Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS210633.roa
File: AS210633.roa (raw, json)
Hash identifier: qUnjO1Ws3y9iTm2TwoUfVY8BHYqw55BBGWgfv2MiXyE=
Subject key identifier: A3:64:16:39:FC:97:14:21:78:86:30:C5:ED:7F:C8:7C:1D:92:F9:A9
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 28A5A37DA0229DDF44C92503B13E2723166AA83C
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS210633.roa
Signing time: Tue 05 Nov 2024 03:40:09 +0000
ROA not before: Tue 05 Nov 2024 03:35:09 +0000
ROA not after: Tue 04 Nov 2025 03:40:09 +0000
asID: 210633
IP address blocks: 2a06:a005:7d0::/44 maxlen: 48
2a06:a005:7e0::/44 maxlen: 48
2a06:a005:7f0::/44 maxlen: 48
2a06:a005:800::/44 maxlen: 48
2a06:a005:810::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:a5:a3:7d:a0:22:9d:df:44:c9:25:03:b1:3e:27:23:16:6a:a8:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Nov 5 03:35:09 2024 GMT
Not After : Nov 4 03:40:09 2025 GMT
Subject: CN=A3641639FC971421788630C5ED7FC87C1D92F9A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ac:96:1f:50:e6:d1:16:59:a1:00:e2:a9:bf:
0d:57:41:65:b5:c6:7f:b2:b5:c1:02:fa:99:f5:94:
d3:c5:38:7c:d2:ae:3c:0e:fd:90:aa:6d:63:3a:66:
d8:e4:d3:84:33:d0:3f:f3:61:a1:ce:f1:c2:5a:a0:
88:50:b1:39:a0:47:66:90:59:51:da:32:80:c9:8e:
72:bd:45:02:44:eb:7f:7c:9a:42:61:32:e3:c3:c0:
fe:59:1d:cf:36:c4:66:7d:1c:26:85:46:9e:68:e1:
ea:35:32:ae:a4:e1:08:96:4d:45:ab:45:06:a7:9a:
a2:aa:50:5a:37:75:28:94:55:b0:62:6e:f6:f8:51:
97:a4:62:1c:e7:b1:65:9d:69:69:a6:70:5a:02:b4:
af:3c:7f:9d:73:75:e6:08:ce:95:df:de:53:85:b0:
d7:56:ac:1a:df:f0:c9:80:0d:ef:a7:91:c5:4b:17:
9a:5f:4a:e8:2a:bb:b1:53:3e:dc:07:f1:c0:8e:1a:
8e:32:5f:07:c7:00:18:5b:a9:96:6f:7c:6a:86:1e:
af:d0:96:61:65:e2:74:95:d5:59:d9:e2:ff:c6:31:
5f:0c:04:e2:aa:4e:e1:03:8a:1c:fb:2f:cb:1e:ce:
f4:78:89:a7:32:26:46:78:38:0c:e6:49:01:02:17:
13:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:64:16:39:FC:97:14:21:78:86:30:C5:ED:7F:C8:7C:1D:92:F9:A9
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS210633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:7d0::-2a06:a005:81f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
15:9b:d4:05:48:d3:ba:77:85:91:1c:1c:68:8d:b8:b3:f2:cc:
65:03:a5:4a:e5:95:8d:ca:ac:42:d6:5a:81:ae:dc:41:ac:d2:
c6:25:96:0b:b9:4b:50:2e:d8:47:60:66:1b:e6:0e:59:20:d2:
34:66:b8:af:48:6f:fa:ad:ef:f8:5f:64:57:66:92:55:e0:b9:
7d:24:28:ac:48:1b:56:7b:fe:ac:89:53:fb:07:a9:4e:95:6a:
63:20:cc:12:4d:19:18:2b:0f:ef:78:36:5d:e4:e9:3b:9b:55:
d6:00:d4:11:65:01:33:0e:38:16:84:2c:b0:71:a7:16:16:d8:
dd:41:ce:88:9c:59:91:8e:7f:81:45:cb:1e:8c:07:c4:6e:47:
81:6f:95:ac:28:dc:67:c0:6d:c2:79:6a:b3:30:65:e7:71:01:
5c:35:3b:37:2f:64:f8:59:96:bc:81:22:75:52:3c:fb:89:94:
87:d3:ae:24:b8:b0:39:68:e6:50:ee:9e:19:e5:91:29:ce:97:
5b:6e:78:df:0a:70:59:7e:95:a0:6a:1a:65:d6:51:75:1c:c7:
b0:e2:66:f4:e6:fa:56:df:54:e0:29:ab:1f:a4:6f:bb:79:83:
50:37:8e:bc:c7:44:60:45:18:02:05:16:12:58:13:b6:05:c9:
ec:41:f6:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 06:04:03 2024 by rpki-client on console-ams.rpki-client.org