Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS213386.roa
File: AS213386.roa (raw, json)
Hash identifier: ahQsAru7FCqYI3crv4JgUCcV6P+FgDTseP0eiUmaAeA=
Subject key identifier: AF:F0:6E:09:F4:1B:76:1B:EB:6F:21:D5:8F:08:4C:03:BC:54:0A:3A
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 17A570C90EE4A9543F2AF44D1730C5263EFC0F3A
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS213386.roa
Signing time: Fri 06 Dec 2024 00:40:12 +0000
ROA not before: Fri 06 Dec 2024 00:35:12 +0000
ROA not after: Fri 05 Dec 2025 00:40:12 +0000
asID: 213386
IP address blocks: 2a06:a005:2d7::/48 maxlen: 48
2a06:a005:2da::/48 maxlen: 48
2a06:a005:fb0::/44 maxlen: 48
2a06:a005:1710::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 11:21:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:a5:70:c9:0e:e4:a9:54:3f:2a:f4:4d:17:30:c5:26:3e:fc:0f:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Dec 6 00:35:12 2024 GMT
Not After : Dec 5 00:40:12 2025 GMT
Subject: CN=AFF06E09F41B761BEB6F21D58F084C03BC540A3A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ef:49:95:db:77:e8:87:9f:90:e8:61:db:3d:
3e:b7:79:87:c5:29:cf:24:ad:e9:69:ca:4f:03:58:
43:7f:cb:fe:7e:c5:3d:4e:dd:aa:db:65:d8:90:6e:
d3:d4:bc:51:33:6c:06:58:29:08:2c:a7:1b:3a:d9:
5e:a9:e2:eb:94:94:51:a0:56:00:0d:ad:81:d1:0d:
b5:f4:f6:47:4f:ee:b0:48:bb:24:38:81:00:47:63:
0b:e2:ea:82:3e:eb:5f:fe:dd:42:e8:b1:ea:fe:13:
2c:95:6f:9a:bd:68:b5:c1:db:8f:8d:9e:54:0f:0c:
03:62:f3:63:52:aa:fc:d2:89:47:1a:e1:96:ff:d1:
33:fa:52:e9:b2:11:df:61:2f:76:30:cf:36:04:06:
7a:b5:a3:c3:ad:38:1e:14:e3:4a:9e:0e:18:5d:6e:
3b:e7:0b:4e:49:0a:0e:2d:ef:b5:70:08:a4:9f:38:
36:c9:52:6e:86:00:c9:4d:ce:94:71:d8:4e:cb:ef:
f7:f8:7e:89:39:43:9e:5c:11:b5:75:b2:1e:3f:0f:
ed:77:9e:dd:e7:7c:2b:8e:3b:66:0f:82:83:b5:75:
d7:0c:6b:20:a2:76:73:fc:3b:31:47:6f:a3:2f:92:
77:e2:e6:b1:4e:2f:ee:4c:54:ac:07:37:19:1f:95:
77:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:F0:6E:09:F4:1B:76:1B:EB:6F:21:D5:8F:08:4C:03:BC:54:0A:3A
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS213386.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:2d7::/48
2a06:a005:2da::/48
2a06:a005:fb0::/44
2a06:a005:1710::/44
Signature Algorithm: sha256WithRSAEncryption
96:ef:56:97:87:42:00:00:63:49:e6:c5:c5:2d:5f:1f:9f:6f:
36:54:18:03:f6:dc:a0:c1:13:70:ce:13:28:1d:b9:02:37:93:
6f:2a:cf:31:be:31:5e:de:7b:1a:25:4d:9f:7c:58:a4:46:a0:
c6:6b:2d:34:e0:83:a3:37:26:12:7d:3d:18:12:a7:d6:cd:9f:
5a:aa:9d:35:47:dc:9a:64:0e:76:1e:25:7d:79:31:6d:59:90:
03:b2:63:f3:cf:a6:48:b4:55:41:e6:dd:58:71:61:2a:e7:f4:
e3:ac:10:fc:0d:45:57:a5:25:66:c6:d8:c0:b4:56:18:df:5b:
c9:73:ec:ac:e5:21:a3:55:12:15:4e:20:89:6f:f8:6d:7e:c7:
e6:42:4c:66:eb:05:2f:f3:24:fc:6d:07:21:a0:71:c0:d4:9d:
49:87:a5:9c:cd:83:23:a4:90:c7:49:b3:fe:56:8a:25:1f:a4:
b9:10:3c:2c:a5:ee:d4:c9:8b:d8:a8:69:c8:ff:a7:02:16:46:
12:08:62:a1:30:ad:9a:bc:fd:d4:31:ae:7f:05:6c:95:35:24:
a1:a6:80:9a:02:cc:63:3a:28:43:ef:99:26:4c:3b:50:ca:c7:
9a:e4:d2:4b:37:e2:42:1a:f4:dd:d0:36:b6:23:17:e2:df:c0:
78:46:e6:2a
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUF6VwyQ7kqVQ/KvRNFzDFJj78DzowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzk5NDM4ZjFiMTc2MmFlZWY4YTM1Y2Y0ZTZjYmFlOTc2
OTliZDAyMDAeFw0yNDEyMDYwMDM1MTJaFw0yNTEyMDUwMDQwMTJaMDMxMTAvBgNV
BAMTKEFGRjA2RTA5RjQxQjc2MUJFQjZGMjFENThGMDg0QzAzQkM1NDBBM0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+70mV23foh5+Q6GHbPT63eYfF
Kc8krelpyk8DWEN/y/5+xT1O3arbZdiQbtPUvFEzbAZYKQgspxs62V6p4uuUlFGg
VgANrYHRDbX09kdP7rBIuyQ4gQBHYwvi6oI+61/+3ULoser+EyyVb5q9aLXB24+N
nlQPDANi82NSqvzSiUca4Zb/0TP6UumyEd9hL3YwzzYEBnq1o8OtOB4U40qeDhhd
bjvnC05JCg4t77VwCKSfODbJUm6GAMlNzpRx2E7L7/f4fok5Q55cEbV1sh4/D+13
nt3nfCuOO2YPgoO1ddcMayCidnP8OzFHb6Mvknfi5rFOL+5MVKwHNxkflXdVAgMB
AAGjggINMIICCTAdBgNVHQ4EFgQUr/BuCfQbdhvrbyHVjwhMA7xUCjowHwYDVR0j
BBgwFoAUeZQ48bF2Ku74o1z05suul2mb0CAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi83OTk0MzhGMUIx
NzYyQUVFRjhBMzVDRjRFNkNCQUU5NzY5OUJEMDIwLmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZVpRNDhiRjJLdTc0bzF6MDVzdXVsMm1iMENBLmNlcjBwBggrBgEF
BQcBCwRkMGIwYAYIKwYBBQUHMAuGVHJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv
cmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5ZC8yL0FT
MjEzMzg2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEH
AQH/BC4wLDAqBAIAAjAkAwcAKgagBQLXAwcAKgagBQLaAwcEKgagBQ+wAwcEKgag
BRcQMA0GCSqGSIb3DQEBCwUAA4IBAQCW71aXh0IAAGNJ5sXFLV8fn282VBgD9tyg
wRNwzhMoHbkCN5NvKs8xvjFe3nsaJU2ffFikRqDGay004IOjNyYSfT0YEqfWzZ9a
qp01R9yaZA52HiV9eTFtWZADsmPzz6ZItFVB5t1YcWEq5/TjrBD8DUVXpSVmxtjA
tFYY31vJc+ys5SGjVRIVTiCJb/htfsfmQkxm6wUv8yT8bQchoHHA1J1Jh6WczYMj
pJDHSbP+VoolH6S5EDwspe7UyYvYqGnI/6cCFkYSCGKhMK2avP3UMa5/BWyVNSSh
poCaAsxjOihD75kmTDtQysea5NJLN+JCGvTd0Da2Ixfi38B4RuYq
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:14:46 2025 by rpki-client