Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS210925.roa
File: AS210925.roa (raw, json)
Hash identifier: uk2C+kVtc42szPu66y/nzDM4qhZLpz7TMSJYN0qnFW4=
Subject key identifier: 88:FE:3F:C3:FA:8D:83:DF:BC:0F:5E:56:30:92:A8:6B:9F:CE:7E:AA
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 7F98A8CBAA3A7E6AE446992F86086C13E639AC9A
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS210925.roa
Signing time: Fri 22 Dec 2023 14:44:21 +0000
ROA not before: Fri 22 Dec 2023 14:39:21 +0000
ROA not after: Fri 20 Dec 2024 14:44:21 +0000
asID: 210925
IP address blocks: 2a06:a005:14::/48 maxlen: 48
2a06:a005:15::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:98:a8:cb:aa:3a:7e:6a:e4:46:99:2f:86:08:6c:13:e6:39:ac:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Dec 22 14:39:21 2023 GMT
Not After : Dec 20 14:44:21 2024 GMT
Subject: CN=88FE3FC3FA8D83DFBC0F5E563092A86B9FCE7EAA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:32:c7:e4:c5:d5:5e:f0:fc:d8:f9:6f:fe:c9:
32:6c:26:1f:d3:86:f9:23:f1:65:9e:8f:ad:4b:e6:
52:30:6f:60:8d:80:57:71:31:3c:04:c4:e0:6a:f9:
88:37:2a:01:e0:3f:ec:12:8e:cd:12:57:6e:d9:4c:
23:e6:c3:9e:bc:17:70:8a:7a:5a:59:77:3f:b8:f8:
d3:31:19:15:55:7a:e1:9f:2c:c1:cc:33:b8:ac:08:
8d:81:9f:c7:cc:2b:97:a1:1a:cc:55:1a:13:04:05:
35:03:a9:bf:9e:c9:4e:0e:00:f7:70:72:e1:ff:98:
f4:ae:c0:b5:2c:97:68:b0:59:9a:5a:cc:c7:b7:59:
7a:07:80:45:83:04:53:92:79:14:12:42:34:32:61:
96:66:63:6f:9e:f3:86:6a:52:7c:2b:3c:e8:a9:df:
92:66:d9:e0:a5:f9:0f:8e:5d:44:12:2b:1e:c3:0a:
b9:e0:0b:1c:63:8b:a7:8b:ed:2a:29:70:1e:99:f5:
9a:4e:7f:6d:85:59:6c:b5:c2:21:53:a3:6a:9e:6a:
30:e2:2c:73:00:f0:3d:79:c8:d2:d8:24:10:3b:85:
35:bc:24:12:13:1a:60:03:0b:18:54:a7:d0:5e:74:
47:1e:62:99:22:1a:93:ec:68:25:00:52:37:31:5d:
b4:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:FE:3F:C3:FA:8D:83:DF:BC:0F:5E:56:30:92:A8:6B:9F:CE:7E:AA
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS210925.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:14::/47
Signature Algorithm: sha256WithRSAEncryption
c4:91:9f:6b:67:e3:f3:ca:34:e9:d8:31:4c:86:04:c4:ef:d8:
82:1d:ca:ae:44:d1:90:da:f7:f9:a1:f2:d7:ce:3d:b2:51:32:
39:04:2c:50:94:4e:ee:1e:cf:7b:a7:48:51:2c:a3:54:71:20:
ca:4b:d6:6e:ba:69:ea:51:df:88:8c:93:3b:a0:50:ae:e7:54:
26:ec:f4:6b:29:ee:ed:2d:0c:cd:c9:62:4c:a6:83:e4:37:52:
