Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS139311.roa
File: AS139311.roa (raw, json)
Hash identifier: 9em5QFgYvoBzb9lYs7vkO0YNPmalggvaghVfj9sreIk=
Subject key identifier: 1F:2B:93:B4:DF:B9:18:FD:27:49:E1:1F:1A:65:1E:35:EC:D1:0D:40
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 6E3E9B6A6B662E13A03079862027855A2B4CF2A9
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS139311.roa
Signing time: Tue 05 Dec 2023 02:44:10 +0000
ROA not before: Tue 05 Dec 2023 02:39:10 +0000
ROA not after: Tue 03 Dec 2024 02:44:10 +0000
asID: 139311
IP address blocks: 2a06:a005:10b0::/44 maxlen: 48
2a06:a005:10c0::/44 maxlen: 48
2a06:a005:10d0::/44 maxlen: 48
2a06:a005:10e0::/44 maxlen: 48
2a06:a005:10f0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:3e:9b:6a:6b:66:2e:13:a0:30:79:86:20:27:85:5a:2b:4c:f2:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Dec 5 02:39:10 2023 GMT
Not After : Dec 3 02:44:10 2024 GMT
Subject: CN=1F2B93B4DFB918FD2749E11F1A651E35ECD10D40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:84:2b:0d:45:5a:19:63:74:f9:c6:9e:0a:5e:
c2:2a:67:cc:79:e1:a1:04:95:de:96:c5:c6:4c:77:
14:b5:44:97:48:29:3a:f9:11:b4:07:32:e1:c1:b2:
2f:5c:6f:cc:0a:82:c7:b2:29:c5:a7:b4:86:aa:2e:
46:c1:a7:db:03:9b:41:69:c4:a3:ed:b0:48:89:eb:
a9:41:44:12:88:7b:75:85:49:93:02:64:fb:e6:15:
a0:5d:68:f4:bf:4c:a1:f9:2a:22:e7:ac:b3:1a:8b:
b8:49:d3:c1:1c:03:b8:12:30:f6:6a:bc:37:f6:57:
80:bc:2b:65:1e:94:88:54:0e:ab:a2:70:a6:cb:93:
38:36:21:9a:5a:ff:0a:96:5f:22:68:6d:83:76:31:
9c:02:92:f1:73:cf:3a:f1:6c:7b:b8:24:d0:e1:ee:
64:55:a2:59:f9:1b:fc:17:a0:53:c6:07:64:a5:08:
25:77:36:12:4f:ac:9d:67:2b:9f:99:d9:c7:b1:3d:
ab:2e:af:fc:c4:ac:dd:d2:a5:3b:9d:a3:8a:6a:56:
f1:42:49:b7:23:ae:38:0a:41:ef:3d:59:08:ef:48:
db:a1:4e:cb:29:b6:39:08:72:09:83:fb:72:f1:0f:
88:25:67:fa:0d:0a:28:4d:7b:19:c2:1e:73:b3:cf:
5c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:2B:93:B4:DF:B9:18:FD:27:49:E1:1F:1A:65:1E:35:EC:D1:0D:40
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS139311.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:10b0::-2a06:a005:10ff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
48:75:0b:91:64:7b:aa:bc:e9:16:f3:67:0e:5a:e8:83:b6:46:
54:3e:2f:9b:0e:6c:41:d9:21:be:b4:41:ed:11:cb:97:75:b5:
61:ab:00:47:0f:f6:7f:09:fb:51:b3:cd:7c:67:d1:16:fb:b8:
60:05:b5:a9:81:bb:2a:aa:6a:da:eb:b2:7c:bd:a9:ee:36:3e:
b4:01:09:94:ad:f4:2c:41:96:6b:7a:89:02:7b:54:1a:1d:e3:
67:7f:c9:8d:9e:79:3a:6c:f6:4c:8d:01:54:5e:cc:f6:92:cc:
5b:36:13:09:1d:b0:14:f9:d4:f4:59:1f:e4:e9:a4:01:a3:84:
d6:a6:28:f8:d2:45:91:74:21:d1:03:f6:e4:88:91:09:08:c3:
55:36:d8:88:1e:49:02:9a:15:61:5c:4a:d1:7d:f3:c2:cd:b1:
e6:77:93:a6:6e:cc:46:0b:b7:ec:35:0a:d8:fe:76:0d:9e:4d:
16:c4:dd:1e:c3:cf:9c:e0:76:c5:98:c6:8b:bd:2c:bb:2a:2c:
d4:96:ce:f0:87:dd:c2:21:88:da:66:67:f1:7e:2e:95:82:68:
d4:af:93:5d:cf:58:af:a2:8d:59:e8:28:5d:9b:a0:ed:46:22:
a0:5d:37:d7:b9:76:5d:e4:7a:d1:c7:ac:ab:39:2a:0f:fb:53:
80:30:bd:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 20:12:30 2024 by rpki-client on console-ams.rpki-client.org