Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS139859.roa
File: AS139859.roa (raw, json)
Hash identifier: irpSXrUbUavKQOUs+IJoPnU7umGFeAX+G8I/1kViUYA=
Subject key identifier: 08:DE:69:90:87:81:ED:3E:2A:97:79:DD:2E:0A:55:FB:26:3B:45:03
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 79563B8C0926A4E2C9A3A0F41DFB5E2F6CF3AC54
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS139859.roa
Signing time: Tue 05 Dec 2023 02:44:14 +0000
ROA not before: Tue 05 Dec 2023 02:39:14 +0000
ROA not after: Tue 03 Dec 2024 02:44:14 +0000
asID: 139859
IP address blocks: 2a06:a005:1c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 14:41:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:56:3b:8c:09:26:a4:e2:c9:a3:a0:f4:1d:fb:5e:2f:6c:f3:ac:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Dec 5 02:39:14 2023 GMT
Not After : Dec 3 02:44:14 2024 GMT
Subject: CN=08DE69908781ED3E2A9779DD2E0A55FB263B4503
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:7f:2f:2a:48:2e:52:b2:70:ff:17:a5:fd:a0:
04:82:35:aa:10:95:1d:2c:3c:7a:a7:ca:aa:8a:48:
49:41:b9:7d:81:fb:ca:04:29:b7:19:34:73:c7:c6:
2f:94:36:33:1a:44:67:f0:58:fc:8f:c4:ed:76:57:
b4:9f:74:10:95:ce:42:e6:45:ff:cc:91:a3:9d:a7:
e5:6e:e5:7c:2e:17:4e:d2:a9:9c:23:69:b5:44:8b:
59:3f:07:b0:0d:3f:f6:1a:49:7e:c0:b0:c4:b1:b7:
77:47:7e:54:82:b3:d9:f8:0e:9d:ff:a7:73:03:38:
7b:27:43:5d:ff:9f:db:fa:16:29:bf:5f:94:11:18:
52:0f:92:d7:d4:97:4d:3c:6a:06:66:84:e5:99:37:
14:b1:3c:1c:6c:bc:38:48:e9:d5:45:e2:46:47:9a:
3e:0c:aa:f9:5e:72:40:37:d7:86:ce:64:97:86:7d:
50:17:fa:08:3a:01:98:e9:3e:fb:ca:3d:26:ce:e0:
e0:e2:9f:33:16:69:3c:af:72:9a:fd:75:7a:7f:3a:
9f:6a:e5:5f:f2:1f:4c:6e:74:ca:75:47:7a:58:09:
9c:b5:ff:bd:06:05:63:0b:af:79:62:95:4a:f2:fa:
9c:bb:b0:9b:e0:1f:0e:70:9a:b8:1b:87:8b:37:3c:
d5:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:DE:69:90:87:81:ED:3E:2A:97:79:DD:2E:0A:55:FB:26:3B:45:03
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS139859.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1c::/48
Signature Algorithm: sha256WithRSAEncryption
a3:a5:53:c7:62:84:37:89:55:03:c8:f0:f2:10:2c:42:ca:89:
a7:28:65:c4:01:aa:5c:9c:c8:a6:21:fb:c5:36:c7:2a:20:e2:
23:7c:cc:cc:1e:6c:e4:47:60:94:85:04:d3:61:5b:b7:c2:b0:
15:db:77:b9:1d:76:74:82:ab:d2:a2:38:57:ba:0c:c1:c9:89:
45:0d:5d:09:59:73:dc:6c:6f:38:93:9e:46:91:35:37:bc:7e:
33:65:69:de:bc:8d:24:8f:c3:18:70:c3:cc:7e:7d:61:b2:ac:
45:5f:89:8a:95:1b:1b:fc:89:44:b3:53:32:b6:28:2b:61:34:
36:4b:5f:d4:ed:39:99:65:97:73:0e:37:6f:0f:30:01:bf:19:
d7:e0:ab:79:35:1c:6d:f9:84:c4:7f:ad:41:4f:6b:80:12:fd:
44:91:76:f7:4e:c3:21:c8:19:2b:f8:e3:17:69:17:a0:7c:5f:
df:08:e3:ff:3d:9a:5f:5c:ea:80:19:eb:b7:70:2e:62:3e:5a:
38:b4:89:fe:8e:3a:d4:3a:01:79:96:9c:53:60:e7:ee:52:90:
db:10:39:7b:80:cd:39:c1:b8:58:4c:2f:c8:35:74:cd:03:c3:
0f:02:62:1f:a5:47:0a:ed:5f:0e:85:9e:9d:ff:bc:a1:28:e5:
85:6a:34:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 20:32:55 2024 by rpki-client on console-fra.rpki-client.org