Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS139328.roa
File: AS139328.roa (raw, json)
Hash identifier: S/UJHJSnyzmp423fYoUxEx5MSEtruoxzgq4BNs2g2Rs=
Subject key identifier: 0F:5C:8F:39:DC:0D:0E:3C:83:3E:20:A6:E9:63:C8:CF:71:11:69:59
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 5043266CCC717F3D1E18C3231047EC78865BDF8E
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS139328.roa
Signing time: Tue 05 Dec 2023 02:44:17 +0000
ROA not before: Tue 05 Dec 2023 02:39:17 +0000
ROA not after: Tue 03 Dec 2024 02:44:17 +0000
asID: 139328
IP address blocks: 2a06:a005:4c0::/44 maxlen: 48
2a06:a005:510::/44 maxlen: 48
2a06:a005:520::/44 maxlen: 48
2a06:a005:530::/44 maxlen: 48
2a06:a005:540::/44 maxlen: 48
2a06:a005:550::/44 maxlen: 48
2a06:a005:660::/44 maxlen: 48
2a06:a005:1150::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Apr 2024 02:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:43:26:6c:cc:71:7f:3d:1e:18:c3:23:10:47:ec:78:86:5b:df:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Dec 5 02:39:17 2023 GMT
Not After : Dec 3 02:44:17 2024 GMT
Subject: CN=0F5C8F39DC0D0E3C833E20A6E963C8CF71116959
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3c:32:23:bf:be:13:f5:29:92:45:70:ca:5e:
6e:57:f7:c3:18:f4:22:e2:83:40:83:06:83:f1:f5:
be:5d:46:ad:e7:77:91:79:11:85:d0:76:50:56:33:
81:82:c3:a0:11:5f:10:35:68:e8:8f:11:be:16:63:
7c:c9:1c:c7:da:b0:54:9f:62:d4:7d:29:28:8e:b1:
32:3b:0b:b7:19:b2:d7:4d:69:fd:ff:ce:67:c1:c0:
05:c3:7f:c7:a4:bd:97:09:4f:5e:d7:11:8f:1e:36:
06:d6:7a:63:02:f4:41:c3:4c:58:da:2f:14:45:be:
af:f7:74:4a:30:31:1f:64:26:c5:a2:67:fb:18:37:
16:c9:3b:ac:fa:e9:8a:b6:ad:c7:22:3c:16:1e:a3:
d9:a2:11:5d:80:79:c2:67:3d:79:40:a6:30:ef:7a:
7d:5b:49:8e:98:42:6a:a1:9c:93:9f:9a:5a:a4:c0:
ce:27:fb:fb:17:34:63:62:a4:4a:86:92:d5:cc:fa:
94:29:9d:32:5f:f0:54:0d:2d:da:ee:70:a7:f6:11:
86:dc:3f:01:d5:a5:84:f3:32:77:ca:4c:3d:43:33:
77:4a:c2:12:00:a8:99:f3:ae:b1:ac:4a:f9:3a:9b:
ca:9b:d8:b3:11:69:49:07:ba:e9:78:ca:cb:0e:44:
a9:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:5C:8F:39:DC:0D:0E:3C:83:3E:20:A6:E9:63:C8:CF:71:11:69:59
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS139328.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:4c0::/44
2a06:a005:510::-2a06:a005:55f:ffff:ffff:ffff:ffff:ffff
2a06:a005:660::/44
2a06:a005:1150::/44
Signature Algorithm: sha256WithRSAEncryption
6c:0c:7e:c7:0b:cf:69:42:a6:9d:2b:42:51:1a:27:b4:18:e5:
9e:41:27:9a:67:f1:f0:a8:ac:b6:42:a8:19:87:3b:62:d1:20:
4c:b0:d3:99:ce:06:74:23:06:c5:05:73:91:ee:ea:be:91:7b:
a5:dd:77:d1:34:9d:6b:34:37:a0:ea:9a:0b:d8:28:fa:bb:5c:
59:85:29:5d:c5:37:7e:85:0c:f0:20:bd:ad:d8:1a:41:25:84:
66:6f:b1:0d:8e:9f:f5:07:05:ea:9b:1e:7c:a9:be:b5:9d:42:
59:7f:40:c9:e2:8a:86:68:b8:ef:a7:ff:c9:8c:9a:35:22:0e:
fd:ce:d2:16:ab:f1:72:9a:f0:56:f7:3c:ff:15:0f:f8:24:77:
f3:69:fe:43:35:fe:b1:33:f5:d5:67:37:57:7f:9c:bd:fc:89:
70:0a:f7:83:ad:13:83:44:b8:2a:f7:6d:eb:46:75:e4:40:03:
97:eb:6f:c3:11:a2:83:2d:3f:22:b0:b6:d7:a3:a3:d3:27:55:
ae:08:26:19:e7:c3:13:bf:cf:4a:3b:7d:bf:8b:1c:2b:e5:52:
ed:4d:5b:a5:85:39:e4:bb:07:04:9c:e2:84:8c:71:df:cc:00:
6f:d2:e4:3c:2f:27:a2:e2:05:f9:57:17:f0:6a:12:ad:71:b5:
51:03:f1:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:16:09 2024 by rpki-client on console-ams.rpki-client.org