Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS210445.roa
File: AS210445.roa (raw, json)
Hash identifier: ZfIa19Qeaj+sqnxU3ogaDVPZRjgUe25nHHDwMIUlaJ0=
Subject key identifier: 67:5B:DF:55:46:58:7F:9D:6B:5C:0C:22:00:03:B5:85:C1:74:9A:1E
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 28750089A60F3FAAA1EC1544356609507F76B585
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS210445.roa
Signing time: Tue 20 Feb 2024 09:44:24 +0000
ROA not before: Tue 20 Feb 2024 09:39:24 +0000
ROA not after: Tue 18 Feb 2025 09:44:24 +0000
asID: 210445
IP address blocks: 2a06:a005:f60::/44 maxlen: 48
2a06:a005:16f0::/44 maxlen: 48
2a06:a005:2180::/44 maxlen: 48
2a06:a005:29b0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:75:00:89:a6:0f:3f:aa:a1:ec:15:44:35:66:09:50:7f:76:b5:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Feb 20 09:39:24 2024 GMT
Not After : Feb 18 09:44:24 2025 GMT
Subject: CN=675BDF5546587F9D6B5C0C220003B585C1749A1E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:61:55:cd:f6:5c:6e:71:d6:49:78:53:7f:eb:
0a:20:76:6a:1b:cc:7a:7e:3e:46:f0:8b:6e:6f:67:
16:88:f3:3b:a8:a6:2a:c0:5d:66:94:83:d6:99:0d:
62:03:51:76:27:8d:1e:b6:08:49:94:ba:1a:8a:a3:
a7:7c:db:c7:19:3c:78:17:27:1f:0d:df:a7:d5:f5:
fe:ed:98:6a:3d:54:ec:e1:5a:4b:e3:f9:3f:97:1f:
d2:78:3e:c4:78:20:b7:e2:8b:8f:96:75:dc:9a:2a:
dd:51:5a:31:d8:14:76:05:b5:a8:df:4c:c4:d9:e4:
a9:65:45:6c:82:eb:44:3c:71:74:0d:6a:ed:74:b9:
7e:b1:eb:a7:b4:c4:a8:c7:f5:5f:ac:6c:5b:e5:ff:
01:85:74:1d:a7:e2:c9:1e:2d:1a:d5:68:96:16:93:
e5:b1:24:a8:2f:4f:b6:25:66:9e:71:6b:53:16:0a:
6b:2d:38:74:52:34:0a:7c:32:49:bf:1a:10:d0:07:
24:a6:6d:61:81:61:cc:69:1c:e3:39:f3:28:0c:28:
9a:8d:34:6a:5f:6c:fc:36:ce:9a:24:30:79:2a:6b:
96:fa:97:8e:7e:ba:96:3b:48:0d:75:bc:21:10:d2:
fe:a5:24:de:fd:c6:0e:fb:d1:fc:d8:58:08:d1:1b:
d2:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:5B:DF:55:46:58:7F:9D:6B:5C:0C:22:00:03:B5:85:C1:74:9A:1E
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS210445.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:f60::/44
2a06:a005:16f0::/44
2a06:a005:2180::/44
2a06:a005:29b0::/44
Signature Algorithm: sha256WithRSAEncryption
7b:dc:9a:db:46:a9:40:b3:8c:2f:2e:25:0a:03:3f:b6:e8:2f:
55:14:29:21:e7:08:f7:a2:39:90:31:65:cc:b6:30:b9:5d:ea:
14:fd:f4:19:03:59:ce:73:4a:26:d7:34:ab:01:a6:03:50:a4:
aa:4f:07:74:ce:f4:f0:e2:d2:53:9c:bd:7c:1f:22:aa:da:fc:
ce:12:fa:8d:07:7e:27:72:c1:9a:1d:36:f2:21:a4:34:14:a8:
ca:d5:02:d6:8c:a6:25:ca:d7:cd:b4:b1:27:06:83:b4:de:c8:
e8:94:f8:db:c3:28:23:33:80:ba:04:47:6e:fa:41:9a:63:c3:
ae:9a:db:3a:c6:02:a5:77:1a:5b:14:99:84:e9:88:8f:d4:e7:
24:e7:92:ca:30:a4:ef:48:a5:aa:3c:53:e7:b7:ab:93:43:ca:
33:17:a1:e8:02:1f:32:94:77:ef:f9:5c:3d:a3:be:8e:bb:f8:
b6:3c:49:86:cd:45:eb:06:9c:37:a4:0d:0f:fa:d7:68:22:eb:
c5:b5:29:50:8a:81:eb:56:1c:5e:5a:61:f5:da:13:00:ea:79:
32:95:86:c2:4a:6a:2b:fc:60:1d:ee:0d:9f:0e:28:dc:a3:5d:
cb:85:a7:e2:c4:06:02:cd:89:ad:fa:7b:32:8b:5d:c7:46:15:
be:98:f0:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:13:36 2024 by rpki-client on console-fra.rpki-client.org