Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS139967.roa
File: AS139967.roa (raw, json)
Hash identifier: 1rt8EitFbGf0YYk2zhi2N2jglk31qA2WNtkGavv7/0c=
Subject key identifier: A1:9A:BB:C9:17:64:D3:11:4A:20:E8:37:03:C8:64:EE:1B:F0:E7:45
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 39FCC4443CF6E9D245A3BB87F5DC232837EF0EC4
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS139967.roa
Signing time: Tue 05 Dec 2023 02:44:17 +0000
ROA not before: Tue 05 Dec 2023 02:39:17 +0000
ROA not after: Tue 03 Dec 2024 02:44:17 +0000
asID: 139967
IP address blocks: 2a06:a005:45f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:fc:c4:44:3c:f6:e9:d2:45:a3:bb:87:f5:dc:23:28:37:ef:0e:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Dec 5 02:39:17 2023 GMT
Not After : Dec 3 02:44:17 2024 GMT
Subject: CN=A19ABBC91764D3114A20E83703C864EE1BF0E745
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8d:1b:96:be:ac:60:62:bb:05:9f:45:05:2f:
29:6a:7a:1b:6d:1b:52:05:ae:fd:02:5b:53:f4:f0:
20:39:c3:7d:8c:4f:f7:bf:c1:57:90:a2:6f:2a:f2:
0d:26:2f:75:70:45:ac:ac:ac:11:98:fc:9b:37:a1:
c4:86:08:e1:bc:42:6f:c0:90:db:aa:1a:79:66:05:
1c:fd:4a:11:aa:72:73:52:ba:51:f0:4c:17:81:87:
99:72:08:3e:d9:3f:7a:52:64:b7:5d:ed:8a:9e:51:
62:f7:6c:fe:95:41:43:e6:b0:43:ec:47:cf:2c:b8:
03:11:f1:9f:09:97:e2:b7:e5:12:66:2a:b8:1f:09:
00:72:9d:f3:2e:02:a6:fc:f8:84:77:21:a2:76:96:
a1:4f:44:e9:63:ca:c9:09:c3:51:2f:38:93:5d:e8:
5e:1b:b6:86:a0:bb:4c:47:47:04:43:34:7b:ab:21:
59:6b:eb:ae:75:fb:bc:c6:b2:8f:70:84:ec:90:18:
05:a8:60:a7:43:1f:d5:c9:e9:3a:33:c6:99:7a:3c:
c0:49:d6:be:80:35:7f:b7:e7:db:6e:9d:57:33:f8:
21:3c:db:31:42:eb:1d:62:d8:05:cf:be:5f:7e:2d:
c3:cd:56:b0:43:d8:d8:f3:df:1a:0a:7a:62:90:42:
1c:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:9A:BB:C9:17:64:D3:11:4A:20:E8:37:03:C8:64:EE:1B:F0:E7:45
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS139967.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:45f::/48
Signature Algorithm: sha256WithRSAEncryption
3e:3b:5a:b6:2d:78:12:d7:0a:98:1a:45:d3:d2:87:76:72:e8:
b4:b8:35:9d:75:d0:88:3a:fc:87:e0:2b:e9:6f:75:59:bc:54:
69:e1:45:b4:fb:83:98:63:6d:51:47:40:67:6a:8d:d5:48:d4:
04:15:33:fb:c1:03:4f:dc:79:d6:bd:e9:ae:4b:62:ff:68:5b:
84:38:d7:c4:ba:52:84:95:73:5e:18:87:28:48:97:7e:42:bd:
02:10:48:c2:34:2f:13:1b:e5:34:ab:26:b8:ad:d6:d4:ff:38:
5a:0d:d9:67:79:9a:5d:a8:9e:ea:e7:41:84:6c:f8:69:e7:b2:
85:e6:4b:e7:be:40:05:44:10:25:1c:d8:9b:47:53:4b:28:02:
59:00:73:45:48:88:c2:24:84:f7:a9:02:49:10:66:2d:e2:2b:
07:d6:77:be:aa:97:10:f6:9c:96:94:be:71:8f:19:51:81:34:
91:f0:5d:bb:66:50:a6:d3:12:e1:0b:01:fc:03:76:c0:f1:c4:
5e:a2:89:04:f7:e3:c7:86:a2:a3:1b:6a:a2:75:df:14:c4:b2:
d4:02:5f:88:ff:53:d7:19:bb:aa:2e:33:a1:d9:49:81:4e:52:
f5:f5:6d:aa:a0:aa:eb:b3:ec:05:5d:5b:2c:44:01:28:a3:f5:
3d:0a:4d:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 12:13:11 2024 by rpki-client on console-fra.rpki-client.org