Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS210633.roa
File: AS210633.roa (raw, json)
Hash identifier: ek8CxrnMCylEUQ+1na5sd4GrJivLd6lA5DP3xHABRO4=
Subject key identifier: 2C:11:07:29:C9:3E:DF:63:F4:B7:6F:43:54:BE:75:66:96:3F:0B:0F
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 0CD60907B5F2EE0A95C40A493AA321E34CF8AAD9
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS210633.roa
Signing time: Tue 05 Dec 2023 02:44:18 +0000
ROA not before: Tue 05 Dec 2023 02:39:18 +0000
ROA not after: Tue 03 Dec 2024 02:44:18 +0000
asID: 210633
IP address blocks: 2a06:a005:7d0::/44 maxlen: 48
2a06:a005:7e0::/44 maxlen: 48
2a06:a005:7f0::/44 maxlen: 48
2a06:a005:800::/44 maxlen: 48
2a06:a005:810::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:d6:09:07:b5:f2:ee:0a:95:c4:0a:49:3a:a3:21:e3:4c:f8:aa:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Dec 5 02:39:18 2023 GMT
Not After : Dec 3 02:44:18 2024 GMT
Subject: CN=2C110729C93EDF63F4B76F4354BE7566963F0B0F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:a6:f5:70:20:11:cf:13:f9:31:36:95:75:11:
cd:9c:12:f2:0d:0e:da:c9:c4:3b:46:e7:e0:24:7f:
0d:d9:6f:cd:8d:cb:16:e0:40:70:be:6b:de:e8:8a:
d6:45:18:97:51:be:45:ba:5b:14:e2:8a:3a:e8:62:
e2:12:40:c5:c8:24:13:bd:cb:67:af:f6:7f:d5:ab:
66:fd:7d:c9:06:c4:f7:7f:b4:87:2f:27:40:82:b9:
8e:e8:d0:cb:45:dc:e6:05:cb:f8:e1:2d:36:85:04:
5a:dc:90:88:1e:4d:fd:ad:aa:10:a5:70:06:60:1a:
96:9c:33:a0:5b:ac:e9:f7:2c:40:11:44:a2:0d:41:
57:d9:84:b7:aa:2e:f0:c7:63:45:0f:7b:d9:48:30:
db:28:da:e2:b2:ff:10:56:c9:c2:f3:ec:61:67:87:
42:18:33:4e:31:9a:87:e8:e8:84:b4:67:3c:79:10:
7c:f6:cc:21:56:7d:57:f4:b1:f0:76:ad:2a:a0:25:
13:e3:b6:a2:48:3f:ea:fb:2a:af:11:10:6e:e2:19:
8f:04:3a:a5:50:9c:35:f1:fe:64:ef:19:26:97:84:
3f:89:cb:c6:19:01:52:bb:1a:0b:f7:a2:20:ae:e2:
64:07:d6:64:f3:ec:2b:cb:d3:45:5d:10:8a:45:d3:
b6:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:11:07:29:C9:3E:DF:63:F4:B7:6F:43:54:BE:75:66:96:3F:0B:0F
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS210633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:7d0::-2a06:a005:81f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
56:7c:a4:be:c0:2a:20:ad:9d:82:c1:01:ea:bc:8b:ed:8a:3b:
f1:87:1a:00:2b:3f:b5:c5:68:fe:3d:24:3f:29:e9:28:f8:b2:
27:e5:2e:92:1c:8f:c0:fa:1c:07:3f:6a:aa:80:2f:a2:b5:bf:
5c:45:d7:bc:fa:85:ed:9b:1c:2e:28:ba:6f:ad:ea:9a:c3:f2:
da:73:eb:1e:0c:5b:9d:56:42:87:77:67:75:67:71:ac:7a:83:
26:7a:41:34:99:d2:30:2a:a1:9e:e7:97:38:c9:4b:eb:c0:77:
48:c9:50:9a:e2:6a:cb:e9:4c:1a:6b:27:e3:ca:c3:63:5f:33:
d4:0d:f1:69:db:c8:08:c8:6b:33:67:00:7f:3e:28:6c:d4:23:
fd:01:e2:0d:c0:91:9d:75:8d:20:7a:46:83:6c:a6:28:39:64:
57:85:eb:f6:cf:e5:27:21:a6:88:19:b1:2f:f2:64:4d:71:31:
eb:fa:52:03:ed:34:db:cf:27:a3:f2:88:a4:09:bc:15:36:83:
4f:20:27:8f:24:18:bf:e1:e5:26:d9:f9:9f:50:61:08:2c:f3:
64:28:32:67:d0:3d:2b:77:5a:86:80:ca:0e:8b:0d:fb:52:90:
0c:9b:95:21:6b:20:9e:86:0e:66:20:80:d8:0f:46:d4:63:17:
5a:3e:f3:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 12:13:13 2024 by rpki-client on console-fra.rpki-client.org