Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS133846.roa
File: AS133846.roa (raw, json)
Hash identifier: Y4cwCaqFaXxAMONiVKm2trNJY/wDc+XPEuq/9aFLU7o=
Subject key identifier: D2:7B:3A:95:9B:D0:C3:41:47:CE:A6:8D:CC:89:34:C0:4F:B0:2A:33
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 134273D09CCEA048995102D94D6E99C2E383B338
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS133846.roa
Signing time: Sun 24 Dec 2023 01:44:21 +0000
ROA not before: Sun 24 Dec 2023 01:39:21 +0000
ROA not after: Sun 22 Dec 2024 01:44:21 +0000
asID: 133846
IP address blocks: 2a06:a005:b60::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 14:46:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:42:73:d0:9c:ce:a0:48:99:51:02:d9:4d:6e:99:c2:e3:83:b3:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Dec 24 01:39:21 2023 GMT
Not After : Dec 22 01:44:21 2024 GMT
Subject: CN=D27B3A959BD0C34147CEA68DCC8934C04FB02A33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:3b:a7:e1:be:dd:52:49:82:d2:7a:fa:7b:4c:
87:26:49:04:bb:9a:4e:62:5c:a7:bf:95:91:d5:b1:
32:74:b5:50:b0:61:c8:9d:ce:ed:08:76:ba:8e:1e:
a0:bd:8e:1a:de:b4:88:4a:9f:c1:4c:c9:8f:5e:f1:
53:9c:d1:53:28:57:70:a1:c7:08:77:26:3b:2a:61:
60:2c:2d:87:ba:14:f1:63:80:7c:ea:2c:5b:8e:54:
06:ff:f9:72:46:64:90:5c:84:f1:18:db:43:d4:97:
12:66:ed:db:78:80:c5:83:04:1d:98:3c:91:e5:5f:
bc:fd:46:fb:9d:17:21:5f:83:6d:39:bf:fd:dd:79:
41:b1:69:cc:9b:9b:40:d3:f6:07:f5:d5:7c:56:2f:
27:c0:be:b0:53:fb:df:f7:18:4c:e6:c9:61:c6:b7:
06:bd:f8:c0:dd:01:8b:f3:56:4c:73:f9:ef:66:03:
73:0d:85:20:9f:6d:3c:bd:eb:57:c1:08:89:03:14:
e1:17:09:c9:f9:96:27:aa:fa:65:ee:a1:87:bf:c8:
c1:02:e6:1d:6b:14:f6:ee:96:ea:85:b7:98:38:58:
be:56:5e:f2:4f:ce:88:02:a7:c7:ce:16:7d:28:62:
bb:9c:63:aa:c8:3f:1a:90:74:a1:b2:8a:a3:dc:f5:
0e:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:7B:3A:95:9B:D0:C3:41:47:CE:A6:8D:CC:89:34:C0:4F:B0:2A:33
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS133846.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:b60::/48
Signature Algorithm: sha256WithRSAEncryption
b4:03:77:0f:f8:71:1c:6b:f4:46:b8:08:4d:e9:67:79:fa:3c:
bd:2a:45:23:a4:88:78:27:28:be:72:ad:63:86:99:68:d6:84:
5e:1d:18:88:a9:68:c4:f0:2b:b6:fc:f6:03:8b:f3:91:84:d4:
78:28:6e:3f:ac:b0:d8:00:f6:4b:da:53:e9:10:c8:74:1a:84:
e6:93:b3:19:33:c5:47:15:d3:4c:e4:fd:97:3c:9b:53:a7:34:
ba:3a:6a:62:66:c7:26:fd:e6:91:ef:55:be:5b:25:f8:3e:56:
38:cb:b7:15:88:d7:2e:5a:fd:95:76:f5:c6:91:6e:f8:65:db:
89:87:73:7b:d2:3f:d1:8f:52:ef:83:1d:04:51:06:f7:09:9d:
4d:d1:54:fd:2a:cb:89:11:69:a8:91:db:74:11:37:ae:b1:5b:
a0:cc:25:a3:5d:48:4b:39:88:d2:9a:12:7d:53:1c:da:97:8d:
50:b7:eb:4b:10:39:43:6b:8c:82:d1:54:d8:2a:99:d2:0a:6b:
23:89:7b:ff:65:4f:d4:d0:43:e9:6e:a8:9a:25:4d:c3:a0:a5:
31:de:c8:4f:03:2b:2b:48:bc:28:2d:93:e3:30:38:d4:31:e3:
68:6f:a5:68:3d:e0:21:d0:f4:bb:38:ec:fe:4c:d7:77:ec:85:
a1:74:96:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 19:12:08 2024 by rpki-client on console-fra.rpki-client.org