Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS139967.roa
File: AS139967.roa (raw, json)
Hash identifier: u/8QPGLbHxl1XlUMysZIceT8EhOsRG45s7dViVrKmDQ=
Subject key identifier: 0F:15:B0:43:AB:A7:B7:B9:BE:FE:87:16:9E:B9:BC:2F:38:69:44:02
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 5317BB6328FCD9CB767199D0586C262BC1BB68CD
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS139967.roa
Signing time: Tue 05 Nov 2024 03:40:00 +0000
ROA not before: Tue 05 Nov 2024 03:35:00 +0000
ROA not after: Tue 04 Nov 2025 03:40:00 +0000
asID: 139967
IP address blocks: 2a06:a005:45f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:17:bb:63:28:fc:d9:cb:76:71:99:d0:58:6c:26:2b:c1:bb:68:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Nov 5 03:35:00 2024 GMT
Not After : Nov 4 03:40:00 2025 GMT
Subject: CN=0F15B043ABA7B7B9BEFE87169EB9BC2F38694402
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:1b:dd:80:d8:09:b1:5a:b9:84:77:06:8a:57:
67:ff:22:ca:f9:47:c1:d7:71:83:2b:f9:28:53:e8:
b2:31:79:aa:ad:ca:22:46:c8:70:9d:e2:41:ab:a3:
23:21:7f:f6:ee:f1:c4:a6:e3:b0:6d:19:ed:59:6c:
98:c6:9a:0b:f9:36:02:14:df:8c:7d:1d:94:55:eb:
ed:c6:ef:8c:96:fd:31:45:66:de:b5:cb:11:4d:3e:
c3:25:9a:e6:10:f1:f5:77:96:d3:a4:82:f4:07:8a:
e5:25:9f:7f:46:ec:d0:c5:0d:c3:37:30:7f:4b:af:
54:26:ab:b5:a5:6a:30:61:a4:1f:11:b5:df:c3:f3:
d0:9d:7e:35:ab:86:46:9b:d5:16:e6:55:25:12:2b:
01:0e:8e:20:03:99:c2:29:41:5b:a2:d1:85:ba:ff:
3f:d6:cb:0d:23:7e:5e:71:ca:14:e1:8c:c2:dd:af:
d6:cf:42:1e:70:c9:0d:46:b2:3d:22:f9:f2:f3:3c:
45:33:95:76:50:05:f5:a7:03:86:c4:ba:4b:62:4d:
2b:70:a8:f1:47:3f:cd:f9:a2:d4:32:c1:89:53:f1:
8c:3c:6a:7d:e1:6d:c4:d3:6e:5e:9a:23:a8:79:6d:
6e:35:0a:44:a6:98:9b:20:ef:01:82:78:3e:d1:4e:
9b:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:15:B0:43:AB:A7:B7:B9:BE:FE:87:16:9E:B9:BC:2F:38:69:44:02
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS139967.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:45f::/48
Signature Algorithm: sha256WithRSAEncryption
c5:02:ff:f3:f1:83:e1:67:34:12:77:64:71:4a:12:2e:9c:22:
29:38:4e:f5:7e:e8:a2:3f:ec:68:a5:de:ce:b7:9e:f8:c1:a5:
8d:01:ec:c3:46:b8:46:de:65:ac:08:ea:97:f7:30:8e:a5:9b:
d5:41:cf:5a:90:4a:8b:ac:06:c7:3d:50:f4:82:3b:8f:31:76:
ca:45:58:41:d3:c5:cc:ae:91:31:51:76:fa:d4:62:7a:d6:83:
c7:0d:c9:aa:5b:20:40:5f:d6:1b:ad:d7:eb:f9:ae:53:2e:f5:
04:9b:86:c4:ac:3f:dd:28:2f:f4:a4:8f:3f:bc:c1:c1:30:c2:
37:82:b7:c7:7d:ce:c3:b5:24:68:3b:a8:15:73:f3:a6:80:28:
e3:ed:e4:db:59:21:44:1d:b9:02:09:ed:a9:d4:ea:78:cc:a2:
1c:39:7c:6e:14:d8:5b:d9:e3:99:e0:7a:80:ff:06:9e:98:34:
52:d5:ae:88:c4:4b:77:8a:f7:5b:70:c0:6b:c9:50:13:b3:90:
80:2c:c4:6a:ed:30:45:9a:2b:e0:ee:d3:9b:0b:1b:8a:90:ea:
bc:51:6d:a4:9f:61:5e:c4:a5:4b:e3:da:5d:60:94:87:0a:4c:
55:dc:4b:96:f6:56:74:f5:b3:16:86:26:e3:e7:ac:bc:f5:43:
e9:9c:8e:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:13:34 2024 by rpki-client on console-fra.rpki-client.org