db:0f:fa:01:2d:d5:
fa:e3:a8:8a:6e:d1:61:32:22:67:ad:d9:82:79:7f:
90:77:b6:7b:d7:90:ff:0b:cd:cc:e2:72:6a:08:b5:
9d:7e:c5:15:67:a5:c2:32:99:76:0a:8c:df:e5:dd:
05:e6:4b:d1:f6:bb:0d:95:1a:f2:c3:e8:39:c4:73:
85:70:b7:4c:b5:d8:a7:e5:0f:00:bf:45:d1:af:6f:
3c:31:54:d3:3c:74:04:46:09:40:82:da:e3:a9:d1:
ee:88:f1:b4:46:89:ee:15:a4:49:fd:3d:fb:70:5e:
e9:c7:0a:d3:0f:da:66:ed:61:88:57:bf:58:a3:a0:
a8:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:C0:87:2B:58:55:56:81:6A:8A:9A:21:B5:AB:0B:02:50:20:5C:4A
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS212983.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:13::/48
2a06:a005:43e::/48
2a06:a005:480::/48
2a06:a005:483::/48
2a06:a005:a04::/48
Signature Algorithm: sha256WithRSAEncryption
a9:6e:c7:c9:3f:53:eb:90:78:f4:da:e4:8f:a5:56:ca:44:2a:
56:05:a8:86:e5:d0:4e:0a:7d:69:56:d1:fe:6a:13:c2:aa:c7:
0e:f4:95:3f:a3:f4:26:85:b9:e0:68:44:3d:57:c9:50:98:75:
00:49:65:c5:40:b6:16:76:7c:a8:0e:c7:05:a7:eb:84:44:72:
0c:d8:a7:74:cf:f3:e9:3c:2f:e2:cc:b6:d8:29:38:ae:a5:35:
11:47:75:3c:46:f8:fe:44:b8:ba:d6:16:ef:0e:bb:25:f2:87:
1d:11:5a:2e:fe:60:3c:11:ef:57:d1:e7:1e:57:a9:ad:10:9a:
9f:dd:82:42:a4:e7:21:2c:4f:18:2f:2e:3a:19:a7:84:37:95:
cd:75:ca:67:be:f4:a6:d6:8f:01:34:8e:30:23:8c:55:e4:cb:
8b:2e:bf:01:8a:d2:dc:2c:de:1e:92:9a:5a:bd:a1:63:a9:50:
60:31:7d:f5:f3:b7:15:df:0e:cb:d8:99:ca:e9:35:42:83:80:
40:5e:8f:38:45:4c:91:bc:3f:d6:c5:6e:b4:19:56:2b:32:60:
06:36:d9:b6:20:6c:00:cb:d1:f6:84:7c:24:2a:9f:ea:82:9b:
2f:99:cc:3b:52:9f:43:8d:6f:97:b9:dd:55:40:dd:d8:2a:01:
8c:c9:3c:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:01:55 2024 by rpki-client on console-ams.rpki-client.org