Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS210951.roa
File: AS210951.roa (raw, json)
Hash identifier: X3s8AePX5rhWCOk8zAgScNnVoieHwp6qse2i1dg9FoA=
Subject key identifier: 91:D5:08:62:DB:C4:86:55:58:E2:FF:BE:A9:1B:7B:8B:5C:AB:BD:D0
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 22B37E76FDBAB610E1B5A5ADDDA47A2CB0976D85
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS210951.roa
Signing time: Tue 05 Nov 2024 03:39:59 +0000
ROA not before: Tue 05 Nov 2024 03:34:59 +0000
ROA not after: Tue 04 Nov 2025 03:39:59 +0000
asID: 210951
IP address blocks: 2a06:a005:5c0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:b3:7e:76:fd:ba:b6:10:e1:b5:a5:ad:dd:a4:7a:2c:b0:97:6d:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Nov 5 03:34:59 2024 GMT
Not After : Nov 4 03:39:59 2025 GMT
Subject: CN=91D50862DBC4865558E2FFBEA91B7B8B5CABBDD0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ca:cd:9d:b2:ab:86:58:92:83:a4:de:b2:2f:
f1:9d:35:d6:10:64:c6:68:35:73:a9:db:1b:ff:e2:
25:79:0a:e3:fd:08:3e:5c:a3:7a:7b:7c:fd:43:f9:
a2:d1:10:bc:23:91:f3:c1:52:cc:ad:c9:28:c6:75:
61:a3:13:28:3c:43:8d:9e:cc:a1:dd:54:f1:46:d7:
97:28:ae:46:cc:fa:b5:b5:36:50:a6:aa:eb:4b:7a:
91:54:a1:cd:a4:61:4e:d9:84:88:fd:9d:07:1f:25:
69:23:87:50:fb:58:a0:ee:c7:e0:18:63:fa:96:33:
46:42:23:9f:b1:36:5a:f1:a2:0c:54:14:ff:03:c8:
3e:dd:47:b8:16:21:83:fc:eb:aa:5f:0c:5a:bb:d3:
d9:45:38:ac:da:53:e4:6e:0c:f4:39:ca:5a:66:55:
82:f3:9b:f6:e4:2b:22:b5:14:74:30:43:7f:60:f2:
e7:d8:7d:b4:25:a9:80:9e:7c:ab:ab:3c:14:88:8c:
62:95:ef:88:48:c3:b3:80:e4:93:c4:56:dd:04:7f:
90:71:ca:5e:1e:99:eb:cc:ce:42:82:d3:95:d0:a0:
17:b2:2c:e6:ba:b6:ab:3e:c3:5a:0f:77:f3:5e:78:
ec:de:a5:c0:97:56:03:1c:a7:4c:30:d3:39:e1:b4:
b3:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:D5:08:62:DB:C4:86:55:58:E2:FF:BE:A9:1B:7B:8B:5C:AB:BD:D0
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS210951.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:5c0::/44
Signature Algorithm: sha256WithRSAEncryption
8d:b7:d9:78:4e:fe:0b:07:4a:25:d9:21:98:d6:7e:61:19:27:
ef:5b:75:17:2b:ce:5e:60:7f:c9:c9:66:55:65:cd:b5:ee:e2:
58:61:75:2b:43:2f:c9:d1:57:e3:6e:cc:f2:d5:d2:ad:a1:34:
dc:8d:0e:1e:a8:86:9a:be:88:9c:34:94:78:c6:fc:78:9c:6f:
4b:50:a7:5c:45:46:1a:12:c6:b0:29:e4:7d:89:57:8c:34:78:
bb:c2:6c:75:26:1e:40:92:b2:b1:fa:c6:c8:3d:c1:a2:5f:ff:
1d:90:36:f4:da:df:d7:14:52:5e:82:c8:bf:13:57:a2:0e:61:
96:17:40:bd:d8:10:a0:66:b4:09:ac:06:9e:8a:2b:25:44:53:
d8:8a:0e:31:be:87:4b:af:95:86:c6:2a:35:0e:bd:2b:86:e4:
45:a4:e9:79:47:66:6c:28:f3:ed:4c:74:33:ed:ca:a3:1d:4c:
d5:1b:0e:50:fa:62:4c:0b:7b:7f:54:97:12:6b:de:67:50:12:
11:9a:bf:e8:31:4f:8e:84:29:d7:c0:42:f5:26:61:7a:2f:f7:
74:36:72:1e:fe:7c:2f:b4:5f:f8:f3:28:5d:ee:95:8f:87:4e:
5b:f3:24:07:90:d2:47:d9:e4:a4:75:ef:c6:79:e4:a2:c1:d6:
06:de:5b:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:13:36 2024 by rpki-client on console-fra.rpki-client.org