fc:26:a2:3e:eb:d4:1f:09:ba:e2:e5:01:b9:00:1a:02:b5:96:
18:6e:8d:43:f4:8a:d3:bb:07:94:17:cf:ee:f2:73:10:99:ad:
32:d4:74:36:47:f8:b5:f6:4e:38:d8:70:cd:01:73:3c:52:f4:
81:31:ab:8a:75:56:96:3e:8c:89:b8:55:b7:1f:53:2b:d2:31:
66:c1:8b:09:0e:4d:8d:61:fb:17:e7:21:08:56:80:b1:7e:a5:
29:a8:12:5c:2b:3a:44:f9:33:5e:cb:31:c1:bf:5f:7e:19:70:
fc:d7:1e:6c:62:35:93:40:ec:94:99:24:ef:80:c0:ff:64:d7:
01:41:e6:a9:8e:7a:4f:15:96:54:28:d4:1c:95:0e:bf:28:c3:
74:7b:97:bf:af:92:52:b8:90:d0:c4:00:3a:f8:85:46:33:8f:
ef:6a:1f:93
-----BEGIN CERTIFICATE-----
MIIE6DCCA9CgAwIBAgIUf5ioy6o6fmrkRpkvhghsE+Y5rJowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzk5NDM4ZjFiMTc2MmFlZWY4YTM1Y2Y0ZTZjYmFlOTc2
OTliZDAyMDAeFw0yMzEyMjIxNDM5MjFaFw0yNDEyMjAxNDQ0MjFaMDMxMTAvBgNV
BAMTKDg4RkUzRkMzRkE4RDgzREZCQzBGNUU1NjMwOTJBODZCOUZDRTdFQUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLMsfkxdVe8PzY+W/+yTJsJh/T
hvkj8WWej61L5lIwb2CNgFdxMTwExOBq+Yg3KgHgP+wSjs0SV27ZTCPmw568F3CK
elpZdz+4+NMxGRVVeuGfLMHMM7isCI2Bn8fMK5ehGsxVGhMEBTUDqb+eyU4OAPdw
cuH/mPSuwLUsl2iwWZpazMe3WXoHgEWDBFOSeRQSQjQyYZZmY2+e84ZqUnwrPOip
35Jm2eCl+Q+OXUQSKx7DCrngCxxji6eL7SopcB6Z9ZpOf22FWWy1wiFTo2qeajDi
LHMA8D15yNLYJBA7hTW8JBITGmADCxhUp9BedEceYpkiGpPsaCUAUjcxXbR/AgMB
AAGjggHyMIIB7jAdBgNVHQ4EFgQUiP4/w/qNg9+8D15WMJKoa5/OfqowHwYDVR0j
BBgwFoAUeZQ48bF2Ku74o1z05suul2mb0CAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi83OTk0MzhGMUIx
NzYyQUVFRjhBMzVDRjRFNkNCQUU5NzY5OUJEMDIwLmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZVpRNDhiRjJLdTc0bzF6MDVzdXVsMm1iMENBLmNlcjBwBggrBgEF
BQcBCwRkMGIwYAYIKwYBBQUHMAuGVHJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv
cmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5ZC8yL0FT
MjEwOTI1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEH
AQH/BBMwETAPBAIAAjAJAwcBKgagBQAUMA0GCSqGSIb3DQEBCwUAA4IBAQDEkZ9r
Z+PzyjTp2DFMhgTE79iCHcquRNGQ2vf5ofLXzj2yUTI5BCxQlE7uHs97p0hRLKNU
cSDKS9ZuumnqUd+IjJM7oFCu51Qm7PRrKe7tLQzNyWJMpoPkN1L8JqI+69QfCbri
5QG5ABoCtZYYbo1D9IrTuweUF8/u8nMQma0y1HQ2R/i19k442HDNAXM8UvSBMauK
dVaWPoyJuFW3H1Mr0jFmwYsJDk2NYfsX5yEIVoCxfqUpqBJcKzpE+TNeyzHBv19+
GXD81x5sYjWTQOyUmSTvgMD/ZNcBQeapjnpPFZZUKNQclQ6/KMN0e5e/r5JSuJDQ
xAA6+IVGM4/vah+T
-----END CERTIFICATE-----
Generated at Sat May 4 12:13:13 2024 by rpki-client on console-fra.rpki-client.org