Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS210490.roa
File: AS210490.roa (raw, json)
Hash identifier: C7dB4U5UaT4odscAYYPrdN/rLzQcUrDa5ewxGglH754=
Subject key identifier: CF:A8:1A:8A:A4:E5:6B:67:48:EA:31:2F:93:E5:BA:2A:42:AA:6D:7D
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 07871D2BE42AC9DE69008FAB080766FF812CF351
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS210490.roa
Signing time: Tue 05 Dec 2023 02:44:10 +0000
ROA not before: Tue 05 Dec 2023 02:39:10 +0000
ROA not after: Tue 03 Dec 2024 02:44:10 +0000
asID: 210490
IP address blocks: 2a06:a005:2190::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:87:1d:2b:e4:2a:c9:de:69:00:8f:ab:08:07:66:ff:81:2c:f3:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Dec 5 02:39:10 2023 GMT
Not After : Dec 3 02:44:10 2024 GMT
Subject: CN=CFA81A8AA4E56B6748EA312F93E5BA2A42AA6D7D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:43:c7:10:8f:76:68:ea:b7:d9:22:4a:e7:53:
c8:e0:32:da:29:69:46:29:0e:e6:98:6f:f6:80:3e:
91:7b:b2:3a:18:dc:1e:ae:dc:7b:6e:f5:07:6b:45:
98:1b:8f:d9:e8:b8:1a:f2:81:26:42:88:17:82:e7:
a9:fb:bb:ed:a8:a6:a8:01:49:db:57:4f:a6:64:e3:
dc:b1:0a:6c:43:f4:b3:44:70:33:97:db:b8:1a:3c:
af:3e:e0:a9:d5:1f:a7:dc:e4:77:6c:8e:0a:51:2e:
85:7f:cd:37:f8:35:8a:ff:3f:37:4f:ea:09:8d:51:
58:14:d4:5c:2b:be:c5:02:da:ed:d2:c3:6a:02:c8:
42:8c:58:0e:a7:23:a7:87:40:21:2d:0e:65:77:d8:
57:0c:f9:4a:31:ee:0b:12:69:db:00:c5:88:73:0a:
a1:5a:82:bf:ea:d8:ba:4a:ee:06:9b:a2:55:13:23:
da:b7:d8:d1:ba:98:c6:99:96:4a:be:95:dc:99:64:
26:2d:85:62:9a:35:39:fb:92:db:72:09:75:25:e9:
c8:5f:64:5a:dc:85:34:85:8f:81:69:d6:16:87:11:
95:ee:e2:54:ec:e6:22:34:c4:ea:e2:18:85:ce:fb:
de:cd:5b:33:17:45:b0:e0:cc:1d:68:9e:3d:4d:df:
8b:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:A8:1A:8A:A4:E5:6B:67:48:EA:31:2F:93:E5:BA:2A:42:AA:6D:7D
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS210490.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:2190::/44
Signature Algorithm: sha256WithRSAEncryption
b6:3c:48:a1:e9:43:ef:8b:1f:7b:a0:3a:7c:d9:96:83:9b:05:
09:98:1f:03:ee:d7:2d:86:d6:e2:3c:3e:90:38:02:41:53:08:
e6:d1:88:79:cd:15:76:54:95:a6:7b:26:70:d1:08:7a:da:39:
1b:72:73:33:fe:cc:91:a7:92:35:d3:dd:ba:96:73:43:c8:7c:
9e:78:b9:fc:98:e2:cf:e7:3a:58:e2:1c:c4:32:18:46:4a:88:
71:fe:0c:db:42:fa:f2:c6:9a:e7:6c:17:da:6a:c6:37:44:99:
60:8f:ef:b7:1b:d2:06:64:fb:b1:93:74:76:7e:c2:37:10:61:
0b:c8:8a:46:00:bf:c3:d1:04:06:31:74:45:0a:7d:d9:39:15:
69:7b:41:eb:9b:98:a0:83:94:95:c2:48:2d:c6:a1:74:b8:6f:
0b:6d:c7:2c:4c:a2:c3:e7:1a:5e:28:f2:18:dd:97:41:85:78:
59:0b:e6:ea:ac:08:4e:b7:42:5f:87:d8:1d:f1:8f:1c:19:15:
95:9e:7f:52:a3:10:0f:71:78:3a:25:23:54:67:e8:66:e8:3f:
9b:d0:16:38:0a:5f:91:8d:63:95:79:eb:c6:38:dd:2a:dc:cb:
33:68:a4:ec:c4:12:fd:44:f3:f8:27:2e:f8:2b:51:04:f3:6a:
2d:68:d5:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 12:13:13 2024 by rpki-client on console-fra.rpki-client.org