Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS44810.roa
File: AS44810.roa (raw, json)
Hash identifier: HrLNiK2zzwafj9lEPWPU4tZcI73ZqC55s3lnpoXbJuE=
Subject key identifier: 77:E0:19:C7:11:EE:10:CC:00:3F:DC:96:00:41:44:C6:44:89:51:C8
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 54BC59D83FA4CF8315460A2B676D1598A4A4299F
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS44810.roa
Signing time: Wed 14 Feb 2024 23:00:47 +0000
ROA not before: Wed 14 Feb 2024 22:55:47 +0000
ROA not after: Wed 12 Feb 2025 23:00:47 +0000
asID: 44810
IP address blocks: 89.39.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:bc:59:d8:3f:a4:cf:83:15:46:0a:2b:67:6d:15:98:a4:a4:29:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Feb 14 22:55:47 2024 GMT
Not After : Feb 12 23:00:47 2025 GMT
Subject: CN=77E019C711EE10CC003FDC96004144C6448951C8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c5:3a:e1:96:8b:96:b3:29:35:46:43:fb:7f:
28:e6:b0:7c:f7:0a:27:da:58:bf:70:12:54:25:5a:
15:d0:f4:fe:a0:8f:5a:2d:95:eb:4d:4a:da:2f:0b:
01:47:b9:4b:83:6b:c6:a9:db:92:58:60:3a:10:8a:
75:7b:28:3f:63:02:29:9a:5c:e6:6b:5e:0d:c4:53:
72:1e:e5:d3:cf:72:1e:57:e3:de:c6:88:67:8d:bc:
a0:9c:dc:fa:14:a3:a9:9c:d2:8c:59:7e:e4:10:b6:
bb:42:23:c6:89:43:37:44:61:ff:20:86:d2:9e:2e:
81:e4:fc:4b:16:30:7c:6e:dc:ce:a1:00:b2:76:61:
ba:44:57:d6:91:4b:b5:e1:6e:46:4b:66:3f:a2:f8:
17:b9:98:86:91:80:8a:56:d3:f0:4d:e9:85:77:1a:
85:96:18:d2:26:8f:7f:4f:7f:5c:1b:67:7c:6c:c4:
00:80:6a:d9:5a:29:8b:f9:b5:93:89:bc:c8:3a:61:
99:fd:23:f3:71:a2:91:44:a7:eb:ac:d5:74:fd:a9:
e6:93:09:bb:ad:fb:75:a3:85:9e:c9:32:d2:8e:5e:
6e:81:aa:f7:8f:cf:1f:be:85:72:53:1b:d3:0e:f1:
ee:be:33:a7:43:52:98:00:2e:ac:b7:c7:31:5b:a6:
69:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:E0:19:C7:11:EE:10:CC:00:3F:DC:96:00:41:44:C6:44:89:51:C8
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS44810.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.39.210.0/24
Signature Algorithm: sha256WithRSAEncryption
23:0a:2a:10:19:5d:f4:7e:84:6e:3d:9e:b3:a4:97:c9:f7:26:
cb:3c:84:ce:10:fb:ab:84:c0:8f:94:98:af:f4:90:83:60:0f:
d8:20:59:39:b5:be:ed:28:b8:d6:25:ef:45:be:fa:5b:e3:36:
11:2b:00:62:f8:65:d9:ac:c4:03:c3:10:e2:ff:d5:49:e6:38:
f7:87:22:85:c4:f1:6d:b4:15:86:56:56:31:c6:c7:dd:41:ba:
fb:47:48:f3:5c:1c:b1:6d:3d:b2:de:0e:ef:fa:20:71:18:e4:
b2:46:94:31:e2:06:84:c2:b6:f3:78:4d:46:a0:91:3b:9a:85:
2a:26:08:d2:00:d2:db:ac:25:bf:1e:7b:ca:fc:0e:cc:1a:07:
54:0f:18:b3:0a:e5:52:99:7d:72:04:2c:c7:09:1f:1e:af:27:
c9:3f:25:80:8b:a5:d8:a7:cf:8a:0b:fa:b8:9f:f7:dd:96:5d:
14:56:80:3d:7f:02:29:3e:19:26:5f:5b:5c:45:29:a9:c0:b2:
00:95:f0:d6:ce:b3:59:31:6a:e0:f2:0f:65:8c:97:51:c2:77:
1e:c5:aa:6c:b3:6c:7e:1d:f8:af:78:76:e8:9b:13:08:7d:8a:
92:43:f5:eb:cb:ba:5e:b3:59:ba:11:9a:19:38:a8:2b:05:d0:
88:73:c0:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 20:12:34 2024 by rpki-client on console-ams.rpki-client.org