Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS139311.roa
File: AS139311.roa (raw, json)
Hash identifier: Wse/Nkjo5Lfa1sD5HEn8hKkVwsWKFAlN7TCQQXXJWbk=
Subject key identifier: 29:BC:22:54:05:81:9E:40:17:B5:FC:12:52:96:A6:02:B1:C8:14:BA
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 4F5DAF130212E7C41495B8691478A551138627C6
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS139311.roa
Signing time: Tue 05 Nov 2024 03:40:06 +0000
ROA not before: Tue 05 Nov 2024 03:35:06 +0000
ROA not after: Tue 04 Nov 2025 03:40:06 +0000
asID: 139311
IP address blocks: 2a06:a005:10b0::/44 maxlen: 48
2a06:a005:10c0::/44 maxlen: 48
2a06:a005:10d0::/44 maxlen: 48
2a06:a005:10e0::/44 maxlen: 48
2a06:a005:10f0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:5d:af:13:02:12:e7:c4:14:95:b8:69:14:78:a5:51:13:86:27:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Nov 5 03:35:06 2024 GMT
Not After : Nov 4 03:40:06 2025 GMT
Subject: CN=29BC225405819E4017B5FC125296A602B1C814BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:2d:c0:5a:af:0f:ab:28:c8:5c:6a:68:fd:5b:
7e:57:57:8b:a2:fe:ce:80:03:7a:e4:f0:1b:e3:eb:
d0:68:c3:3c:dd:e7:1f:68:f0:8a:97:10:28:97:f9:
71:98:2e:66:f5:35:49:e4:3b:af:6f:c0:ce:30:0a:
37:94:c5:93:ce:d3:e9:b8:30:34:14:0c:cb:f4:5c:
af:79:4e:58:2e:f9:99:be:f2:c1:1d:a5:26:d8:8f:
b9:20:bc:2c:89:87:db:db:90:5b:ec:a6:4f:a7:7d:
ab:28:d9:e4:03:5c:c5:7f:06:9d:7b:98:ae:ec:bf:
f1:21:32:10:b4:1c:fd:b6:e6:9a:28:65:e5:cb:0b:
2f:14:29:24:ec:d6:05:70:fe:6f:56:60:7c:f3:36:
cd:f8:33:49:1a:d9:03:3d:20:6b:f5:67:fe:9b:65:
64:f1:1d:5e:44:1f:ee:b2:aa:33:a0:3c:3c:32:b0:
86:b1:cd:3c:74:bb:11:63:65:7b:58:ea:d8:ea:2a:
58:27:6b:c6:0f:45:a5:44:52:88:6a:94:cf:96:a3:
c4:5a:95:f6:74:da:d7:6a:46:81:14:08:f1:f8:51:
c0:82:95:38:5c:01:e9:90:8a:8c:7c:74:d9:78:51:
03:2a:11:1d:d4:19:5d:c2:ea:8d:a5:41:65:9c:79:
b8:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:BC:22:54:05:81:9E:40:17:B5:FC:12:52:96:A6:02:B1:C8:14:BA
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS139311.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:10b0::-2a06:a005:10ff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
2e:9d:2f:d2:a5:6b:12:42:56:2a:05:63:1f:ec:df:7b:b3:9b:
96:75:16:0d:04:bb:fa:12:44:d3:34:7a:89:82:cb:13:5e:c1:
be:e4:fe:bb:cb:27:e5:59:5e:8c:af:90:b7:ca:11:3d:76:4f:
e1:fb:71:82:75:fd:b6:bc:8c:09:81:b4:11:27:8d:4a:ef:e5:
