Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS210384.roa
File: AS210384.roa (raw, json)
Hash identifier: LGOoK2Ib1dTzTKQMgoBz4t7twmthD58qo8PfG7t+fLY=
Subject key identifier: A6:D1:1B:96:2F:1D:7D:16:5C:65:19:FA:D5:2D:11:11:48:85:71:29
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 4E3CDF7CA84E0A42EDFAED8A7B62594FD4CC99F4
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS210384.roa
Signing time: Thu 08 May 2025 00:31:54 +0000
ROA not before: Thu 08 May 2025 00:26:54 +0000
ROA not after: Thu 07 May 2026 00:31:54 +0000
asID: 210384
IP address blocks: 2a06:a001:a100::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 15:42:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:3c:df:7c:a8:4e:0a:42:ed:fa:ed:8a:7b:62:59:4f:d4:cc:99:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: May 8 00:26:54 2025 GMT
Not After : May 7 00:31:54 2026 GMT
Subject: CN=A6D11B962F1D7D165C6519FAD52D111148857129
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:67:b1:e4:0d:dd:2e:4b:d4:85:65:58:3d:c2:
15:58:f1:e9:74:00:e2:56:76:aa:9b:90:27:57:c2:
f6:d8:67:8c:e6:18:ea:ce:04:c1:3c:81:39:78:98:
61:68:a2:ed:8a:c4:67:30:34:36:96:55:74:4a:bd:
f9:07:11:9c:dc:c9:71:8f:e5:04:66:60:cb:ce:da:
64:37:8b:24:07:61:ea:67:7a:f5:73:07:2c:b6:ff:
43:da:9b:4b:a1:71:d4:4a:c9:5c:6c:61:a6:07:a7:
f1:46:cd:f1:31:b9:05:e2:88:0c:85:fd:ee:0c:f2:
11:d6:2e:1a:b0:23:4b:a4:84:f4:83:14:33:f4:32:
c5:13:a8:d7:52:34:18:69:d7:bc:f3:e7:75:93:03:
d5:04:07:6e:15:1f:d3:05:2c:4b:fb:f8:fe:74:a3:
2b:75:88:78:a2:45:84:10:ef:22:f6:3d:07:81:cc:
7b:2a:89:c0:42:a0:cc:4f:24:70:99:1c:bd:c4:49:
f6:9a:9b:a2:19:87:ac:fa:a6:3b:05:33:96:14:69:
d2:00:2f:ff:8d:b0:50:9f:12:4b:db:5c:52:21:23:
11:a7:ac:cb:71:6c:08:ec:b4:3d:5f:7a:12:85:ab:
e2:54:8f:2b:50:0a:5b:f2:0c:aa:53:00:ed:aa:9f:
5c:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:D1:1B:96:2F:1D:7D:16:5C:65:19:FA:D5:2D:11:11:48:85:71:29
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS210384.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a001:a100::/44
Signature Algorithm: sha256WithRSAEncryption
d1:26:b8:39:54:57:98:df:4d:2b:ab:54:73:3b:4d:d3:1a:b0:
de:1d:08:59:83:ce:6f:4d:98:95:c9:09:cd:76:8f:53:8c:4b:
b2:45:c5:d6:83:ad:25:29:67:b6:f1:89:aa:77:cd:e3:7a:1e:
ea:3e:c3:56:70:b4:89:9a:ac:2e:ab:3c:95:20:7c:d2:15:e9:
2c:98:10:ce:88:57:d8:cc:2b:d2:93:6d:f7:1a:09:8e:79:7c:
2c:30:8c:71:65:4c:05:c6:fe:07:b5:b2:8d:64:48:84:d3:19:
89:9d:2c:1b:5f:a8:fb:b4:4e:38:59:2e:75:25:49:b4:47:26:
ed:6c:a5:ff:d8:3d:cd:b5:d5:e0:3e:ce:0d:57:b8:53:d3:9f:
99:47:c9:cd:a0:16:d5:0a:d0:52:b7:42:b3:b5:ea:5a:f1:8f:
ca:8c:d6:12:e9:30:ed:bf:1c:81:5e:2b:8c:cf:97:8d:30:22:
d8:7d:28:2a:1d:8e:81:02:9d:56:a3:30:e4:06:be:62:f4:df:
88:fc:cd:3b:44:7b:6b:cc:16:39:0f:6c:37:71:cb:ed:d7:23:
5e:de:c3:71:79:9d:55:ff:f7:89:a0:7a:07:1b:96:11:fd:35:
d0:1c:56:b6:e1:e6:58:24:c1:de:e5:52:0d:be:5b:91:9d:ae:
60:52:9d:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 22:23:02 2025 by rpki-client