Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS44810.roa
File: AS44810.roa (raw, json)
Hash identifier: Fkvn8p8YWPdyViI8eQyhBea7+8Jdtzn18nEf2MUG+Ow=
Subject key identifier: A6:B3:C1:76:83:0A:78:E0:F6:E8:3D:A4:FD:4A:88:D6:FC:2B:87:C0
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 2CE765DF5B0CE956E629ACC94695AB5D404000EE
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS44810.roa
Signing time: Wed 15 Jan 2025 23:40:16 +0000
ROA not before: Wed 15 Jan 2025 23:35:16 +0000
ROA not after: Wed 14 Jan 2026 23:40:16 +0000
asID: 44810
IP address blocks: 89.39.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 11:21:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:e7:65:df:5b:0c:e9:56:e6:29:ac:c9:46:95:ab:5d:40:40:00:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Jan 15 23:35:16 2025 GMT
Not After : Jan 14 23:40:16 2026 GMT
Subject: CN=A6B3C176830A78E0F6E83DA4FD4A88D6FC2B87C0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:fe:49:9e:05:63:c6:28:56:b4:b4:b0:0d:10:
13:97:d7:4f:e0:00:ba:be:6d:2d:6c:87:8c:1e:df:
54:bd:d2:44:5d:30:c3:7d:84:2c:50:ca:43:bd:70:
59:3c:f8:84:31:bb:aa:71:91:f0:5d:4f:61:c1:d7:
14:a1:86:66:62:8e:cb:ec:5b:54:d6:7c:fa:89:35:
39:73:58:01:b3:2d:7e:9c:39:18:23:7a:4e:0c:da:
68:23:05:66:3c:22:f3:52:f6:67:1c:59:e4:12:a7:
36:29:ad:24:a1:3a:c3:5f:03:63:a4:4a:5c:40:d9:
dd:8f:4c:78:51:93:36:ef:0c:51:30:77:55:b7:37:
e1:fc:51:1e:e9:6d:1d:37:43:24:a8:a9:df:ea:75:
7a:ef:f9:5b:09:00:d8:9b:16:6c:77:7a:8d:2a:a1:
86:4c:1e:1a:0b:d4:53:c0:54:88:8a:32:f6:ae:d1:
9e:6a:56:35:07:44:ec:c9:b6:e9:69:8d:14:61:68:
55:4b:67:de:79:3d:3a:d7:12:57:26:5c:98:04:5d:
6f:bf:82:1b:40:e3:16:14:e2:ba:ab:57:89:7e:bb:
c7:14:6c:f0:94:1b:1e:81:e0:fe:5a:b4:b7:c2:04:
a4:24:c6:ee:6b:7e:a7:b9:98:ea:ac:c4:06:46:b5:
82:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:B3:C1:76:83:0A:78:E0:F6:E8:3D:A4:FD:4A:88:D6:FC:2B:87:C0
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS44810.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.39.210.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:2a:b6:02:f5:41:f8:3b:16:fb:f3:78:c5:10:dd:5f:d1:4b:
ce:7d:b2:52:b3:87:7b:63:94:af:eb:35:32:d4:5b:f8:4b:2a:
7f:4a:03:43:2b:1c:6c:04:a9:42:c0:be:71:bb:43:0a:79:1a:
9b:24:ef:9b:e2:1c:d3:eb:af:3f:d4:e9:38:ba:bb:82:5c:ae:
54:c0:98:42:9d:1d:b2:62:29:71:3a:e8:be:d3:ba:e5:9b:f4:
03:2d:f1:3d:35:c6:30:34:fb:46:48:ad:37:c5:48:37:56:11:
a4:23:63:d1:d5:c7:e2:82:7d:61:66:73:5c:1f:cc:5b:89:c9:
21:02:8a:37:cc:93:1c:8e:bc:6e:5d:33:96:70:14:ec:74:42:
8c:ea:17:96:1e:6f:56:fb:39:a5:ac:ce:dc:2f:4d:53:73:28:
95:61:ae:78:35:01:a0:48:5a:e3:47:c3:f6:9f:b9:23:bb:ba:
da:e6:3b:0f:20:03:11:98:6c:32:a8:fd:7b:6d:85:73:d4:fe:
1e:0c:ea:37:99:b2:d2:bb:70:c8:f3:03:75:06:b9:41:6d:bf:
57:e0:f7:c5:40:6e:2c:3d:f2:03:c0:fa:41:a2:73:fb:b5:23:
d3:77:c9:9a:61:7b:2b:d9:19:3c:0e:ac:41:06:70:44:dd:0d:
bd:8b:b3:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:04:21 2025 by rpki-client