11:62:b0:fc:8b:87:32:14:c0:a4:21:2c:9e:9e:3d:36:65:3e:
76:e4:c7:10:0d:c5:41:e4:b9:80:3c:3a:0c:8b:31:2a:14:05:
6e:cf:b7:30:da:2e:46:09:4e:89:69:26:6b:a8:2c:f4:55:2c:
47:f3:fc:23:43:42:ab:ff:fc:d7:61:bf:a1:41:79:53:06:30:
2a:f9:5f:d9:66:33:a0:cd:2b:ce:f0:0a:c1:ba:8b:22:bc:8b:
5d:1b:b1:34:b8:3a:3e:97:77:a5:9f:dd:f0:ee:88:26:a6:c2:
09:d9:be:94:38:33:f3:44:bc:8a:81:08:35:76:f3:44:a6:3f:
9f:54:f0:82:7a:b5:1a:5c:4d:6e:f0:44:71:68:22:38:b1:1e:
f9:9c:66:bd:b0:93:58:c7:b6:06:27:7a:3d:93:5e:9f:d7:3d:
f4:94:ba:5b:34:d3:07:9f:b9:7e:af:5f:67:83:74:d7:32:37:
be:78:48:78
-----BEGIN CERTIFICATE-----
MIIE8jCCA9qgAwIBAgIUT12vEwIS58QUlbhpFHilUROGJ8YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzk5NDM4ZjFiMTc2MmFlZWY4YTM1Y2Y0ZTZjYmFlOTc2
OTliZDAyMDAeFw0yNDExMDUwMzM1MDZaFw0yNTExMDQwMzQwMDZaMDMxMTAvBgNV
BAMTKDI5QkMyMjU0MDU4MTlFNDAxN0I1RkMxMjUyOTZBNjAyQjFDODE0QkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcLcBarw+rKMhcamj9W35XV4ui
/s6AA3rk8Bvj69Bowzzd5x9o8IqXECiX+XGYLmb1NUnkO69vwM4wCjeUxZPO0+m4
MDQUDMv0XK95Tlgu+Zm+8sEdpSbYj7kgvCyJh9vbkFvspk+nfaso2eQDXMV/Bp17
mK7sv/EhMhC0HP225pooZeXLCy8UKSTs1gVw/m9WYHzzNs34M0ka2QM9IGv1Z/6b
ZWTxHV5EH+6yqjOgPDwysIaxzTx0uxFjZXtY6tjqKlgna8YPRaVEUohqlM+Wo8Ra
lfZ02tdqRoEUCPH4UcCClThcAemQiox8dNl4UQMqER3UGV3C6o2lQWWcebh3AgMB
AAGjggH8MIIB+DAdBgNVHQ4EFgQUKbwiVAWBnkAXtfwSUpamArHIFLowHwYDVR0j
BBgwFoAUeZQ48bF2Ku74o1z05suul2mb0CAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi83OTk0MzhGMUIx
NzYyQUVFRjhBMzVDRjRFNkNCQUU5NzY5OUJEMDIwLmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZVpRNDhiRjJLdTc0bzF6MDVzdXVsMm1iMENBLmNlcjBwBggrBgEF
BQcBCwRkMGIwYAYIKwYBBQUHMAuGVHJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv
cmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5ZC8yL0FT
MTM5MzExLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEH
AQH/BB0wGzAZBAIAAjATMBEDBwQqBqAFELADBgAqBqAFEDANBgkqhkiG9w0BAQsF
AAOCAQEALp0v0qVrEkJWKgVjH+zfe7OblnUWDQS7+hJE0zR6iYLLE17BvuT+u8sn
5VlejK+Qt8oRPXZP4ftxgnX9tryMCYG0ESeNSu/lEWKw/IuHMhTApCEsnp49NmU+
duTHEA3FQeS5gDw6DIsxKhQFbs+3MNouRglOiWkma6gs9FUsR/P8I0NCq//812G/
oUF5UwYwKvlf2WYzoM0rzvAKwbqLIryLXRuxNLg6Ppd3pZ/d8O6IJqbCCdm+lDgz
80S8ioEINXbzRKY/n1Twgnq1GlxNbvBEcWgiOLEe+ZxmvbCTWMe2Bid6PZNen9c9
9JS6WzTTB5+5fq9fZ4N01zI3vnhIeA==
-----END CERTIFICATE-----
Generated at Mon Nov 25 22:04:22 2024 by rpki-client on console-fra.rpki-client.org