Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS210387.roa
File: AS210387.roa (raw, json)
Hash identifier: psthu6uGfs3D/b2OFUEY3Kp5j3sg+AnI8cqNpBSf3tw=
Subject key identifier: E2:75:DE:D1:EB:31:31:58:CA:38:71:E1:23:CA:6E:48:42:FA:7E:FE
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 194511F34B34D125FF5283A025F7DC453B37056F
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS210387.roa
Signing time: Tue 05 Dec 2023 02:44:13 +0000
ROA not before: Tue 05 Dec 2023 02:39:13 +0000
ROA not after: Tue 03 Dec 2024 02:44:13 +0000
asID: 210387
IP address blocks: 2a06:a005:435::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:45:11:f3:4b:34:d1:25:ff:52:83:a0:25:f7:dc:45:3b:37:05:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Dec 5 02:39:13 2023 GMT
Not After : Dec 3 02:44:13 2024 GMT
Subject: CN=E275DED1EB313158CA3871E123CA6E4842FA7EFE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:fd:f3:78:be:f7:05:0d:2b:4f:05:ab:49:d9:
a8:b5:f3:1e:ac:91:bc:cc:7b:3c:8d:ca:b4:64:00:
37:75:28:5b:45:ca:41:7b:a1:bf:f4:39:6e:dd:5d:
29:dd:81:f6:33:d4:36:fa:29:1c:0e:a6:1d:36:f7:
21:d4:72:02:f2:b1:4b:46:eb:57:d2:87:63:14:77:
d8:04:dc:1c:35:b2:c3:2f:8a:3d:53:ba:21:62:fa:
6e:82:39:83:13:42:36:5b:a1:ab:5c:9a:17:6d:99:
dd:4c:0d:bb:8b:f8:87:e5:52:a2:13:e2:c1:16:92:
bc:c9:a2:cf:6e:a8:71:5a:1d:17:8e:5e:9d:04:47:
8c:2a:5e:4d:ec:72:f7:ce:30:fd:fa:2c:46:a0:9c:
7b:f6:c5:94:27:48:59:75:ee:14:21:ee:61:53:e1:
cc:3c:32:cd:57:0f:b5:84:53:48:15:1f:54:67:1a:
05:62:4d:e3:37:f7:56:81:76:ea:7b:b1:95:c9:a6:
ec:0a:85:89:6d:99:73:b9:e3:db:af:27:ba:df:a5:
8c:6f:09:87:2d:ab:d3:66:43:9b:84:ce:71:80:bf:
8f:fc:ef:0f:aa:3f:31:59:7b:f8:9e:16:7d:9b:66:
47:ec:7e:51:6c:27:ef:4c:d0:a3:73:d0:ba:f4:45:
b8:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:75:DE:D1:EB:31:31:58:CA:38:71:E1:23:CA:6E:48:42:FA:7E:FE
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS210387.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:435::/48
Signature Algorithm: sha256WithRSAEncryption
7c:49:c3:a3:6f:e5:d6:11:9d:a4:2d:8a:f4:63:e2:dc:19:05:
79:e1:28:2b:e6:55:ac:46:d7:e3:a7:79:4f:f3:42:51:d1:c9:
ac:46:f6:2e:6c:77:be:40:80:9c:2b:ca:40:0c:2a:c9:1d:91:
15:9b:5e:50:12:f0:e2:2d:25:94:cf:ea:17:74:5a:a6:86:79:
7e:60:4c:58:09:2e:c5:8c:26:70:2a:af:a2:6d:47:d0:a6:86:
3f:30:f2:63:a0:13:7c:c5:d2:98:4e:2a:7c:f4:68:7b:b6:eb:
d0:25:da:18:17:d5:af:29:a3:8c:bb:01:87:ef:d7:12:75:85:
bf:22:a7:ea:70:39:80:c8:86:99:3e:85:43:3f:d8:d5:ea:c3:
b5:d7:fb:f4:f1:c6:0b:b9:57:0f:bc:29:0c:36:b6:b2:4f:80:
f7:ed:65:c9:90:93:04:dc:08:c4:92:06:14:4d:60:d6:79:31:
72:fc:d2:9a:6c:1f:57:0f:2d:ec:d8:7d:a6:8f:9f:ba:0b:05:
36:1b:55:7c:7a:e9:f7:8a:cd:1a:8c:24:bd:ac:47:ff:2f:08:
56:2d:d1:82:22:d5:4f:4d:25:f9:98:16:c6:9f:93:5f:22:9a:
17:17:6c:84:e7:3f:13:9b:49:49:d5:76:7f:25:ea:fe:60:7a:
6d:ea:d0:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 12:12:18 2024 by rpki-client on console-ams.rpki-client.org