Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS210951.roa
File: AS210951.roa (raw, json)
Hash identifier: lQWaoQ5dsnXfnvQ2KC1U6eobHY3Roi6ccteS/T8Iauk=
Subject key identifier: 5F:D6:74:61:7B:FD:94:D2:7E:9B:10:94:B1:F8:09:29:CE:D3:6E:47
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 508962F34EC6167A4D75DF270DC5A542F22CA2D5
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS210951.roa
Signing time: Tue 05 Dec 2023 02:44:13 +0000
ROA not before: Tue 05 Dec 2023 02:39:13 +0000
ROA not after: Tue 03 Dec 2024 02:44:13 +0000
asID: 210951
IP address blocks: 2a06:a005:5c0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:89:62:f3:4e:c6:16:7a:4d:75:df:27:0d:c5:a5:42:f2:2c:a2:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Dec 5 02:39:13 2023 GMT
Not After : Dec 3 02:44:13 2024 GMT
Subject: CN=5FD674617BFD94D27E9B1094B1F80929CED36E47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f1:f2:4f:a9:40:f6:32:9f:b7:78:09:08:eb:
e2:d9:75:36:be:ba:4c:a2:77:22:8b:d6:10:70:4e:
33:a4:b7:fb:c8:0c:4a:61:38:00:e6:e1:86:16:e6:
c4:03:2b:16:10:d8:31:b7:c7:e3:86:3d:0f:e4:d5:
68:bd:5f:3e:68:b4:40:a7:3a:3d:ee:ac:dd:13:ae:
b6:cb:b8:f5:e8:be:4a:9a:47:8f:57:ec:2d:cc:d2:
43:96:7e:8e:02:97:37:d9:db:65:ce:a1:7a:38:fc:
8c:e6:68:8f:51:4f:95:8c:50:1e:40:92:7b:73:86:
13:5f:0e:10:32:d9:02:8a:4b:ea:8e:af:b1:12:91:
87:ba:e8:6a:44:37:c4:d3:87:55:29:a3:b9:c7:d6:
5b:79:92:db:9c:e2:ea:d9:65:fb:4d:65:5a:0a:81:
4d:e2:72:49:6d:3a:df:17:c8:98:4a:cf:85:62:dd:
c2:89:c6:1f:b7:04:d3:85:01:0a:8a:14:43:f4:7c:
fa:16:01:bf:e0:53:b4:06:38:de:38:5f:8d:d0:ee:
08:e2:c7:b7:9a:e1:06:2e:1c:c4:cc:f5:04:8b:52:
27:5e:ad:19:57:c5:02:7a:84:78:de:1f:ff:e0:34:
e3:d0:0a:15:5c:0b:a3:ed:3d:c2:14:70:d5:c6:91:
ae:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:D6:74:61:7B:FD:94:D2:7E:9B:10:94:B1:F8:09:29:CE:D3:6E:47
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS210951.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:5c0::/44
Signature Algorithm: sha256WithRSAEncryption
c6:8e:3c:50:f2:9a:25:fc:8d:eb:7a:63:d2:72:3d:6f:30:86:
17:43:1b:32:04:44:33:38:40:b3:f9:23:98:f4:be:8b:9f:16:
bb:1d:11:a5:4a:b6:7e:18:aa:29:06:e9:01:3b:2a:31:69:7e:
1e:8b:62:9c:d6:34:8c:40:62:d9:2d:24:a5:7d:cf:6a:4c:0c:
e5:98:2e:a9:2d:f5:eb:be:f4:25:d2:45:cc:e6:a3:e6:93:59:
6f:68:ab:5f:75:5c:5d:11:5e:31:67:c9:c2:86:c6:78:25:28:
0b:61:0a:08:9c:13:aa:a5:19:ac:bd:70:bf:2b:9f:67:d2:2f:
58:aa:ad:76:9c:14:13:da:8d:8e:e7:de:6c:33:05:62:79:1b:
2c:af:cb:b9:21:8a:8b:b3:fa:35:84:70:eb:96:dd:de:d6:ee:
ad:7b:45:21:7d:20:92:ac:5f:15:c0:23:50:58:ec:df:fe:d9:
cf:db:24:29:01:31:47:81:ba:56:1e:69:f1:31:e0:7c:e7:e9:
9e:0e:a3:44:1e:4b:70:46:47:3b:55:5d:5d:43:1e:db:1e:3c:
76:5f:61:0a:c8:70:56:b4:2b:01:59:37:cb:67:1f:75:60:1a:
92:2e:71:11:94:55:4e:24:ad:21:77:bc:90:08:c8:7f:80:0d:
22:19:6a:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 12:12:18 2024 by rpki-client on console-ams.rpki-client.org