Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS139311.roa
File: AS139311.roa (raw, json)
Hash identifier: //W/SXCLtVQZcUarcsVGlnrAuiyV3RVO9EDWam8YHJU=
Subject key identifier: 63:77:79:F6:DE:47:2F:0E:0D:93:DE:1F:FC:F3:F4:79:CF:94:2F:EE
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 61F7522D8E89B7D25316EF3A50316824C7F19C9E
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS139311.roa
Signing time: Wed 26 Mar 2025 22:14:15 +0000
ROA not before: Wed 26 Mar 2025 22:09:15 +0000
ROA not after: Wed 25 Mar 2026 22:14:15 +0000
asID: 139311
IP address blocks: 2a06:a005:10b0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 09:24:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:f7:52:2d:8e:89:b7:d2:53:16:ef:3a:50:31:68:24:c7:f1:9c:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Mar 26 22:09:15 2025 GMT
Not After : Mar 25 22:14:15 2026 GMT
Subject: CN=637779F6DE472F0E0D93DE1FFCF3F479CF942FEE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:96:0e:af:64:fb:64:7c:3c:7e:f3:7a:e8:09:
3a:42:01:85:a9:21:35:82:d5:fd:de:13:a2:bf:49:
ba:1a:9d:51:9f:89:f8:2f:45:b3:9b:71:e2:e2:a5:
15:da:d8:89:bd:6a:e8:b3:db:19:7d:74:28:73:81:
b7:c8:d3:56:50:17:25:51:45:53:eb:ee:e6:1e:44:
37:d7:3e:ce:d8:40:26:81:15:43:57:8d:e7:fa:62:
15:68:5e:67:b7:44:1f:63:b5:df:d1:c3:8b:a8:d2:
fb:0f:47:61:ae:41:d8:86:e7:c7:99:86:83:76:2b:
ad:51:da:28:c2:d6:8f:f8:13:cf:d0:80:75:af:2f:
3e:14:b9:5b:35:15:a7:31:13:30:fd:d7:88:a2:f2:
59:f1:59:3d:df:55:3f:7c:f2:e3:18:86:fc:a9:32:
56:41:91:e3:44:90:53:b8:5c:f9:57:5d:ce:a2:c3:
dc:d0:13:d2:4c:6d:ff:2a:6c:64:ce:f8:2d:bb:45:
82:5f:4e:e6:5a:87:74:a6:6f:ca:82:9c:47:b6:d9:
70:99:68:4c:a3:ad:c9:ce:35:26:08:4d:a1:83:06:
cd:2f:3c:be:99:ed:3b:eb:83:46:3e:41:8b:25:86:
fa:4d:ad:aa:2a:74:5b:bd:a8:d5:f1:bb:61:04:c1:
5e:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:77:79:F6:DE:47:2F:0E:0D:93:DE:1F:FC:F3:F4:79:CF:94:2F:EE
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS139311.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:10b0::/44
Signature Algorithm: sha256WithRSAEncryption
c9:b5:7d:db:f6:33:ad:63:82:02:12:62:65:3d:f3:10:18:95:
1c:35:91:68:aa:aa:3c:4d:c4:28:b1:48:fd:52:54:22:e2:2e:
d7:7e:e0:80:e2:23:01:72:9b:aa:38:54:ad:4c:ac:90:9f:0d:
9c:d1:44:c3:ce:e4:ad:3a:d8:0f:9e:ff:1b:5c:20:4e:26:3e:
bf:ab:15:ec:1a:1f:6b:1a:9e:58:b9:1a:fa:f5:4f:18:f8:52:
53:77:39:5f:c8:d6:a9:15:5b:2f:48:01:11:89:eb:31:d5:6e:
e3:17:8e:f0:30:20:ba:f9:cd:62:4a:ab:e7:60:63:ff:b4:34:
1f:6d:ad:3d:94:af:cf:c3:46:5c:39:5f:06:78:0a:13:74:9b:
bd:32:77:37:43:e2:e6:80:41:94:a0:e9:ce:86:d6:62:aa:e9:
01:3e:be:5c:03:b5:ff:08:9e:57:b2:85:06:e6:b1:b6:c0:dc:
4c:2e:54:69:a2:88:1e:fe:8c:79:50:d1:50:ac:47:05:f0:6b:
84:a9:26:65:b0:ff:5b:62:61:8a:a3:fb:82:53:2d:72:11:5b:
6d:4c:f4:11:a3:b9:c4:0a:6f:cf:96:07:48:77:a1:06:b6:9f:
4c:81:d0:11:eb:d0:30:a0:72:4a:05:20:e7:61:66:a2:02:f8:
81:f3:c0:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:39:20 2025 by rpki-client