Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS140506.roa
File: AS140506.roa (raw, json)
Hash identifier: fMjNXj3ggD+TQ3ykT62FEStgER6xF4f92Qd2dMWwr6g=
Subject key identifier: 5B:F6:D7:E2:27:4E:B4:4F:4C:75:0C:73:AA:49:6F:58:D6:63:3C:8B
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 6FF64F0F0E2021CA1B5A0C1DDF89C26D58D44919
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS140506.roa
Signing time: Mon 08 Jan 2024 20:44:21 +0000
ROA not before: Mon 08 Jan 2024 20:39:21 +0000
ROA not after: Mon 06 Jan 2025 20:44:21 +0000
asID: 140506
IP address blocks: 2a06:a005:d70::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:f6:4f:0f:0e:20:21:ca:1b:5a:0c:1d:df:89:c2:6d:58:d4:49:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Jan 8 20:39:21 2024 GMT
Not After : Jan 6 20:44:21 2025 GMT
Subject: CN=5BF6D7E2274EB44F4C750C73AA496F58D6633C8B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:fe:c2:e7:64:55:f2:bc:af:06:f1:d3:76:6a:
ac:69:16:2e:80:0b:0d:84:f5:98:34:ce:d5:8c:07:
af:a4:ca:9c:72:61:c7:94:c4:8a:02:41:d2:a5:8e:
b7:fa:2c:83:48:b1:7b:7f:6c:33:a7:a6:6b:86:a7:
29:b6:a5:b0:df:16:5e:70:a5:29:46:a1:03:8e:49:
ca:90:cb:c1:c0:30:45:09:82:96:18:4a:a2:14:9c:
05:f9:64:3a:a3:52:9f:b0:95:6f:76:ad:f2:d2:12:
29:e2:87:1a:07:bc:3d:82:bd:e4:d7:a6:8a:bf:e7:
90:96:e9:52:2a:a6:a5:a6:d6:03:ff:31:f7:30:8b:
74:5d:3c:47:95:ad:b3:2c:70:a4:34:58:1a:66:80:
71:13:7b:25:06:4a:92:89:ea:07:f2:ba:b7:ab:8c:
b0:1d:cb:87:5f:13:17:ec:19:c4:75:bd:8c:57:0b:
25:29:64:4c:0a:43:1a:23:b5:cd:bf:8d:df:76:b8:
37:24:d2:17:e6:35:86:d7:aa:0c:90:e5:24:23:bd:
5b:95:60:27:53:a4:54:5d:ef:58:2e:d0:a9:2a:0b:
8a:75:f5:70:7d:27:9d:d9:3b:eb:7e:24:35:7a:fd:
cc:4e:ce:1c:b1:51:04:f2:42:78:e2:0b:1d:bc:63:
23:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:F6:D7:E2:27:4E:B4:4F:4C:75:0C:73:AA:49:6F:58:D6:63:3C:8B
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS140506.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:d70::/44
Signature Algorithm: sha256WithRSAEncryption
c8:30:f7:4c:c6:13:c2:da:d1:ce:6b:64:f6:16:53:cb:b3:3a:
f2:fb:fe:9c:d8:8f:68:1e:01:5f:b7:48:8d:1c:ba:90:70:d0:
cf:45:1b:25:31:6f:6e:a5:12:a2:39:4f:9c:a6:41:38:91:70:
8c:20:54:34:46:c8:99:be:3a:f1:59:4d:dd:75:18:1d:36:c5:
f4:d2:c8:b3:f7:37:a2:40:dc:ea:43:5f:b0:74:ae:aa:e2:af:
63:f3:77:ad:f2:fd:d7:05:cd:05:dc:e6:89:e8:74:d1:c6:84:
3e:a5:80:a9:94:d2:6b:87:0b:21:15:1d:ef:f2:80:e8:de:3d:
32:0b:06:1c:dd:e8:fb:1d:9c:9e:66:49:45:b8:48:d4:59:4f:
6e:0a:cf:df:4e:6e:30:17:93:86:75:32:e9:25:92:52:20:15:
61:04:2c:14:26:ed:59:6a:29:9b:6f:01:9b:c8:2e:e0:25:3f:
47:35:e5:65:72:fc:9b:c2:5a:23:4c:13:5a:6c:7b:d5:33:c7:
d2:10:e8:a8:f8:86:66:21:de:58:0d:89:69:0a:37:e6:0d:12:
09:53:ce:25:6f:d7:b6:ee:f5:f4:d1:e7:42:d6:8a:1d:64:67:
b9:b7:ea:9d:da:6d:3a:35:1a:9f:c5:a2:51:8c:bb:52:95:3f:
59:24:d9:9d
-----BEGIN CERTIFICATE-----
MIIE6DCCA9CgAwIBAgIUb/ZPDw4gIcobWgwd34nCbVjUSRkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzk5NDM4ZjFiMTc2MmFlZWY4YTM1Y2Y0ZTZjYmFlOTc2
OTliZDAyMDAeFw0yNDAxMDgyMDM5MjFaFw0yNTAxMDYyMDQ0MjFaMDMxMTAvBgNV
BAMTKDVCRjZEN0UyMjc0RUI0NEY0Qzc1MEM3M0FBNDk2RjU4RDY2MzNDOEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF/sLnZFXyvK8G8dN2aqxpFi6A
Cw2E9Zg0ztWMB6+kypxyYceUxIoCQdKljrf6LINIsXt/bDOnpmuGpym2pbDfFl5w
pSlGoQOOScqQy8HAMEUJgpYYSqIUnAX5ZDqjUp+wlW92rfLSEinihxoHvD2CveTX
poq/55CW6VIqpqWm1gP/Mfcwi3RdPEeVrbMscKQ0WBpmgHETeyUGSpKJ6gfyurer
jLAdy4dfExfsGcR1vYxXCyUpZEwKQxojtc2/jd92uDck0hfmNYbXqgyQ5SQjvVuV
YCdTpFRd71gu0KkqC4p19XB9J53ZO+t+JDV6/cxOzhyxUQTyQnjiCx28YyMDAgMB
AAGjggHyMIIB7jAdBgNVHQ4EFgQUW/bX4idOtE9MdQxzqklvWNZjPIswHwYDVR0j
BBgwFoAUeZQ48bF2Ku74o1z05suul2mb0CAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi83OTk0MzhGMUIx
NzYyQUVFRjhBMzVDRjRFNkNCQUU5NzY5OUJEMDIwLmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZVpRNDhiRjJLdTc0bzF6MDVzdXVsMm1iMENBLmNlcjBwBggrBgEF
BQcBCwRkMGIwYAYIKwYBBQUHMAuGVHJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv
cmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5ZC8yL0FT
MTQwNTA2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEH
AQH/BBMwETAPBAIAAjAJAwcEKgagBQ1wMA0GCSqGSIb3DQEBCwUAA4IBAQDIMPdM
xhPC2tHOa2T2FlPLszry+/6c2I9oHgFft0iNHLqQcNDPRRslMW9upRKiOU+cpkE4
kXCMIFQ0RsiZvjrxWU3ddRgdNsX00siz9zeiQNzqQ1+wdK6q4q9j83et8v3XBc0F
3OaJ6HTRxoQ+pYCplNJrhwshFR3v8oDo3j0yCwYc3ej7HZyeZklFuEjUWU9uCs/f
Tm4wF5OGdTLpJZJSIBVhBCwUJu1ZaimbbwGbyC7gJT9HNeVlcvybwlojTBNabHvV
M8fSEOio+IZmId5YDYlpCjfmDRIJU84lb9e27vX00edC1oodZGe5t+qd2m06NRqf
xaJRjLtSlT9ZJNmd
-----END CERTIFICATE-----
Generated at Mon Nov 25 21:33:09 2024 by rpki-client on console-ams.rpki-client.org