Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS142164.roa
File: AS142164.roa (raw, json)
Hash identifier: OYd88LAtqMDIw5y4F3jKDyRU4wOsgczOgKhvqSTAEBQ=
Subject key identifier: 85:AD:94:23:6C:DA:5D:41:16:EE:69:55:62:8B:C8:03:CE:31:A5:89
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 68192FB1755CD53B0435CF1279555A59DA52F06F
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS142164.roa
Signing time: Fri 13 Dec 2024 02:56:29 +0000
ROA not before: Fri 13 Dec 2024 02:51:29 +0000
ROA not after: Fri 12 Dec 2025 02:56:29 +0000
asID: 142164
IP address blocks: 2a06:a005:e80::/44 maxlen: 48
2a06:a005:e90::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 09:24:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:19:2f:b1:75:5c:d5:3b:04:35:cf:12:79:55:5a:59:da:52:f0:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Dec 13 02:51:29 2024 GMT
Not After : Dec 12 02:56:29 2025 GMT
Subject: CN=85AD94236CDA5D4116EE6955628BC803CE31A589
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:46:21:fb:b3:f2:05:39:7c:cf:7b:6c:8f:15:
c6:13:ec:0c:5e:64:f8:84:c0:05:b1:ef:3c:3e:ba:
52:92:6b:32:cb:87:eb:13:c9:78:37:8e:67:36:ae:
d1:56:37:c7:16:d7:e4:c5:24:39:55:67:9a:d4:eb:
ca:69:c9:50:a8:36:88:fd:73:f8:de:69:98:52:e8:
38:87:eb:85:8f:df:b9:4d:25:20:15:9c:6d:cf:be:
ff:1d:f4:0c:01:29:16:19:26:11:bb:9c:20:76:46:
9a:91:4c:e0:38:57:19:58:61:83:b5:82:d6:9e:32:
0b:3c:bb:f5:a3:15:62:8f:30:63:0d:5d:30:f2:e1:
12:38:5d:8a:4a:88:32:f9:6b:5f:d1:c6:7d:1c:d0:
2a:52:31:e1:c2:0c:f8:d2:b4:0a:20:43:17:45:59:
1c:6e:d6:94:a9:8a:02:34:da:d5:d3:08:5b:52:ec:
9c:4f:94:79:af:73:29:b8:86:f9:f6:4d:21:7b:9d:
ec:ba:01:a6:4e:2f:98:26:d1:9f:ca:cd:d6:73:a7:
f1:fe:f4:58:c4:3b:b1:75:db:8a:fa:46:be:e6:75:
37:db:e0:5b:12:d7:2d:e1:a4:cc:62:f2:5f:7b:38:
fd:24:25:4b:25:59:63:1e:20:7c:cc:00:35:e6:c5:
2d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:AD:94:23:6C:DA:5D:41:16:EE:69:55:62:8B:C8:03:CE:31:A5:89
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS142164.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:e80::/43
Signature Algorithm: sha256WithRSAEncryption
0d:ae:78:2d:02:dd:f0:16:54:0e:86:ab:15:01:e4:1a:68:fc:
2d:ab:dc:9f:b3:03:c7:45:61:e9:cb:71:c7:02:81:0c:43:3b:
12:9d:26:46:43:5a:96:b1:26:b4:25:a5:b8:d8:b1:c0:14:7b:
49:0c:ab:c5:ba:6e:39:40:ec:ae:a6:92:cb:62:20:fe:e4:54:
