Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS139882.roa
File: AS139882.roa (raw, json)
Hash identifier: FMU+/jaeOZQkm2Ro8MdJvL8oQ0YnMg3oOD1J6K7E2zE=
Subject key identifier: 7D:6C:EB:37:1A:7A:87:6A:44:CA:21:31:04:09:A0:B1:5B:CE:37:2A
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 761EAD43BCF6AA96F8555353EA2DAB7F8FB70FE7
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS139882.roa
Signing time: Tue 05 Nov 2024 03:40:09 +0000
ROA not before: Tue 05 Nov 2024 03:35:09 +0000
ROA not after: Tue 04 Nov 2025 03:40:09 +0000
asID: 139882
IP address blocks: 2a06:a005:360::/44 maxlen: 48
2a06:a005:370::/44 maxlen: 48
2a06:a005:380::/44 maxlen: 48
2a06:a005:390::/44 maxlen: 48
2a06:a005:3a0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 17:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:1e:ad:43:bc:f6:aa:96:f8:55:53:53:ea:2d:ab:7f:8f:b7:0f:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Nov 5 03:35:09 2024 GMT
Not After : Nov 4 03:40:09 2025 GMT
Subject: CN=7D6CEB371A7A876A44CA21310409A0B15BCE372A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:95:ae:43:54:9d:ed:c1:8f:6f:f8:a4:39:1d:
28:b3:51:48:64:d3:13:61:bb:37:b6:2c:eb:53:56:
c1:c3:5c:e3:0f:63:cd:ad:cc:65:0e:0f:cf:84:3c:
08:1a:59:de:89:38:46:56:f7:29:88:fb:95:df:e4:
be:b7:7d:b4:3d:4f:9f:83:c6:32:fa:09:09:15:63:
71:fa:78:99:1c:09:cf:ea:77:83:38:f6:50:48:f6:
32:ae:ef:41:8c:f8:b8:e5:2d:43:28:0b:e1:9c:5e:
52:ed:18:e0:c4:7b:81:c1:b2:c6:c1:c8:b0:eb:7f:
06:83:fe:d4:2d:0f:47:11:5b:b6:19:d9:a6:2b:56:
c4:02:f6:1e:ca:ae:5c:f4:a4:2f:53:ae:04:b0:12:
12:3f:20:7b:d7:8f:09:fc:56:b9:91:5c:7f:34:9f:
81:a3:09:99:3b:95:e8:54:34:de:62:fd:4b:3e:be:
e9:aa:9a:4f:cd:51:94:a8:ed:b0:de:8f:92:70:a6:
58:2e:29:d2:37:1b:2a:82:4e:15:1a:03:59:90:ed:
30:dd:d6:2b:05:96:47:c3:f1:20:3a:f1:4b:17:fd:
dc:e1:cb:7e:18:be:e4:06:cc:94:3e:38:f3:1d:47:
37:49:4d:83:77:0a:cd:e6:60:79:0c:e8:79:be:f6:
a3:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:6C:EB:37:1A:7A:87:6A:44:CA:21:31:04:09:A0:B1:5B:CE:37:2A
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS139882.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:360::-2a06:a005:3af:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
d1:c0:20:45:2a:4f:04:21:20:eb:71:e8:72:e8:90:c0:fe:89:
9f:41:76:da:12:97:f0:a2:72:27:1c:e9:1b:18:33:15:2e:09:
1f:fe:98:4b:1f:08:2c:fd:cf:62:f9:f9:a0:5a:3b:53:28:4b:
04:09:f5:c0:7f:c0:47:a6:82:3a:74:67:93:92:33:4e:ab:c2:
1c:b7:5a:fa:7f:a2:89:09:35:b3:a4:53:1a:ea:ae:94:48:ad:
85:06:58:cb:57:74:aa:3b:36:dc:b5:8a:14:8c:d7:f5:b7:81:
cf:e6:85:d0:bb:71:3c:ca:f2:b2:28:cd:ab:7f:e2:9e:19:21:
2b:db:24:81:70:6c:28:50:5c:35:4f:9a:2a:cb:6d:b6:d3:92:
58:27:d2:1b:8b:4a:8e:f2:81:d1:9a:86:6c:1a:86:12:c1:d8:
c2:f6:2d:19:69:a6:06:ec:a3:97:60:86:75:71:7e:4b:f1:db:
a6:c5:42:e7:e6:23:20:eb:2f:28:cd:3a:b8:32:3a:5e:38:30:
59:44:3d:f7:07:e7:0d:79:df:40:20:28:bc:63:26:4c:10:31:
cc:46:e1:e5:5d:27:8c:5e:58:58:9d:6b:80:05:18:dc:0b:06:
8c:bd:cc:4f:50:67:5b:d1:61:f9:c3:14:23:4d:6c:bf:20:3f:
ce:9b:2d:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:40:19 2024 by rpki-client on console-ams.rpki-client.org