Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS212995.roa
File: AS212995.roa (raw, json)
Hash identifier: kisUXSZbmbvLT0jGCk8m29v1JG9jc2bXlRfYsov3f9M=
Subject key identifier: 7D:8E:81:79:57:DA:6C:30:49:B9:BB:1E:EB:B4:76:67:40:B0:8E:20
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 5DCA45759803FBA251DE1DCD3251D74E49B739DF
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS212995.roa
Signing time: Tue 05 Dec 2023 02:44:15 +0000
ROA not before: Tue 05 Dec 2023 02:39:15 +0000
ROA not after: Tue 03 Dec 2024 02:44:15 +0000
asID: 212995
IP address blocks: 2a06:a005:4a0::/44 maxlen: 48
2a06:a005:cd0::/44 maxlen: 48
2a06:a005:d10::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:ca:45:75:98:03:fb:a2:51:de:1d:cd:32:51:d7:4e:49:b7:39:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Dec 5 02:39:15 2023 GMT
Not After : Dec 3 02:44:15 2024 GMT
Subject: CN=7D8E817957DA6C3049B9BB1EEBB4766740B08E20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:d3:1a:1e:3a:1c:3c:7d:0c:40:64:e0:28:a9:
95:ec:5a:a5:24:aa:5a:e0:cd:d3:7b:c9:8d:b3:ab:
3a:5b:a1:a9:5f:c3:37:9e:f0:48:09:37:a2:17:e2:
ba:73:6c:12:3d:ba:7e:4c:1d:20:46:dd:a1:09:47:
14:94:7a:3a:42:22:9f:9e:50:96:86:e4:42:c5:56:
93:fe:86:82:f0:2a:b0:2d:41:59:04:84:c2:4d:68:
ba:7d:aa:31:94:c2:fa:ef:6e:44:a8:0b:8d:fd:be:
70:80:c8:07:6b:56:5e:a0:4a:fb:a0:15:48:02:7b:
07:40:55:ee:33:e2:07:e1:de:75:0c:0a:17:07:91:
6f:fe:de:46:ce:7d:2f:a5:6b:22:48:fc:7f:d3:d5:
57:94:79:bf:4d:55:03:3b:26:57:8b:cf:1f:06:d0:
6b:30:4c:d6:36:56:48:26:06:2c:3e:16:7d:76:a8:
3a:cc:5a:55:9d:5b:66:f6:54:89:6f:aa:28:2e:e0:
c2:44:cc:88:db:7d:1f:1e:3a:d3:d6:99:31:43:2f:
21:10:13:db:5d:36:61:0e:74:53:cb:ca:80:ba:fd:
87:26:fe:58:43:2c:6a:bb:da:c2:53:c9:ef:f3:2f:
2d:2d:6b:24:37:8a:f2:38:19:27:e6:a2:f0:71:ab:
01:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:8E:81:79:57:DA:6C:30:49:B9:BB:1E:EB:B4:76:67:40:B0:8E:20
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS212995.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:4a0::/44
2a06:a005:cd0::/44
2a06:a005:d10::/44
Signature Algorithm: sha256WithRSAEncryption
77:8e:be:07:c7:dc:ed:d9:f5:4d:a5:85:e0:53:40:25:d2:48:
9d:ba:14:59:49:6e:54:16:3b:9c:ba:c8:9b:ac:69:6f:3b:8a:
9b:39:88:bc:0b:4b:7c:85:0e:ad:26:27:a5:89:c8:a2:76:52:
0c:01:3e:17:53:3d:d6:ad:10:2b:9d:d6:dd:bf:f3:12:7f:0a:
