Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS141776.roa
File: AS141776.roa (raw, json)
Hash identifier: omXg8KlpE5ro01/nPQKZrNfmbZ9gYoHTNOriwWGIKig=
Subject key identifier: AB:67:29:74:A6:FF:FE:8A:60:02:56:7B:C8:50:F0:4E:11:4F:14:F2
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 2590E5BE8D3DEFB1EF5B1A51F203E6A825885AF7
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS141776.roa
Signing time: Tue 05 Dec 2023 02:44:16 +0000
ROA not before: Tue 05 Dec 2023 02:39:16 +0000
ROA not after: Tue 03 Dec 2024 02:44:16 +0000
asID: 141776
IP address blocks: 2a06:a005:100::/44 maxlen: 48
2a06:a005:170::/44 maxlen: 48
2a06:a005:340::/44 maxlen: 48
2a06:a005:630::/44 maxlen: 48
2a06:a005:640::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:90:e5:be:8d:3d:ef:b1:ef:5b:1a:51:f2:03:e6:a8:25:88:5a:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Dec 5 02:39:16 2023 GMT
Not After : Dec 3 02:44:16 2024 GMT
Subject: CN=AB672974A6FFFE8A6002567BC850F04E114F14F2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:03:cc:ef:a3:20:d7:28:7e:8d:f8:ce:7b:27:
bd:79:06:bd:7a:e6:0e:6a:e0:fb:40:e6:d9:ef:17:
75:b8:f2:8b:24:c0:23:cb:db:f6:74:f9:da:c8:92:
0e:64:e3:c6:7a:c7:01:90:0e:9d:c5:f5:af:ba:df:
98:95:89:10:e2:be:1f:a2:1b:88:c5:d6:83:81:1f:
33:d2:3d:73:62:a2:7e:90:5d:f6:f6:80:07:c4:ad:
4b:9a:95:0a:66:d2:d2:cb:37:44:8f:67:fe:44:f5:
e2:8e:1f:53:01:c0:a4:a9:d2:1a:ec:02:2a:30:8b:
ca:a5:2f:3c:8d:b2:f1:78:3b:f4:da:22:a3:32:20:
6c:33:b4:95:29:09:e3:eb:17:54:e4:69:95:aa:7e:
2f:6b:62:fc:5c:5c:2f:cf:40:d0:f9:2e:93:2f:b5:
91:c6:c5:a4:56:74:3b:94:9d:e7:40:b1:5a:88:7f:
ef:e0:b1:18:16:62:c4:6a:2b:2f:bf:0d:49:ea:a0:
17:26:68:e8:ca:a4:a8:b9:0f:1a:87:c5:48:91:6e:
15:b2:36:af:d3:73:45:48:de:e6:55:eb:49:b8:bd:
ff:de:71:aa:23:9b:77:bf:f3:9b:90:95:0d:33:75:
21:e7:97:cd:9c:ba:b9:01:b5:4a:d4:e1:4e:9a:b9:
dc:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:67:29:74:A6:FF:FE:8A:60:02:56:7B:C8:50:F0:4E:11:4F:14:F2
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS141776.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:100::/44
2a06:a005:170::/44
2a06:a005:340::/44
2a06:a005:630::-2a06:a005:64f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
74:fa:3e:3a:d5:15:e4:70:19:9f:32:54:3b:3a:13:a8:ba:f3:
51:88:90:f1:d1:56:75:d9:8f:c8:2e:28:f6:e4:d6:c2:91:83:
42:c9:78:2a:93:02:99:29:aa:5a:e5:d6:2f:99:69:c5:05:a7:
c6:32:87:4f:6f:44:45:b1:2e:90:a7:13:72:12:49:61:a1:7c:
2b:07:94:25:17:52:d3:88:fe:3c:8e:23:90:72:35:6d:c5:64:
3a:aa:f0:58:d0:9f:34:eb:46:bc:a2:fb:40:10:b7:27:4b:81:
db:65:43:f8:12:4a:3b:1f:a1:49:ca:26:9f:80:84:fc:e0:da:
43:2b:08:de:18:27:ff:d2:a0:00:ce:21:9d:b2:ed:88:38:ab:
8d:b1:99:03:e7:ce:d8:e0:59:b8:f7:5e:03:80:33:5f:b7:aa:
e3:31:1b:62:5d:1c:ae:5f:8d:63:43:e9:31:e4:23:56:63:68:
c1:e3:27:ae:41:98:e9:e4:43:23:cd:2f:a7:c3:83:c6:cc:ad:
33:27:e5:f6:b7:b3:fa:cf:ef:5e:8a:33:18:44:4b:06:c2:e3:
9d:c9:4e:e8:bd:12:e6:6a:b2:df:0a:de:91:19:56:8b:2e:86:
55:44:38:bf:18:ee:a0:fd:37:bc:1e:7e:d5:c9:e4:18:fc:d2:
b6:07:07:09
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgIUJZDlvo0977HvWxpR8gPmqCWIWvcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzk5NDM4ZjFiMTc2MmFlZWY4YTM1Y2Y0ZTZjYmFlOTc2
OTliZDAyMDAeFw0yMzEyMDUwMjM5MTZaFw0yNDEyMDMwMjQ0MTZaMDMxMTAvBgNV
BAMTKEFCNjcyOTc0QTZGRkZFOEE2MDAyNTY3QkM4NTBGMDRFMTE0RjE0RjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFA8zvoyDXKH6N+M57J715Br16
5g5q4PtA5tnvF3W48oskwCPL2/Z0+drIkg5k48Z6xwGQDp3F9a+635iViRDivh+i
G4jF1oOBHzPSPXNion6QXfb2gAfErUualQpm0tLLN0SPZ/5E9eKOH1MBwKSp0hrs
Aiowi8qlLzyNsvF4O/TaIqMyIGwztJUpCePrF1TkaZWqfi9rYvxcXC/PQND5LpMv
tZHGxaRWdDuUnedAsVqIf+/gsRgWYsRqKy+/DUnqoBcmaOjKpKi5DxqHxUiRbhWy
Nq/Tc0VI3uZV60m4vf/ecaojm3e/85uQlQ0zdSHnl82curkBtUrU4U6audxlAgMB
AAGjggIYMIICFDAdBgNVHQ4EFgQUq2cpdKb//opgAlZ7yFDwThFPFPIwHwYDVR0j
BBgwFoAUeZQ48bF2Ku74o1z05suul2mb0CAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi83OTk0MzhGMUIx
NzYyQUVFRjhBMzVDRjRFNkNCQUU5NzY5OUJEMDIwLmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZVpRNDhiRjJLdTc0bzF6MDVzdXVsMm1iMENBLmNlcjBwBggrBgEF
BQcBCwRkMGIwYAYIKwYBBQUHMAuGVHJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv
cmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5ZC8yL0FT
MTQxNzc2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEgGCCsGAQUFBwEH
AQH/BDkwNzA1BAIAAjAvAwcEKgagBQEAAwcEKgagBQFwAwcEKgagBQNAMBIDBwQq
BqAFBjADBwQqBqAFBkAwDQYJKoZIhvcNAQELBQADggEBAHT6PjrVFeRwGZ8yVDs6
E6i681GIkPHRVnXZj8guKPbk1sKRg0LJeCqTApkpqlrl1i+ZacUFp8Yyh09vREWx
LpCnE3ISSWGhfCsHlCUXUtOI/jyOI5ByNW3FZDqq8FjQnzTrRryi+0AQtydLgdtl
Q/gSSjsfoUnKJp+AhPzg2kMrCN4YJ//SoADOIZ2y7Yg4q42xmQPnztjgWbj3XgOA
M1+3quMxG2JdHK5fjWND6THkI1ZjaMHjJ65BmOnkQyPNL6fDg8bMrTMn5fa3s/rP
716KMxhESwbC453JTui9EuZqst8K3pEZVosuhlVEOL8Y7qD9N7weftXJ5Bj80rYH
Bwk=
-----END CERTIFICATE-----
Generated at Sat May 4 12:12:18 2024 by rpki-client on console-ams.rpki-client.org