Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS210445.roa
File: AS210445.roa (raw, json)
Hash identifier: GcW9ZZb8fbWcA3tkWQOdFqS57QytEZbeiYhjv71DOn8=
Subject key identifier: 52:B4:A8:23:8B:C8:B5:EC:FC:EF:D5:81:6C:EE:DC:80:18:36:FF:CF
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 6147AC285E69CC2A61FF902857F4CC32F5025E26
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS210445.roa
Signing time: Tue 21 Jan 2025 10:40:16 +0000
ROA not before: Tue 21 Jan 2025 10:35:16 +0000
ROA not after: Tue 20 Jan 2026 10:40:16 +0000
asID: 210445
IP address blocks: 2a06:a005:f60::/44 maxlen: 48
2a06:a005:16f0::/44 maxlen: 48
2a06:a005:2180::/44 maxlen: 48
2a06:a005:29b0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 09:24:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:47:ac:28:5e:69:cc:2a:61:ff:90:28:57:f4:cc:32:f5:02:5e:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Jan 21 10:35:16 2025 GMT
Not After : Jan 20 10:40:16 2026 GMT
Subject: CN=52B4A8238BC8B5ECFCEFD5816CEEDC801836FFCF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ff:cf:d5:48:0e:36:de:24:a4:ad:16:9b:80:
80:8c:d1:bc:93:b1:56:c7:cd:d0:06:9e:ae:e6:3b:
ea:e8:cc:73:59:83:7f:3f:55:92:cb:5a:ae:6d:d2:
e4:4d:d4:cf:80:1a:d8:46:5f:f2:80:3b:c2:d2:f6:
6b:76:46:cd:29:70:9f:71:2e:e4:65:9a:1a:38:66:
3e:37:ae:83:31:1e:a8:ae:91:90:5e:2c:06:84:54:
f6:de:b9:e2:90:87:9f:b5:10:83:7b:b3:d3:a1:f0:
2b:a7:7d:1e:24:e1:70:83:1b:a0:7d:e3:f2:e3:bf:
c1:a3:d3:99:43:ec:db:57:e4:77:bd:54:08:b2:c3:
af:81:e5:84:2d:4e:65:1a:23:10:62:68:e7:4b:dd:
ae:23:a0:1a:4f:43:95:ec:cd:c9:33:23:c8:b4:47:
a8:ac:4b:fc:dd:02:53:6a:61:bd:9a:1d:69:79:51:
de:0d:4b:d9:2d:23:95:51:dc:e4:30:76:ca:29:c7:
94:bb:c9:7e:f1:b3:cf:ac:52:d3:d4:08:33:2e:90:
97:13:21:c1:ed:e0:aa:48:1f:11:d8:66:0d:3a:fb:
e5:ad:74:02:1c:1f:c1:d6:33:e7:2d:56:b7:ee:7c:
cc:58:c1:5d:92:77:87:93:0a:d8:88:ea:58:03:81:
72:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:B4:A8:23:8B:C8:B5:EC:FC:EF:D5:81:6C:EE:DC:80:18:36:FF:CF
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS210445.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:f60::/44
2a06:a005:16f0::/44
2a06:a005:2180::/44
2a06:a005:29b0::/44
Signature Algorithm: sha256WithRSAEncryption
54:c8:92:ac:18:c7:7d:d3:fa:af:93:6c:b9:43:4e:c3:b6:2f:
54:3c:4f:55:ff:69:5a:08:74:13:44:b6:08:23:7f:c0:ce:1d:
53:24:48:42:e4:fd:4e:90:64:6f:db:0a:e1:89:e6:bf:9b:90:
90:13:59:76:13:58:6c:89:9e:af:49:c8:ce:d0:a9:43:dc:23:
3f:00:49:f7:c8:f4:c0:6e:35:cc:25:75:a7:d1:3e:5d:1a:f0:
b7:dc:17:e4:ca:bb:48:68:47:3f:f5:2f:90:c0:cd:19:0a:79:
c3:c7:f0:5d:5c:30:24:88:4a:05:af:87:f1:6b:30:ab:d0:15:
a3:ce:49:08:7c:d8:06:b3:2d:73:6c:cd:3f:50:d6:3c:80:69:
95:8c:f4:7b:7a:2d:b5:7f:19:a0:a0:a8:23:41:28:7e:f4:27:
87:f3:13:9b:e4:85:e2:ee:d7:c8:b7:f4:41:2d:0d:b3:4b:45:
70:10:1c:50:e5:5b:92:06:c2:8e:ca:75:74:da:66:a2:d4:fd:
e7:47:72:20:58:fd:0c:2b:76:86:e3:5f:1f:d7:b9:47:fc:61:
f9:18:f0:bf:13:b0:b1:1e:f4:69:68:ee:cd:44:d6:37:b9:c2:
c0:e5:1a:14:d5:7b:40:60:f7:41:03:82:70:8e:8e:83:0e:84:
ce:fe:6b:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:40:22 2025 by rpki-client