56:72:c6:b4:0b:9e:1b:5d:c5:5d:c0:47:95:c5:c0:ad:22:f4:
a1:1b:37:76:a5:30:21:4d:69:2f:f0:b1:06:18:88:47:b2:f6:
ad:2f:a1:be:4c:20:32:16:47:eb:56:d7:a0:b9:d9:80:5f:ba:
f1:f5:f4:b9:53:4f:4a:98:d8:c7:d7:f7:84:2b:94:42:b6:84:
3f:9d:c6:29:f9:07:86:5e:96:b6:83:20:a2:7e:45:7d:56:11:
40:3e:db:c2:80:48:dc:f7:6f:76:b2:3b:8d:c9:e4:1c:d0:ab:
14:f9:e7:fc:9e:87:71:ff:a5:8e:fb:15:d3:ce:95:11:24:b8:
00:df:36:78:5b:9b:6d:60:c2:16:e6:82:c3:2b:65:3a:75:df:
21:bd:a6:4f:1c:26:5f:1d:ae:81:0b:02:a7:d9:9b:77:ba:33:
01:44:5d:19:5f:04:a6:88:b5:9f:b6:f1:58:bd:01:68:e6:7b:
77:06:9d:3e
-----BEGIN CERTIFICATE-----
MIIE6DCCA9CgAwIBAgIUaBkvsXVc1TsENc8SeVVaWdpS8G8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzk5NDM4ZjFiMTc2MmFlZWY4YTM1Y2Y0ZTZjYmFlOTc2
OTliZDAyMDAeFw0yNDEyMTMwMjUxMjlaFw0yNTEyMTIwMjU2MjlaMDMxMTAvBgNV
BAMTKDg1QUQ5NDIzNkNEQTVENDExNkVFNjk1NTYyOEJDODAzQ0UzMUE1ODkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMRiH7s/IFOXzPe2yPFcYT7Axe
ZPiEwAWx7zw+ulKSazLLh+sTyXg3jmc2rtFWN8cW1+TFJDlVZ5rU68ppyVCoNoj9
c/jeaZhS6DiH64WP37lNJSAVnG3Pvv8d9AwBKRYZJhG7nCB2RpqRTOA4VxlYYYO1
gtaeMgs8u/WjFWKPMGMNXTDy4RI4XYpKiDL5a1/Rxn0c0CpSMeHCDPjStAogQxdF
WRxu1pSpigI02tXTCFtS7JxPlHmvcym4hvn2TSF7ney6AaZOL5gm0Z/KzdZzp/H+
9FjEO7F124r6Rr7mdTfb4FsS1y3hpMxi8l97OP0kJUslWWMeIHzMADXmxS0ZAgMB
AAGjggHyMIIB7jAdBgNVHQ4EFgQUha2UI2zaXUEW7mlVYovIA84xpYkwHwYDVR0j
BBgwFoAUeZQ48bF2Ku74o1z05suul2mb0CAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi83OTk0MzhGMUIx
NzYyQUVFRjhBMzVDRjRFNkNCQUU5NzY5OUJEMDIwLmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZVpRNDhiRjJLdTc0bzF6MDVzdXVsMm1iMENBLmNlcjBwBggrBgEF
BQcBCwRkMGIwYAYIKwYBBQUHMAuGVHJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv
cmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5ZC8yL0FT
MTQyMTY0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEH
AQH/BBMwETAPBAIAAjAJAwcFKgagBQ6AMA0GCSqGSIb3DQEBCwUAA4IBAQANrngt
At3wFlQOhqsVAeQaaPwtq9yfswPHRWHpy3HHAoEMQzsSnSZGQ1qWsSa0JaW42LHA
FHtJDKvFum45QOyuppLLYiD+5FRWcsa0C54bXcVdwEeVxcCtIvShGzd2pTAhTWkv
8LEGGIhHsvatL6G+TCAyFkfrVtegudmAX7rx9fS5U09KmNjH1/eEK5RCtoQ/ncYp
+QeGXpa2gyCifkV9VhFAPtvCgEjc9292sjuNyeQc0KsU+ef8nodx/6WO+xXTzpUR
JLgA3zZ4W5ttYMIW5oLDK2U6dd8hvaZPHCZfHa6BCwKn2Zt3ujMBRF0ZXwSmiLWf
tvFYvQFo5nt3Bp0+
-----END CERTIFICATE-----
Generated at Fri Apr 4 17:41:26 2025 by rpki-client