Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS213386.roa
File: AS213386.roa (raw, json)
Hash identifier: znifPcstg24pq03XM7pJaH18QsAISxT+FNJxP5etisI=
Subject key identifier: 23:FD:1E:78:93:0F:E6:75:B7:81:A3:A4:BE:93:5F:92:47:F2:E4:C5
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 07AD30E10F0C7835E788E35F29A679947F5621B4
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS213386.roa
Signing time: Thu 04 Jan 2024 23:44:21 +0000
ROA not before: Thu 04 Jan 2024 23:39:21 +0000
ROA not after: Thu 02 Jan 2025 23:44:21 +0000
asID: 213386
IP address blocks: 2a06:a005:2d7::/48 maxlen: 48
2a06:a005:2da::/48 maxlen: 48
2a06:a005:fb0::/44 maxlen: 48
2a06:a005:1710::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:ad:30:e1:0f:0c:78:35:e7:88:e3:5f:29:a6:79:94:7f:56:21:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Jan 4 23:39:21 2024 GMT
Not After : Jan 2 23:44:21 2025 GMT
Subject: CN=23FD1E78930FE675B781A3A4BE935F9247F2E4C5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:02:53:20:00:40:59:b4:92:1d:30:d7:9a:b6:
57:d9:7f:b8:6c:6f:03:3f:2f:50:ac:1f:8e:e2:ed:
46:5f:99:5c:3d:c9:e0:0d:ad:aa:26:50:f1:16:9f:
2f:a5:d8:ed:4d:72:a0:f2:e0:19:74:b7:48:c5:8c:
8f:a2:54:0d:14:e8:28:50:fd:39:5e:1b:f7:50:fc:
13:48:e6:36:0f:2d:9f:d5:12:d5:b3:65:f8:c9:b5:
c5:64:14:86:31:41:45:7a:ac:60:0c:c4:47:23:fd:
7b:13:e0:37:83:12:c9:b1:3e:63:70:fa:e1:44:8d:
5c:95:8d:02:2e:e1:fa:03:27:f0:b3:ed:d5:4a:d8:
fd:e6:c3:ef:e1:be:c2:00:1e:b7:c9:cc:0c:c0:78:
3d:d6:95:af:fe:88:29:93:cd:93:ee:9f:62:31:60:
13:db:87:ea:b1:57:9f:31:7d:2c:33:f6:a6:c4:44:
97:41:36:14:84:16:c0:78:20:8c:43:2f:03:13:1a:
17:cc:52:b0:c9:9e:c3:bc:df:9d:75:b2:c0:c2:1f:
4e:c0:5e:4c:a8:85:d8:eb:cf:36:d6:95:c6:6c:60:
8a:47:53:cd:f0:62:f6:dc:1b:c2:bc:77:1b:26:53:
dd:7f:f2:e0:ed:8a:0a:5c:28:d6:5d:e3:01:ba:3a:
8f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:FD:1E:78:93:0F:E6:75:B7:81:A3:A4:BE:93:5F:92:47:F2:E4:C5
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS213386.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:2d7::/48
2a06:a005:2da::/48
2a06:a005:fb0::/44
2a06:a005:1710::/44
Signature Algorithm: sha256WithRSAEncryption
26:58:c8:6f:42:2c:cb:37:62:4b:b9:87:55:1e:63:b6:77:d1:
ae:9b:7d:3d:8a:ba:19:47:a4:88:9c:18:c6:f5:0d:cb:b6:dc:
21:1a:23:99:48:53:3d:79:ad:c4:04:92:fb:bf:75:50:d1:f7:
6e:0e:75:20:9e:c7:e0:97:b0:2a:3e:5c:7b:e4:b1:92:73:1a:
46:3c:02:5d:68:e6:80:57:31:79:42:ff:1d:2d:98:9a:e2:6b:
11:71:b3:ce:5f:8f:86:72:54:ed:31:ac:94:14:a1:42:3f:f1:
6e:56:55:4e:49:3f:b9:e0:a0:16:08:5d:d9:6c:f2:07:1e:c9:
d0:e8:90:60:d7:cf:a4:69:23:e9:71:b0:dd:34:93:76:06:50:
9d:01:20:f1:a4:4c:99:7b:69:a8:36:59:73:5a:b3:73:18:b3:
11:f5:9f:bd:30:cb:e1:a2:af:43:9d:12:ef:18:3a:58:40:95:
92:52:f9:64:55:52:3d:f4:2b:3f:f9:ab:e3:c3:02:41:60:bb:
1c:1f:77:45:1c:54:ed:cc:f6:e0:9c:a3:3b:0d:52:b2:92:b0:
4e:6d:8f:d1:e8:cb:85:5c:5c:30:c5:24:e6:ea:64:63:47:71:
c5:9b:ce:5d:47:f0:fb:30:08:76:6c:29:6c:a5:67:ea:81:e8:
ec:9f:64:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 12:13:13 2024 by rpki-client on console-fra.rpki-client.org