Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS210537.roa
File: AS210537.roa (raw, json)
Hash identifier: 81piKnCIQ4fAfPhc9i/HY4e5vIa6tAnmhL9C++SVrbQ=
Subject key identifier: 3D:B9:24:B7:23:81:D3:1F:2A:63:E8:63:C7:6B:B7:D5:5D:E5:7A:0A
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 21653B0A5935B3A5289BA72000817F107930D6B6
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS210537.roa
Signing time: Mon 06 Nov 2023 09:36:07 +0000
ROA not before: Mon 06 Nov 2023 09:31:07 +0000
ROA not after: Mon 04 Nov 2024 09:36:07 +0000
asID: 210537
IP address blocks: 2a06:a005:1508::/48 maxlen: 48
2a06:a005:20c0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:65:3b:0a:59:35:b3:a5:28:9b:a7:20:00:81:7f:10:79:30:d6:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Nov 6 09:31:07 2023 GMT
Not After : Nov 4 09:36:07 2024 GMT
Subject: CN=3DB924B72381D31F2A63E863C76BB7D55DE57A0A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a1:73:f1:53:a7:c4:5e:30:52:32:e3:3c:52:
dc:03:8b:24:07:8c:e7:37:0b:14:b5:90:c7:dd:23:
42:49:e8:d0:b1:3a:aa:17:f5:3a:16:b2:13:97:c1:
6e:a2:c6:4f:27:28:5e:0c:fd:1a:20:69:4c:39:93:
00:b8:63:14:a7:5d:ca:d4:c2:90:4c:f0:d7:98:22:
64:d1:14:7f:e2:de:a6:24:db:92:74:e4:cb:c9:54:
a0:43:a1:53:9e:45:aa:e7:09:7e:64:b4:51:43:59:
a9:22:65:54:e6:1f:50:1d:27:3c:df:9b:d6:47:6e:
02:8a:ba:81:9d:28:eb:15:7c:bf:31:17:55:c2:a2:
8f:e7:8f:35:5c:1b:63:f8:dd:38:88:eb:e1:76:bc:
dc:fb:16:df:02:26:e7:d4:83:38:a7:81:20:bb:f1:
1f:fc:9c:f2:1e:cc:49:b5:e4:08:ab:71:fa:75:0c:
19:10:0b:03:99:1e:0d:c2:3d:55:9f:ee:a7:b7:2d:
1b:55:ad:43:e5:94:a8:05:23:8c:39:77:21:1f:f7:
04:62:43:9f:89:62:85:b8:c4:7a:9d:8a:44:ff:5b:
ff:2f:73:14:7d:2c:c0:43:ff:dd:75:2a:cb:0c:1a:
cb:3a:1c:71:59:65:66:97:e5:98:4d:84:db:43:a5:
7e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:B9:24:B7:23:81:D3:1F:2A:63:E8:63:C7:6B:B7:D5:5D:E5:7A:0A
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS210537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1508::/48
2a06:a005:20c0::/44
Signature Algorithm: sha256WithRSAEncryption
84:40:8a:e0:da:34:69:43:65:d9:dd:7e:72:c7:76:7f:ad:4f:
59:b9:87:90:b2:23:f3:34:a3:2e:70:2e:e6:90:b8:52:7e:fe:
b2:f1:90:98:04:1c:0c:4f:dd:51:71:5a:9e:85:2f:f5:6f:c5:
49:44:ed:91:78:c3:52:de:9c:6f:7c:3f:66:1d:5d:9a:11:e7:
f4:33:6a:cb:56:8d:74:99:2d:39:b9:fc:cb:bf:90:97:12:8f:
e5:50:96:b7:86:5d:51:ac:2d:3a:ce:98:7a:e5:1a:98:6a:7e:
cb:98:31:95:a6:9a:ad:dc:b4:87:fe:6a:47:ce:1e:64:7f:ff:
cf:56:4c:ad:ec:ed:37:18:6d:a7:44:01:2c:84:b7:1b:e8:8f:
1d:b0:51:7f:b7:98:7e:97:fb:06:41:db:0f:d5:f7:4d:e4:63:
18:e4:6d:cb:5c:72:28:32:43:30:e5:be:da:93:e3:90:b8:66:
20:c1:ac:99:2f:b6:24:5e:ff:81:2c:08:05:26:c5:0d:bb:ac:
c3:27:f7:4a:7e:b2:9f:2e:3d:fb:94:86:23:ea:81:86:9c:c6:
06:d7:92:3c:ce:9b:09:7e:87:58:2b:9b:85:5a:1e:15:f4:02:
a5:58:0b:15:4c:95:cd:a3:b9:b3:32:e8:3b:28:39:1b:68:04:
d4:4d:fa:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 12:12:18 2024 by rpki-client on console-ams.rpki-client.org