Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS210836.roa
File: AS210836.roa (raw, json)
Hash identifier: Sehmc4NOoUDofRlJNeetFSBIQkC/WsdeYcDufkv9JJ0=
Subject key identifier: B8:1F:C1:4A:0B:2B:7C:D5:A0:48:A3:88:A1:1E:0B:03:B5:6E:F2:24
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 1ECD6FF472CF0AAFC11F0A3391E30D8422B38C95
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS210836.roa
Signing time: Tue 05 Dec 2023 02:44:16 +0000
ROA not before: Tue 05 Dec 2023 02:39:16 +0000
ROA not after: Tue 03 Dec 2024 02:44:16 +0000
asID: 210836
IP address blocks: 2a06:a005:5bc::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:cd:6f:f4:72:cf:0a:af:c1:1f:0a:33:91:e3:0d:84:22:b3:8c:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Dec 5 02:39:16 2023 GMT
Not After : Dec 3 02:44:16 2024 GMT
Subject: CN=B81FC14A0B2B7CD5A048A388A11E0B03B56EF224
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:17:2c:4a:ac:81:0f:58:8c:80:d3:39:5e:f1:
fb:89:d3:ab:1d:27:a2:c7:53:ea:30:6f:d9:13:94:
70:c4:b4:0d:0c:ae:b0:c6:01:49:0e:7c:d6:b8:c8:
35:18:12:e5:88:c7:b4:c2:18:a3:2c:f4:89:4d:5d:
45:87:6e:72:04:5b:f9:34:10:07:4b:e4:1d:e8:fc:
9c:7c:78:f1:b9:56:9e:f9:67:06:9a:2f:e9:fe:47:
ef:bf:c9:7c:0f:43:90:13:6e:c5:98:95:9d:dc:4f:
7c:1a:b8:dc:7c:37:d7:b6:2d:93:f1:b1:f5:b0:cc:
1d:a3:e4:32:a4:ff:17:16:1e:41:cc:29:7c:c7:81:
fd:1e:f1:1c:1e:5a:ef:c2:9b:cd:bc:e6:86:cf:5b:
0b:21:b0:a8:f3:8a:d9:a5:f4:21:17:85:cd:81:36:
d4:54:94:31:38:99:d0:03:f0:2f:75:fc:c2:81:2e:
3d:9a:03:ff:54:89:3a:82:a4:30:3e:c8:23:35:7d:
dc:aa:3e:d8:11:b8:01:c0:0a:6d:37:f0:02:28:b1:
5f:27:35:3b:ce:6a:bf:fc:62:1d:f9:9d:5b:5f:3d:
a3:24:ab:ce:6c:f0:13:e0:2b:4f:09:bc:d2:56:db:
96:9e:64:b4:c1:5e:2b:f6:a2:fc:eb:53:aa:3d:f5:
0e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:1F:C1:4A:0B:2B:7C:D5:A0:48:A3:88:A1:1E:0B:03:B5:6E:F2:24
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS210836.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:5bc::/46
Signature Algorithm: sha256WithRSAEncryption
6b:76:c1:cb:58:3c:3d:2a:9f:e0:42:55:51:c3:54:14:87:7a:
0d:c2:d3:53:71:a5:5c:5b:2f:ad:5b:f8:3e:ba:ee:0e:75:f4:
a6:36:ae:79:68:d8:4f:09:2a:e3:dd:ac:49:cb:b6:a0:ec:1d:
fd:ef:51:30:28:42:40:20:d6:3d:ea:84:46:c4:f6:68:2e:39:
56:ae:3f:e8:cd:b6:9d:52:47:a0:25:fa:e5:ac:d3:1c:8f:16:
b6:e3:05:92:4a:5a:2f:7d:b9:a3:ae:69:0b:99:3a:7c:0b:fa:
f8:b1:60:26:2f:ff:d8:3a:fd:39:f1:14:5b:e2:09:02:b8:9f:
09:87:83:d2:e6:57:82:10:f0:48:a6:db:ed:aa:2f:d7:33:67:
94:8b:22:db:41:71:6e:8b:ce:c4:6b:17:93:08:1b:89:06:c8:
44:4c:34:16:f4:15:89:70:68:c7:e9:60:96:73:6c:8f:40:b0:
75:e1:b9:a2:0d:bb:89:42:ea:af:89:90:8f:7d:1c:be:50:13:
39:60:33:34:24:d7:d9:97:19:43:70:7e:a0:6a:a5:c3:f2:0e:
06:17:6d:9f:27:51:50:0c:01:18:53:ed:5e:a9:97:85:b2:84:
18:fa:25:9a:76:ca:aa:13:35:94:e3:98:4a:69:8c:9c:52:bd:
49:74:48:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 12:12:18 2024 by rpki-client on console-ams.rpki-client.org