Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS210645.roa
File: AS210645.roa (raw, json)
Hash identifier: uqxf1L/S5cj8nlgpLE2BF1r/ZGNWgMwQZk3yzcMUoAY=
Subject key identifier: B5:A4:DF:06:A5:72:30:E9:86:7A:5B:46:3C:82:C3:DD:1E:D0:F6:32
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 69A3EC269C4C57F662A954DA802AF1D11CB82832
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS210645.roa
Signing time: Mon 11 Dec 2023 02:44:21 +0000
ROA not before: Mon 11 Dec 2023 02:39:21 +0000
ROA not after: Mon 09 Dec 2024 02:44:21 +0000
asID: 210645
IP address blocks: 2a06:a005:2ab0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 14:41:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:a3:ec:26:9c:4c:57:f6:62:a9:54:da:80:2a:f1:d1:1c:b8:28:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Dec 11 02:39:21 2023 GMT
Not After : Dec 9 02:44:21 2024 GMT
Subject: CN=B5A4DF06A57230E9867A5B463C82C3DD1ED0F632
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d1:8d:e2:fb:4d:e7:17:f9:b3:0d:a4:0e:a3:
25:e7:83:fc:e9:f7:d4:57:2d:9b:c9:84:0b:d6:63:
a8:14:c7:4d:9d:92:1f:b4:5b:d3:3b:59:a1:1d:df:
df:3c:38:dd:fc:07:26:ab:32:f0:5c:a5:63:4e:0d:
16:a8:14:e3:43:71:44:7f:ae:4a:2e:60:96:32:15:
cc:08:37:66:fb:e0:14:26:07:8d:5c:44:b1:73:ba:
7e:da:68:23:99:c2:cd:53:5e:a3:b7:4e:25:cc:f6:
54:32:c5:92:12:8a:c5:d5:02:29:eb:0f:26:98:80:
46:f5:2a:89:ba:dd:df:5b:4c:9d:6d:14:ce:e2:cc:
82:a4:53:75:b2:d6:65:4c:29:b3:f1:ce:dd:42:2d:
0d:ab:5a:cc:e4:e7:6a:63:51:69:55:8c:cf:16:04:
7d:9a:97:5a:88:30:59:e4:12:c2:e9:17:a4:08:c1:
63:ef:27:c7:0d:36:c3:ae:9d:29:20:c7:0c:48:a8:
b7:4e:7b:41:50:55:7d:30:91:4b:22:c2:e5:16:cc:
20:83:44:f8:a9:dc:a6:a3:03:a8:c3:54:3e:92:51:
53:36:66:05:6e:3f:3c:c7:98:9c:de:48:f5:38:42:
89:8e:1e:d3:4e:65:ff:4b:06:89:72:ce:c6:7e:ee:
e8:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:A4:DF:06:A5:72:30:E9:86:7A:5B:46:3C:82:C3:DD:1E:D0:F6:32
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS210645.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:2ab0::/44
Signature Algorithm: sha256WithRSAEncryption
a8:82:ec:74:f4:5e:df:74:36:63:09:5c:57:02:de:60:ed:9f:
a9:c6:f2:ee:64:39:b9:7b:ed:0e:de:d6:9b:94:92:db:ef:1b:
2d:c5:49:71:fc:aa:25:5b:8a:41:ca:f4:5f:b4:ee:54:79:9e:
eb:27:28:12:47:06:4a:47:b4:5b:1b:fc:1d:d6:9a:34:88:e5:
