Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS137425.roa
File: AS137425.roa (raw, json)
Hash identifier: omDdtTq9jye8EZZ8kDR8buW7SmNhYwTe7vqhSlPM69w=
Subject key identifier: 0E:A8:75:32:C1:53:32:25:0D:0A:71:15:19:5A:EB:8A:00:7E:31:88
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 54D6C4B151D72223E08DFAF590A99ED7424B720E
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS137425.roa
Signing time: Tue 05 Dec 2023 02:44:17 +0000
ROA not before: Tue 05 Dec 2023 02:39:17 +0000
ROA not after: Tue 03 Dec 2024 02:44:17 +0000
asID: 137425
IP address blocks: 2a06:a005:4d8::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:d6:c4:b1:51:d7:22:23:e0:8d:fa:f5:90:a9:9e:d7:42:4b:72:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Dec 5 02:39:17 2023 GMT
Not After : Dec 3 02:44:17 2024 GMT
Subject: CN=0EA87532C15332250D0A7115195AEB8A007E3188
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:dd:6f:47:39:08:77:ea:ca:6c:7d:5b:9c:d3:
d2:c3:f7:c6:9d:97:dc:d4:12:83:e0:3a:2a:1a:83:
58:5b:df:f6:e6:29:6c:8c:62:34:d1:8e:fc:a4:07:
07:ef:75:87:6e:3d:5f:8d:df:9b:09:a8:82:6d:97:
2f:08:ba:f8:ae:03:8d:19:7c:1f:9d:8b:96:5a:2b:
45:9f:c3:57:9b:4c:a9:69:b6:62:9a:48:f2:d6:75:
38:67:c9:55:89:68:a7:44:3a:d2:cd:fd:5d:1c:da:
ec:1c:83:9e:08:cb:ca:f8:04:6f:7c:aa:42:a4:95:
b3:2e:9f:01:64:0f:8d:71:23:8e:37:01:59:88:b0:
d1:44:16:00:33:ff:b2:9b:55:a2:27:29:1b:28:1e:
9e:a8:d0:03:fc:d4:36:e2:9a:31:60:7a:bf:72:1f:
bf:c8:4b:70:ec:4c:f7:30:fd:59:dd:85:e8:9c:b2:
f5:28:f8:ee:35:eb:dd:14:98:92:28:0f:d9:5c:d1:
c0:09:f0:9d:58:a8:b5:ed:13:e0:64:a0:f7:94:69:
d5:f1:58:ad:bf:3c:63:00:79:12:d8:69:ec:7d:45:
a9:81:41:19:d3:99:92:92:4a:3d:e4:c0:00:6d:a7:
fd:00:81:0a:86:7d:69:6e:a2:83:db:08:05:06:e0:
d3:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:A8:75:32:C1:53:32:25:0D:0A:71:15:19:5A:EB:8A:00:7E:31:88
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS137425.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:4d8::/48
Signature Algorithm: sha256WithRSAEncryption
c0:9c:6a:16:40:1d:dc:7d:db:5b:be:ac:8d:aa:03:be:ba:45:
f3:f1:35:d3:2e:07:20:52:90:76:df:1f:74:4e:1a:05:d1:c3:
9b:4a:d3:af:90:30:37:39:77:65:2f:7f:8e:1a:59:12:cc:2a:
33:d2:b8:41:22:a1:88:16:a9:90:73:ba:77:15:01:5e:79:c1:
b8:92:17:44:52:2e:cd:ae:2c:a5:d9:9a:00:90:19:a4:35:51:
aa:3d:40:80:e6:f8:cf:33:dc:99:5f:8c:e8:9e:66:0f:99:a1:
a5:e5:82:08:77:21:2e:98:1b:8c:e2:e2:f3:d4:6f:6e:7a:23:
d4:ee:35:30:ec:f4:ca:f3:9c:c5:3b:1c:4a:35:4f:20:e0:3e:
c8:af:d5:c8:b2:08:4e:46:77:b3:1c:4e:38:8e:7d:75:f7:22:
66:89:d0:c4:85:d6:8f:57:49:6c:99:01:0e:66:7c:df:58:ae:
c5:8c:95:1f:b7:5a:c0:41:f2:ba:3a:cb:65:15:96:c8:1d:3f:
65:6b:36:8a:d0:81:11:05:33:cc:0c:e3:5b:96:89:f1:1c:ed:
44:48:34:04:fb:cd:2b:7e:28:2d:df:5b:c3:7d:1c:c6:13:8a:
4f:f3:9c:1d:a6:82:28:2f:09:2a:ab:1b:83:cc:63:9f:d3:20:
ad:f2:cb:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 12:13:11 2024 by rpki-client on console-fra.rpki-client.org