32:e5:0b:45:f0:de:b7:64:5b:c4:ee:85:87:d3:b6:b4:72:cf:
ea:62:20:d6:99:20:01:5f:2f:ef:c3:a6:4d:7c:5b:3d:23:25:
4a:07:13:21:60:4f:31:b4:48:ac:99:c3:23:c3:f8:56:3f:9c:
e2:1c:33:66:e9:36:fd:60:62:29:9a:68:64:a7:e7:04:b7:9e:
88:ae:0d:1a:ec:05:5a:2f:a7:39:50:11:d2:f5:de:c6:a6:7d:
0e:24:7e:b5:a2:2c:ef:3b:70:01:9e:73:3f:ad:47:0d:be:65:
a1:75:fa:00:79:d6:f2:93:b8:3d:b4:d4:c1:11:c5:3a:59:6b:
a4:cd:6c:ee:e5:a4:8e:8d:28:5f:b3:d0:e2:8d:15:0a:fe:fc:
23:e2:34:bd:16:68:a5:bc:8e:5a:23:a3:c2:40:b3:68:02:5f:
82:c5:25:75:27:a8:74:d6:25:82:23:7d:79:9b:74:5d:cf:a7:
88:a0:ca:28
-----BEGIN CERTIFICATE-----
MIIE+jCCA+KgAwIBAgIUXcpFdZgD+6JR3h3NMlHXTkm3Od8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzk5NDM4ZjFiMTc2MmFlZWY4YTM1Y2Y0ZTZjYmFlOTc2
OTliZDAyMDAeFw0yMzEyMDUwMjM5MTVaFw0yNDEyMDMwMjQ0MTVaMDMxMTAvBgNV
BAMTKDdEOEU4MTc5NTdEQTZDMzA0OUI5QkIxRUVCQjQ3NjY3NDBCMDhFMjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDX0xoeOhw8fQxAZOAoqZXsWqUk
qlrgzdN7yY2zqzpboalfwzee8EgJN6IX4rpzbBI9un5MHSBG3aEJRxSUejpCIp+e
UJaG5ELFVpP+hoLwKrAtQVkEhMJNaLp9qjGUwvrvbkSoC439vnCAyAdrVl6gSvug
FUgCewdAVe4z4gfh3nUMChcHkW/+3kbOfS+layJI/H/T1VeUeb9NVQM7JleLzx8G
0GswTNY2VkgmBiw+Fn12qDrMWlWdW2b2VIlvqigu4MJEzIjbfR8eOtPWmTFDLyEQ
E9tdNmEOdFPLyoC6/Ycm/lhDLGq72sJTye/zLy0tayQ3ivI4GSfmovBxqwHTAgMB
AAGjggIEMIICADAdBgNVHQ4EFgQUfY6BeVfabDBJubse67R2Z0CwjiAwHwYDVR0j
BBgwFoAUeZQ48bF2Ku74o1z05suul2mb0CAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi83OTk0MzhGMUIx
NzYyQUVFRjhBMzVDRjRFNkNCQUU5NzY5OUJEMDIwLmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZVpRNDhiRjJLdTc0bzF6MDVzdXVsMm1iMENBLmNlcjBwBggrBgEF
BQcBCwRkMGIwYAYIKwYBBQUHMAuGVHJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv
cmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5ZC8yL0FT
MjEyOTk1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH
AQH/BCUwIzAhBAIAAjAbAwcEKgagBQSgAwcEKgagBQzQAwcEKgagBQ0QMA0GCSqG
SIb3DQEBCwUAA4IBAQB3jr4Hx9zt2fVNpYXgU0Al0kiduhRZSW5UFjucusibrGlv
O4qbOYi8C0t8hQ6tJieliciidlIMAT4XUz3WrRArndbdv/MSfwoy5QtF8N63ZFvE
7oWH07a0cs/qYiDWmSABXy/vw6ZNfFs9IyVKBxMhYE8xtEismcMjw/hWP5ziHDNm
6Tb9YGIpmmhkp+cEt56Irg0a7AVaL6c5UBHS9d7Gpn0OJH61oizvO3ABnnM/rUcN
vmWhdfoAedbyk7g9tNTBEcU6WWukzWzu5aSOjShfs9DijRUK/vwj4jS9FmilvI5a
I6PCQLNoAl+CxSV1J6h01iWCI315m3Rdz6eIoMoo
-----END CERTIFICATE-----
Generated at Fri May 3 20:12:34 2024 by rpki-client on console-ams.rpki-client.org