Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS212995.roa
File: AS212995.roa (raw, json)
Hash identifier: p43s99t5d6p15y10/Brv6X5Zrifh1TNufzaanvPnOgU=
Subject key identifier: E4:67:97:A3:4E:C8:24:3B:D5:3F:97:1D:7C:BE:51:90:84:49:40:0E
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 38B74659A3AC58139916B1C7C2A797FF3A941437
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS212995.roa
Signing time: Tue 05 Nov 2024 03:40:04 +0000
ROA not before: Tue 05 Nov 2024 03:35:04 +0000
ROA not after: Tue 04 Nov 2025 03:40:04 +0000
asID: 212995
IP address blocks: 2a06:a005:4a0::/44 maxlen: 48
2a06:a005:cd0::/44 maxlen: 48
2a06:a005:d10::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:b7:46:59:a3:ac:58:13:99:16:b1:c7:c2:a7:97:ff:3a:94:14:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Nov 5 03:35:04 2024 GMT
Not After : Nov 4 03:40:04 2025 GMT
Subject: CN=E46797A34EC8243BD53F971D7CBE51908449400E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:86:aa:40:04:cc:8d:55:1e:a2:15:fd:ab:45:
68:bc:cc:49:90:42:91:a6:2b:da:9a:89:ed:6c:12:
9f:5d:4e:e0:6d:c9:38:40:2c:09:84:a9:7b:7f:e7:
f7:a4:de:3a:65:9f:9b:79:09:6f:4b:e5:75:9e:ed:
30:2d:ae:64:80:fa:44:e0:a0:15:98:3c:56:43:f6:
93:46:c2:63:1b:c4:6d:13:96:2c:fc:41:84:2c:29:
60:78:12:b5:f0:3f:92:66:33:95:d4:2f:10:f3:5a:
6c:b6:f4:a1:41:32:42:5e:36:27:96:d8:81:02:86:
ea:cc:eb:a8:f9:ec:b7:5e:d1:02:85:73:52:9d:a8:
98:38:d0:1a:99:fb:b7:33:9f:4a:ca:56:c0:2b:74:
f3:67:a3:bc:1a:7f:28:68:6b:b0:6f:1a:02:dc:53:
e4:54:c6:82:cd:f8:a1:ee:18:66:52:88:4e:2f:5b:
fa:a5:73:45:75:f8:d6:96:7f:87:91:3a:ed:11:1e:
24:fe:ed:69:e3:47:e1:4e:6a:a0:d3:d7:5d:23:88:
f4:28:2b:80:4a:f7:7a:1b:eb:1c:09:d9:8b:6c:09:
6a:d4:9b:76:08:b7:28:07:68:4c:62:ec:2a:68:ea:
e1:a5:52:53:73:58:d4:c5:31:64:34:8e:2a:26:e7:
6b:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:67:97:A3:4E:C8:24:3B:D5:3F:97:1D:7C:BE:51:90:84:49:40:0E
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS212995.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:4a0::/44
2a06:a005:cd0::/44
2a06:a005:d10::/44
Signature Algorithm: sha256WithRSAEncryption
c1:71:45:6a:d5:6b:c0:9f:47:77:f8:da:b9:48:1a:9d:58:f8:
c6:87:c0:ef:cc:4a:66:ab:80:95:72:96:72:a9:8d:44:cf:a0:
41:da:75:35:0d:ae:5a:7c:38:dd:f4:3e:f1:d8:0e:82:85:c9:
f0:a5:ba:ae:2e:b2:50:66:8f:41:67:59:11:9b:70:3c:07:04:
70:51:28:8d:dd:ba:81:fb:4d:b8:8f:12:d6:cf:d2:fb:82:eb:
f4:5c:9f:d9:44:ae:eb:f3:5e:e8:d5:0a:1e:9d:ee:81:af:67:
4e:bf:df:1b:39:e7:1d:46:82:2d:47:b4:22:6f:1f:04:4a:30:
59:9c:ea:2d:22:38:62:ed:c3:76:bf:6b:fc:84:53:eb:dd:87:
e4:a6:76:b4:58:d0:d1:fd:5c:60:27:29:50:38:39:13:b2:a0:
70:d1:40:ac:94:c8:66:64:50:fa:33:a6:2a:9b:f7:0e:ee:56:
ef:76:1d:b5:bc:a4:21:80:1a:fd:15:31:67:ec:c2:86:07:79:
f3:1d:ab:dd:03:45:96:57:4a:0b:b8:5a:e4:a7:cd:11:a2:6f:
7e:a6:21:2c:90:cd:7f:92:95:7f:b4:ac:c6:85:59:65:f3:41:
9b:09:18:8c:5c:cb:ad:21:b2:6b:83:0d:3b:e3:1c:ae:42:d3:
4a:3b:85:67
-----BEGIN CERTIFICATE-----
MIIE+jCCA+KgAwIBAgIUOLdGWaOsWBOZFrHHwqeX/zqUFDcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzk5NDM4ZjFiMTc2MmFlZWY4YTM1Y2Y0ZTZjYmFlOTc2
OTliZDAyMDAeFw0yNDExMDUwMzM1MDRaFw0yNTExMDQwMzQwMDRaMDMxMTAvBgNV
BAMTKEU0Njc5N0EzNEVDODI0M0JENTNGOTcxRDdDQkU1MTkwODQ0OTQwMEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDChqpABMyNVR6iFf2rRWi8zEmQ
QpGmK9qaie1sEp9dTuBtyThALAmEqXt/5/ek3jpln5t5CW9L5XWe7TAtrmSA+kTg
oBWYPFZD9pNGwmMbxG0Tliz8QYQsKWB4ErXwP5JmM5XULxDzWmy29KFBMkJeNieW
2IEChurM66j57Lde0QKFc1KdqJg40BqZ+7czn0rKVsArdPNno7wafyhoa7BvGgLc
U+RUxoLN+KHuGGZSiE4vW/qlc0V1+NaWf4eROu0RHiT+7WnjR+FOaqDT110jiPQo
K4BK93ob6xwJ2YtsCWrUm3YItygHaExi7Cpo6uGlUlNzWNTFMWQ0jiom52sbAgMB
AAGjggIEMIICADAdBgNVHQ4EFgQU5GeXo07IJDvVP5cdfL5RkIRJQA4wHwYDVR0j
BBgwFoAUeZQ48bF2Ku74o1z05suul2mb0CAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi83OTk0MzhGMUIx
NzYyQUVFRjhBMzVDRjRFNkNCQUU5NzY5OUJEMDIwLmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZVpRNDhiRjJLdTc0bzF6MDVzdXVsMm1iMENBLmNlcjBwBggrBgEF
BQcBCwRkMGIwYAYIKwYBBQUHMAuGVHJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv
cmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5ZC8yL0FT
MjEyOTk1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH
AQH/BCUwIzAhBAIAAjAbAwcEKgagBQSgAwcEKgagBQzQAwcEKgagBQ0QMA0GCSqG
SIb3DQEBCwUAA4IBAQDBcUVq1WvAn0d3+Nq5SBqdWPjGh8DvzEpmq4CVcpZyqY1E
z6BB2nU1Da5afDjd9D7x2A6ChcnwpbquLrJQZo9BZ1kRm3A8BwRwUSiN3bqB+024
jxLWz9L7guv0XJ/ZRK7r817o1Qoene6Br2dOv98bOecdRoItR7Qibx8ESjBZnOot
Ijhi7cN2v2v8hFPr3Yfkpna0WNDR/VxgJylQODkTsqBw0UCslMhmZFD6M6Yqm/cO
7lbvdh21vKQhgBr9FTFn7MKGB3nzHavdA0WWV0oLuFrkp80Rom9+piEskM1/kpV/
tKzGhVll80GbCRiMXMutIbJrgw074xyuQtNKO4Vn
-----END CERTIFICATE-----
Generated at Fri Nov 22 08:13:36 2024 by rpki-client on console-fra.rpki-client.org