Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS210490.roa
File: AS210490.roa (raw, json)
Hash identifier: rcTYM1zqDCMKGI2CUlPugfwIeoGOTAaIIu4Llb0FT8E=
Subject key identifier: F3:BA:D4:59:2D:B6:A1:F0:12:95:5F:DD:3F:4D:DF:D6:40:29:4B:71
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 255AA15B3BE593BA215B57C3EC6D3D9086FCA897
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS210490.roa
Signing time: Tue 05 Nov 2024 03:40:04 +0000
ROA not before: Tue 05 Nov 2024 03:35:04 +0000
ROA not after: Tue 04 Nov 2025 03:40:04 +0000
asID: 210490
IP address blocks: 2a06:a005:2190::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:5a:a1:5b:3b:e5:93:ba:21:5b:57:c3:ec:6d:3d:90:86:fc:a8:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Nov 5 03:35:04 2024 GMT
Not After : Nov 4 03:40:04 2025 GMT
Subject: CN=F3BAD4592DB6A1F012955FDD3F4DDFD640294B71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:88:dd:2b:11:af:18:0f:37:9f:5e:b1:7c:95:
c0:89:1e:65:e3:7d:53:b5:c0:3a:9c:56:f5:30:0b:
5c:c7:c9:31:22:7d:4c:bc:2b:2e:99:36:24:ff:48:
15:ac:fe:d7:d4:90:a5:c3:c2:bf:8f:49:0f:4b:35:
af:a4:49:6f:eb:8f:5d:88:3c:a2:bb:33:0a:61:f6:
fe:07:f6:16:44:d2:3f:83:cd:1a:15:2f:4a:b0:34:
61:1d:82:74:05:d3:c9:1a:24:59:db:29:70:8e:1a:
4f:7a:ec:75:18:80:ce:a1:8a:7d:bb:c9:34:cd:b8:
2f:05:45:bc:ea:07:7a:a4:9d:5c:f1:ac:37:f0:46:
11:c3:1e:5c:2b:3d:6c:ef:98:74:a9:57:f8:58:5b:
93:53:d3:09:d4:ec:75:ce:78:61:59:86:d7:b8:fb:
89:45:0e:d2:23:d8:30:4a:44:24:be:d1:07:a5:47:
bf:65:fa:d2:93:d3:f8:66:38:e6:ad:55:c4:4f:1e:
e8:36:fe:71:ac:88:01:28:f8:cc:20:29:80:26:3d:
4f:a8:af:10:16:ed:a6:b5:e2:d6:e0:18:85:1d:7e:
b2:ed:b6:7e:20:73:3a:d2:5b:19:08:67:89:15:c8:
6f:33:a9:83:70:6f:23:9a:2c:5c:8b:4b:38:21:45:
44:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:BA:D4:59:2D:B6:A1:F0:12:95:5F:DD:3F:4D:DF:D6:40:29:4B:71
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS210490.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:2190::/44
Signature Algorithm: sha256WithRSAEncryption
4f:10:57:67:14:8b:df:13:44:aa:0c:89:1a:7c:22:62:e8:78:
9e:ce:66:89:64:fb:24:67:af:14:0d:ce:4c:b9:fc:7a:86:15:
8a:f1:58:a9:ef:e3:f0:6a:ce:18:8a:bd:91:34:02:f9:bc:30:
c4:c1:4d:16:28:e7:6a:82:4f:9d:d9:8c:91:0a:7a:52:44:dc:
b5:b4:87:0a:ff:60:b0:a2:1d:f3:a7:b0:26:6a:b1:df:fb:79:
85:9a:b3:e2:90:96:6d:7a:d5:a8:00:95:de:cf:4f:3e:23:80:
62:47:76:e0:c6:b6:03:24:5e:d0:38:35:c5:2e:21:b5:07:76:
0c:4c:75:52:50:8d:c9:7f:74:e6:b1:c9:8a:f3:3a:96:e3:d2:
5a:31:47:4a:57:52:0a:28:2e:6e:c7:3b:b9:42:4b:d4:06:c8:
65:cc:45:36:16:c0:00:d2:f1:74:30:3a:be:32:c2:f2:31:84:
46:30:d6:c5:12:e7:e4:0b:03:03:ac:a8:bf:ae:15:6d:d1:0f:
ac:31:b9:4e:ba:1b:57:fd:b4:9e:07:6d:55:a2:17:8a:e4:c4:
40:f6:4c:aa:a7:41:ca:91:15:7f:b2:40:ae:9d:cc:e3:95:a2:
7b:67:71:69:a5:05:7a:37:a8:64:42:d8:cd:5a:a9:6e:ef:47:
1e:bb:d5:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:01:55 2024 by rpki-client on console-ams.rpki-client.org