Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS134478.roa
File: AS134478.roa (raw, json)
Hash identifier: 41rTcPAUo6/zgt01FJ/ymH4aFwTd3bR/z/5ISEsXn9M=
Subject key identifier: 98:0B:54:1B:F6:22:1A:C9:34:2E:3A:FB:DF:91:DE:9D:E3:B2:54:6B
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 0217237B2B17CC1FE7FCE41074A869419DA60095
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS134478.roa
Signing time: Tue 05 Dec 2023 02:44:19 +0000
ROA not before: Tue 05 Dec 2023 02:39:19 +0000
ROA not after: Tue 03 Dec 2024 02:44:19 +0000
asID: 134478
IP address blocks: 2a06:a005:580::/44 maxlen: 48
2a06:a005:950::/44 maxlen: 48
2a06:a005:d00::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:17:23:7b:2b:17:cc:1f:e7:fc:e4:10:74:a8:69:41:9d:a6:00:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Dec 5 02:39:19 2023 GMT
Not After : Dec 3 02:44:19 2024 GMT
Subject: CN=980B541BF6221AC9342E3AFBDF91DE9DE3B2546B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:48:10:4a:60:59:ed:31:07:bf:d8:d6:93:1c:
6d:d3:f8:37:b2:ec:17:a6:6b:c5:e3:1d:81:82:87:
45:fd:25:58:1d:63:33:54:90:12:24:1b:2a:ed:46:
66:a7:d3:ea:5c:9e:38:66:e2:16:0c:bd:cd:b8:56:
64:b1:93:41:73:5f:78:aa:7f:b7:3e:00:9c:df:8c:
e8:8b:2e:8d:67:3b:f7:5d:8e:8c:b5:4f:fc:fd:e2:
8c:68:25:77:24:9b:78:0e:53:ac:3a:6e:82:2a:8a:
62:24:ba:ac:a4:5a:61:25:32:57:31:9e:77:2a:8e:
11:71:fa:d0:5a:99:09:bc:02:00:c7:e6:35:30:ae:
cf:d9:60:0c:2d:87:67:72:ef:58:a9:25:29:a0:b2:
74:81:af:4f:81:9b:ce:07:ba:14:fa:8c:39:17:ed:
39:b0:4f:12:44:b0:b5:4e:58:79:72:f8:d2:43:2c:
fc:31:ba:6e:a3:35:9f:31:ad:ec:2c:e5:f4:ff:e8:
eb:30:52:23:a0:d5:bb:2b:7f:12:27:19:74:2e:2f:
69:aa:19:0e:86:b7:0b:8a:2b:cd:eb:37:31:25:fe:
47:35:30:a3:15:f8:4e:1f:a8:d4:f3:48:6d:d8:03:
f6:c4:09:da:06:88:ab:a9:b3:bb:fd:44:e6:54:e6:
83:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:0B:54:1B:F6:22:1A:C9:34:2E:3A:FB:DF:91:DE:9D:E3:B2:54:6B
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS134478.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:580::/44
2a06:a005:950::/44
2a06:a005:d00::/44
Signature Algorithm: sha256WithRSAEncryption
00:0b:e1:0a:eb:2a:07:7f:0f:e6:58:84:61:32:95:c3:4e:fe:
32:85:7e:2a:c2:25:cb:da:46:e3:40:72:b5:eb:88:91:4e:5a:
9f:bb:8c:d2:45:c9:1f:f1:fa:6d:50:84:7b:3c:2f:83:46:9a:
34:6a:31:00:25:90:5a:60:97:6a:f1:e7:f7:1f:61:77:e6:e3:
d4:5e:eb:82:b0:f0:26:0f:36:5d:98:1b:bd:cf:9c:86:42:47:
8d:62:1e:f0:cb:d3:77:5e:45:b4:99:ca:34:94:3e:1c:23:6c:
92:36:55:d2:ac:de:2c:ed:f9:8c:e0:51:66:82:81:a3:a3:9a:
47:22:c7:c1:1c:49:a7:fa:f7:33:44:ef:44:36:46:d8:95:63:
3b:50:c2:31:af:55:ac:4d:37:53:cc:2a:2c:a0:b6:83:a1:bf:
e6:25:16:ab:70:af:25:a4:c2:4c:4e:a8:41:87:b2:ad:f0:74:
f2:07:3d:38:4e:f3:01:26:9c:e2:c6:bb:70:6d:e1:8f:de:9d:
b1:29:0d:b6:ec:a2:1a:2b:04:bf:9b:ee:6c:b6:5c:47:20:83:
9a:45:fe:61:29:65:4d:9f:cd:c0:30:bd:c4:e7:e3:d4:20:52:
9a:5c:9e:2b:83:8b:e7:f0:b1:fe:8a:95:22:0e:cc:09:92:88:
91:d0:89:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 12:13:11 2024 by rpki-client on console-fra.rpki-client.org