5a:d0:9e:a6:77:63:33:e7:71:a8:23:fc:04:43:88:50:d1:3e:
9d:72:36:2b:22:61:52:94:4f:cd:4f:4f:cc:9d:68:1f:c1:d0:
bc:dd:25:69:e8:16:87:f3:e1:b0:47:0f:bb:36:72:4e:10:82:
d4:bc:49:22:f3:ba:81:96:5c:c3:55:fd:a9:ad:e6:80:1e:81:
3f:04:e5:24:fb:ca:ea:a1:2a:2b:0f:fa:55:f9:9f:f3:53:6e:
36:55:be:8e:49:fe:ef:06:07:e2:3b:b9:34:0c:82:be:3d:35:
99:f9:83:56:54:09:20:61:11:f6:51:70:88:46:c1:4a:12:29:
43:0b:ac:df:90:cc:19:c5:0f:d4:7c:fe:4b:c1:12:62:5a:47:
89:d0:2b:87:e0:40:46:69:e9:32:4a:c6:71:9b:be:92:d8:39:
b3:c6:18:3e:6e:a1:27:98:27:88:7a:ac:f0:a2:e4:27:9c:02:
84:b7:91:7e
-----BEGIN CERTIFICATE-----
MIIE6DCCA9CgAwIBAgIUaaPsJpxMV/ZiqVTagCrx0Ry4KDIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzk5NDM4ZjFiMTc2MmFlZWY4YTM1Y2Y0ZTZjYmFlOTc2
OTliZDAyMDAeFw0yMzEyMTEwMjM5MjFaFw0yNDEyMDkwMjQ0MjFaMDMxMTAvBgNV
BAMTKEI1QTRERjA2QTU3MjMwRTk4NjdBNUI0NjNDODJDM0REMUVEMEY2MzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx0Y3i+03nF/mzDaQOoyXng/zp
99RXLZvJhAvWY6gUx02dkh+0W9M7WaEd3988ON38ByarMvBcpWNODRaoFONDcUR/
rkouYJYyFcwIN2b74BQmB41cRLFzun7aaCOZws1TXqO3TiXM9lQyxZISisXVAinr
DyaYgEb1Kom63d9bTJ1tFM7izIKkU3Wy1mVMKbPxzt1CLQ2rWszk52pjUWlVjM8W
BH2al1qIMFnkEsLpF6QIwWPvJ8cNNsOunSkgxwxIqLdOe0FQVX0wkUsiwuUWzCCD
RPip3KajA6jDVD6SUVM2ZgVuPzzHmJzeSPU4QomOHtNOZf9LBolyzsZ+7uh7AgMB
AAGjggHyMIIB7jAdBgNVHQ4EFgQUtaTfBqVyMOmGeltGPILD3R7Q9jIwHwYDVR0j
BBgwFoAUeZQ48bF2Ku74o1z05suul2mb0CAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi83OTk0MzhGMUIx
NzYyQUVFRjhBMzVDRjRFNkNCQUU5NzY5OUJEMDIwLmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZVpRNDhiRjJLdTc0bzF6MDVzdXVsMm1iMENBLmNlcjBwBggrBgEF
BQcBCwRkMGIwYAYIKwYBBQUHMAuGVHJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv
cmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5ZC8yL0FT
MjEwNjQ1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEH
AQH/BBMwETAPBAIAAjAJAwcEKgagBSqwMA0GCSqGSIb3DQEBCwUAA4IBAQCogux0
9F7fdDZjCVxXAt5g7Z+pxvLuZDm5e+0O3tablJLb7xstxUlx/KolW4pByvRftO5U
eZ7rJygSRwZKR7RbG/wd1po0iOVa0J6md2Mz53GoI/wEQ4hQ0T6dcjYrImFSlE/N
T0/MnWgfwdC83SVp6BaH8+GwRw+7NnJOEILUvEki87qBllzDVf2preaAHoE/BOUk
+8rqoSorD/pV+Z/zU242Vb6OSf7vBgfiO7k0DIK+PTWZ+YNWVAkgYRH2UXCIRsFK
EilDC6zfkMwZxQ/UfP5LwRJiWkeJ0CuH4EBGaekySsZxm76S2Dmzxhg+bqEnmCeI
eqzwouQnnAKEt5F+
-----END CERTIFICATE-----
Generated at Fri May 3 20:32:56 2024 by rpki-client on console-fra.rpki-client.org