Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS213267.roa
File: AS213267.roa (raw, json)
Hash identifier: yYHmbvNZf3qiWXjfi/u3ng4wqFHZ1DQ7getEK/vWDec=
Subject key identifier: E0:9C:1C:FE:F6:83:E1:C5:2E:B5:D6:09:EA:16:50:1C:1E:76:1F:CB
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 666535C96C1090D945F93D4A2ED5183A7CB94CA3
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS213267.roa
Signing time: Thu 15 Feb 2024 19:44:24 +0000
ROA not before: Thu 15 Feb 2024 19:39:24 +0000
ROA not after: Thu 13 Feb 2025 19:44:24 +0000
asID: 213267
IP address blocks: 2a06:a005:2f80::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:65:35:c9:6c:10:90:d9:45:f9:3d:4a:2e:d5:18:3a:7c:b9:4c:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Feb 15 19:39:24 2024 GMT
Not After : Feb 13 19:44:24 2025 GMT
Subject: CN=E09C1CFEF683E1C52EB5D609EA16501C1E761FCB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:fb:88:86:86:b1:8d:47:06:da:1b:2e:b0:9f:
01:08:ed:55:0e:fb:99:d0:3a:be:7b:e9:96:3f:75:
1e:5e:c2:46:9b:7b:95:97:df:3e:bc:2b:bd:2d:3d:
66:2d:31:44:45:74:4c:c4:91:5a:88:7f:27:99:49:
99:9a:0d:35:bc:ce:ce:34:02:c3:72:09:81:82:73:
00:43:5e:da:86:8b:4e:0d:87:e8:cc:d2:76:b2:07:
25:7f:b5:31:88:46:d6:e4:34:7b:62:bd:8c:25:80:
40:76:32:da:9a:6f:62:2a:8b:fd:d0:c2:41:f2:e9:
3b:3a:a1:b9:44:6a:ef:de:45:1e:9b:79:bb:26:e3:
84:5e:87:fc:fe:58:aa:4d:99:9a:e2:b4:66:86:12:
f8:06:10:0e:80:3c:74:58:6a:e9:d0:ae:ba:38:b4:
54:2a:fb:5a:f0:88:bc:ed:4a:47:c2:93:e2:61:0d:
cb:10:84:4f:12:19:5b:6c:01:d4:8b:88:bb:0e:af:
d5:86:65:91:1c:0b:77:c0:6a:4e:20:b2:17:91:ec:
55:74:a6:0d:cc:aa:f0:99:fb:0a:41:27:82:65:18:
3e:ae:aa:54:5a:55:04:d0:9b:64:b7:9a:ae:5b:c5:
db:2a:0b:9d:7b:0b:91:10:50:2f:46:1c:a0:55:65:
28:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:9C:1C:FE:F6:83:E1:C5:2E:B5:D6:09:EA:16:50:1C:1E:76:1F:CB
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS213267.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:2f80::/44
Signature Algorithm: sha256WithRSAEncryption
0c:06:c5:1f:2f:d1:ae:fc:61:32:41:75:90:65:ec:9f:6e:2b:
f7:3e:05:cb:ea:01:8d:58:e6:da:00:8e:50:78:93:6e:09:45:
6c:7a:05:0a:cb:fd:f4:c7:7d:7a:09:18:fe:20:b1:68:19:97:
c9:cb:0e:65:31:3f:ca:fc:35:5a:6d:fc:c2:42:08:88:ac:bb:
92:24:4f:4e:66:d7:bf:7f:08:69:c5:0d:34:c5:a1:66:32:46:
