Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS210152.roa
File: AS210152.roa (raw, json)
Hash identifier: mEf3bBVhChF+bLMprtNIQL+1D8Uy2ViqvYvcMMNKdM8=
Subject key identifier: 4C:0D:4E:90:64:87:42:6E:98:AC:F1:49:2D:D2:79:A5:E6:B9:DB:4F
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 71495E5C367EBD4C15B3F1E09D72C991D808ABD7
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS210152.roa
Signing time: Tue 26 Dec 2023 19:44:21 +0000
ROA not before: Tue 26 Dec 2023 19:39:21 +0000
ROA not after: Tue 24 Dec 2024 19:44:21 +0000
asID: 210152
IP address blocks: 185.147.35.0/24 maxlen: 24
2a06:a005:1290::/44 maxlen: 48
2a06:a005:17f0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 14:41:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:49:5e:5c:36:7e:bd:4c:15:b3:f1:e0:9d:72:c9:91:d8:08:ab:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Dec 26 19:39:21 2023 GMT
Not After : Dec 24 19:44:21 2024 GMT
Subject: CN=4C0D4E906487426E98ACF1492DD279A5E6B9DB4F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4b:12:59:b6:9b:54:32:ab:f4:41:2d:5a:68:
cb:92:9f:4f:56:3f:2c:13:6d:fa:eb:75:ce:18:1b:
a0:b3:59:59:0a:57:ca:7b:b0:9b:79:46:25:e2:f5:
4b:32:d6:ba:78:96:d6:79:65:ca:5d:ac:89:19:b3:
98:03:61:7f:d8:5b:01:a2:f5:42:74:50:5a:c7:16:
5d:86:63:6f:46:31:9a:95:a5:2b:be:f0:fa:14:c3:
89:4e:80:fe:c5:bf:6b:e7:45:f3:d4:ed:a9:c5:0f:
92:11:56:e5:d3:a5:9e:81:42:19:1c:f0:45:17:90:
d8:62:4a:d0:30:da:5e:b1:83:84:24:d0:d2:47:36:
e5:0d:fb:a9:98:0e:ac:56:d4:a2:7e:de:7b:03:9b:
74:4b:38:bd:35:fc:fb:e1:99:76:2e:9d:1d:aa:8d:
7a:76:24:4b:f8:5b:6b:bb:2d:17:3b:70:d9:50:9a:
cf:c3:d3:f4:9a:0d:14:c2:17:04:9f:74:df:6f:05:
9d:a5:42:da:05:13:45:b4:4c:00:d0:28:46:72:05:
d7:7d:3e:b2:e8:b7:e1:2d:bc:e0:a2:08:02:06:7e:
c4:ae:f5:5c:26:c4:3e:7c:4c:9c:51:3a:d9:16:2a:
5b:a7:fa:aa:b3:ac:cd:c2:1e:52:0f:5a:14:d5:0a:
bf:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:0D:4E:90:64:87:42:6E:98:AC:F1:49:2D:D2:79:A5:E6:B9:DB:4F
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS210152.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.147.35.0/24
IPv6:
2a06:a005:1290::/44
2a06:a005:17f0::/44
Signature Algorithm: sha256WithRSAEncryption
af:f9:15:8b:6d:d7:86:53:a8:d2:f0:1e:a6:83:24:4c:57:ff:
e7:a0:ae:b6:68:5c:b1:ed:36:19:d9:0c:46:3e:6a:15:21:20:
01:72:15:f3:63:9f:6e:e1:d2:87:12:ee:30:df:fd:1f:84:45:
bf:ad:a2:5f:97:b0:5d:72:7d:31:4b:84:89:24:46:d3:56:45:
46:88:5a:0f:61:e2:ac:2d:c5:f0:5f:32:9c:ef:61:e6:b4:9a:
4b:fc:05:38:1b:0f:03:7a:bc:aa:aa:c2:a6:33:88:e3:c5:22:
5f:14:bb:32:02:52:bc:f0:0b:24:e5:31:10:87:25:c8:4b:f8:
5e:5e:45:02:a0:15:8c:0d:72:0d:80:dc:a0:fd:62:9f:3d:65:
3e:aa:72:60:5a:49:8d:dd:73:90:a0:df:8d:2e:f0:be:19:51:
5b:6c:a7:8b:aa:3a:27:df:15:05:c8:9e:c5:a4:96:a9:85:f5:
46:06:87:38:4b:d7:b9:06:11:ac:64:fa:73:1c:59:15:e8:20:
64:85:8f:03:a3:84:9a:9e:33:a0:5d:b6:87:9d:c2:89:ec:ce:
95:73:1f:ca:93:7a:c9:c1:59:f0:80:ad:e5:07:41:53:b5:f2:
c0:2e:03:70:04:a4:e0:dd:05:a7:07:a8:bd:62:94:e3:45:85:
b7:68:fe:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 20:32:56 2024 by rpki-client on console-fra.rpki-client.org