Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS210562.roa
File: AS210562.roa (raw, json)
Hash identifier: JIXFbTBKcjTFwqjvcAC+2i271opaYE6M5prJY7tn2Es=
Subject key identifier: FD:01:D1:E3:3A:69:AD:A2:46:8F:BE:C2:DC:83:36:AC:96:0B:27:BA
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 2AE8101BE0A08DF4180B93CB61F5DB4C306C0175
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS210562.roa
Signing time: Tue 13 Feb 2024 17:44:24 +0000
ROA not before: Tue 13 Feb 2024 17:39:24 +0000
ROA not after: Tue 11 Feb 2025 17:44:24 +0000
asID: 210562
IP address blocks: 2a06:a005:2c20::/44 maxlen: 48
2a06:a005:2c30::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:e8:10:1b:e0:a0:8d:f4:18:0b:93:cb:61:f5:db:4c:30:6c:01:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Feb 13 17:39:24 2024 GMT
Not After : Feb 11 17:44:24 2025 GMT
Subject: CN=FD01D1E33A69ADA2468FBEC2DC8336AC960B27BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:45:d7:96:67:25:07:58:70:38:62:9f:2a:9b:
36:f4:41:ab:da:6b:b5:c1:d2:38:a6:eb:49:fa:36:
f2:01:6d:cd:c0:be:b3:3c:81:1f:74:a6:04:54:85:
4b:37:81:52:85:2d:a1:60:d8:a8:92:c9:85:bc:0e:
2f:5a:07:56:2b:e9:81:95:fd:c7:74:4d:58:9a:01:
91:55:32:d8:3d:4a:ee:0d:c2:7f:81:4b:d5:10:f4:
a5:9a:e3:be:5b:fe:04:59:f7:ba:64:6c:b7:11:dd:
ab:69:fc:8c:49:77:4d:5f:70:0a:d5:38:4a:98:bf:
ec:c4:c3:e8:fc:58:ae:a9:41:f5:02:f1:68:6a:b2:
62:9f:6e:e8:e3:9d:19:6e:41:fa:10:14:6f:7b:15:
1f:8c:62:8e:f2:d4:bf:6e:8a:75:5b:bf:d5:6d:aa:
2f:ae:3a:99:3f:99:ae:1b:8b:62:6d:43:05:c3:5c:
71:09:ba:8a:02:c2:01:cc:50:bc:b3:a8:1a:59:cd:
90:a2:6c:5e:3c:23:37:94:ab:3b:54:f6:b9:b6:83:
e3:be:b8:96:e2:25:da:47:42:89:c1:e6:a9:5b:91:
d6:cf:71:6d:a0:d5:b4:dd:fd:80:7d:f2:25:36:5d:
20:69:f7:87:8e:af:3a:45:73:3e:26:4b:0a:3e:55:
9a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:01:D1:E3:3A:69:AD:A2:46:8F:BE:C2:DC:83:36:AC:96:0B:27:BA
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS210562.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:2c20::/43
Signature Algorithm: sha256WithRSAEncryption
42:79:f5:ad:19:e9:7c:80:27:56:b6:c1:b6:15:ca:f9:2a:e7:
85:4f:47:18:65:93:81:00:56:2d:9a:43:f8:68:b6:33:6d:37:
93:4e:93:2a:c4:cc:3f:bd:14:e1:b0:5b:1e:7a:f7:33:a5:96:
e5:fb:6d:47:92:af:a3:5e:88:54:64:4f:db:1f:59:62:d3:d7:
28:62:78:b8:70:04:d7:56:3b:02:a1:22:02:79:de:19:a8:e3:
e5:5e:c6:45:c6:b5:bf:79:60:ab:47:b5:7a:36:0a:0e:f0:a5:
89:33:b4:12:e6:ca:ac:d5:3a:93:64:2b:9f:39:6f:f8:30:eb:
b3:c9:9f:3e:ef:24:87:ee:57:fc:8f:0b:39:48:57:1f:dc:60:
ad:12:d3:97:ea:c8:90:7f:eb:f2:de:58:43:fa:18:6d:11:78:
48:1d:6c:2a:f3:dd:f5:5c:29:6f:c1:96:56:2a:30:41:30:8b:
e7:9c:6f:ee:23:95:ff:31:86:74:3f:ad:01:fa:87:12:5b:d5:
9f:27:af:91:e1:59:97:37:3a:a2:d0:59:5e:99:ad:92:95:aa:
60:19:dd:3f:d5:ec:6b:0c:f4:41:d7:1a:da:62:ab:56:d0:7d:
35:79:d2:f7:3a:2f:97:fb:35:b1:80:76:5f:74:13:ac:89:3b:
e8:19:cb:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 20:12:34 2024 by rpki-client on console-ams.rpki-client.org