a5:80:a9:99:47:f0:db:69:f9:df:a8:3d:e2:ed:69:d2:38:69:
28:f9:e5:4c:08:b6:44:ca:6b:79:c7:5a:f8:d5:7f:81:f3:34:
4b:19:ad:c5:16:88:c6:a6:8f:ea:b2:99:3c:08:15:f3:92:8f:
4e:66:5e:f3:3b:a5:6a:29:0c:02:99:fa:95:5b:a2:2b:af:46:
79:5e:30:a8:92:cb:97:35:4f:24:63:cc:62:58:ea:e5:ac:0d:
95:c3:1d:70:8d:e7:fe:85:fa:01:a2:ea:74:d9:21:e5:77:20:
2e:11:40:b8:c6:ab:fc:1f:33:f1:12:0b:8a:a5:72:ab:1c:f3:
46:e5:e7:a1:f5:42:7b:e1:c8:23:19:90:db:c8:92:5d:32:ca:
7d:75:30:4f:96:53:c2:61:e8:ce:8f:08:52:8b:f1:c3:8e:28:
17:ac:09:cf
-----BEGIN CERTIFICATE-----
MIIE6DCCA9CgAwIBAgIUZmU1yWwQkNlF+T1KLtUYOny5TKMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzk5NDM4ZjFiMTc2MmFlZWY4YTM1Y2Y0ZTZjYmFlOTc2
OTliZDAyMDAeFw0yNDAyMTUxOTM5MjRaFw0yNTAyMTMxOTQ0MjRaMDMxMTAvBgNV
BAMTKEUwOUMxQ0ZFRjY4M0UxQzUyRUI1RDYwOUVBMTY1MDFDMUU3NjFGQ0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs+4iGhrGNRwbaGy6wnwEI7VUO
+5nQOr576ZY/dR5ewkabe5WX3z68K70tPWYtMURFdEzEkVqIfyeZSZmaDTW8zs40
AsNyCYGCcwBDXtqGi04Nh+jM0nayByV/tTGIRtbkNHtivYwlgEB2Mtqab2Iqi/3Q
wkHy6Ts6oblEau/eRR6bebsm44Reh/z+WKpNmZritGaGEvgGEA6APHRYaunQrro4
tFQq+1rwiLztSkfCk+JhDcsQhE8SGVtsAdSLiLsOr9WGZZEcC3fAak4gsheR7FV0
pg3MqvCZ+wpBJ4JlGD6uqlRaVQTQm2S3mq5bxdsqC517C5EQUC9GHKBVZSizAgMB
AAGjggHyMIIB7jAdBgNVHQ4EFgQU4Jwc/vaD4cUutdYJ6hZQHB52H8swHwYDVR0j
BBgwFoAUeZQ48bF2Ku74o1z05suul2mb0CAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi83OTk0MzhGMUIx
NzYyQUVFRjhBMzVDRjRFNkNCQUU5NzY5OUJEMDIwLmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZVpRNDhiRjJLdTc0bzF6MDVzdXVsMm1iMENBLmNlcjBwBggrBgEF
BQcBCwRkMGIwYAYIKwYBBQUHMAuGVHJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv
cmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5ZC8yL0FT
MjEzMjY3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEH
AQH/BBMwETAPBAIAAjAJAwcEKgagBS+AMA0GCSqGSIb3DQEBCwUAA4IBAQAMBsUf
L9Gu/GEyQXWQZeyfbiv3PgXL6gGNWObaAI5QeJNuCUVsegUKy/30x316CRj+ILFo
GZfJyw5lMT/K/DVabfzCQgiIrLuSJE9OZte/fwhpxQ00xaFmMkalgKmZR/Dbafnf
qD3i7WnSOGko+eVMCLZEymt5x1r41X+B8zRLGa3FFojGpo/qspk8CBXzko9OZl7z
O6VqKQwCmfqVW6Irr0Z5XjCoksuXNU8kY8xiWOrlrA2Vwx1wjef+hfoBoup02SHl
dyAuEUC4xqv8HzPxEguKpXKrHPNG5eeh9UJ74cgjGZDbyJJdMsp9dTBPllPCYejO
jwhSi/HDjigXrAnP
-----END CERTIFICATE-----
Generated at Fri May 3 20:12:34 2024 by rpki-client on console-ams.rpki-client.org