Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS142419.roa
File: AS142419.roa (raw, json)
Hash identifier: Yi9ET5BV2OFIxSHV1ykk8bQ6482LenHQGnljXjYIlLE=
Subject key identifier: 3A:37:C7:58:07:FD:8E:97:D0:A6:6A:43:15:BE:43:53:25:0C:5A:79
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 0EB411A1D2E57587AC6627EF5D75AB1BB68012CB
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS142419.roa
Signing time: Tue 05 Dec 2023 02:44:15 +0000
ROA not before: Tue 05 Dec 2023 02:39:15 +0000
ROA not after: Tue 03 Dec 2024 02:44:15 +0000
asID: 142419
IP address blocks: 2a06:a005:1c10::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:b4:11:a1:d2:e5:75:87:ac:66:27:ef:5d:75:ab:1b:b6:80:12:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Dec 5 02:39:15 2023 GMT
Not After : Dec 3 02:44:15 2024 GMT
Subject: CN=3A37C75807FD8E97D0A66A4315BE4353250C5A79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:39:15:23:d2:5a:dd:53:3a:7b:4e:82:36:59:
09:3a:56:b8:dc:76:19:ac:53:c5:f1:48:7a:d4:e0:
36:27:50:08:03:bd:37:ef:a0:49:13:f9:c0:be:c8:
9e:b1:f0:a0:a4:9d:ab:44:62:7f:47:3e:ac:bb:ac:
a6:5f:aa:56:81:e6:ee:fb:a4:01:03:ea:dc:12:cf:
0a:bb:a3:72:81:1a:cf:1f:92:43:81:27:cf:78:b3:
ee:81:33:40:eb:16:03:b9:80:90:1c:78:7b:78:cf:
62:4f:81:58:11:9f:d6:f4:e0:ba:a1:c1:45:8c:68:
bb:c3:1a:8d:eb:44:b1:29:27:23:3b:42:3e:11:89:
c8:0b:9c:b0:3e:48:fa:54:ab:d7:b5:cf:88:0a:ac:
97:9f:ca:47:84:16:0f:08:6d:47:f9:d8:b6:41:17:
b7:57:66:76:20:64:93:ca:c2:3a:4c:23:0d:9d:71:
44:47:f3:d1:6c:25:73:60:8a:f0:99:46:16:7e:26:
ee:19:72:73:0d:51:1e:10:be:de:f1:2a:77:d0:b3:
fa:2f:1f:e4:81:96:23:7e:bc:58:58:f6:45:49:ef:
4d:f3:5d:50:9e:a2:41:a4:9a:d3:ec:b1:6f:67:17:
e4:65:22:47:ff:20:17:c3:e1:2d:35:66:1b:c8:03:
f2:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:37:C7:58:07:FD:8E:97:D0:A6:6A:43:15:BE:43:53:25:0C:5A:79
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS142419.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1c10::/44
Signature Algorithm: sha256WithRSAEncryption
50:88:4e:0d:e4:d6:35:bd:6e:4c:e4:30:5c:94:4f:69:1f:78:
65:50:e4:a7:65:4a:44:8d:7b:33:e7:a7:28:21:97:f9:41:a4:
d6:88:60:db:b7:7b:ef:2d:01:97:4d:de:58:8a:a3:84:c5:16:
7c:e8:11:90:a4:ac:a8:c9:d0:00:6d:8e:09:c8:79:74:a9:d2:
38:b2:4d:1b:9f:f3:82:0a:7d:e5:1a:31:e3:d4:20:e5:8d:61:
8a:30:22:f1:b4:0f:7f:f8:71:6f:e7:04:2f:85:6e:80:5a:42:
6e:b0:71:dc:82:9e:78:00:0c:59:d6:a0:12:34:6b:d9:6d:08:
f1:7f:83:83:6f:28:67:67:60:97:30:79:5d:fb:46:bb:d7:38:
d6:95:05:dc:50:d1:4e:1d:f5:b8:1f:eb:26:a0:e0:05:ed:1b:
c9:46:af:16:05:16:f3:a6:91:3f:53:e0:e8:40:df:3c:1e:b3:
e7:8d:c9:8c:35:db:f1:2a:26:ab:82:5b:d3:9d:77:a3:d2:49:
2a:d2:36:07:2f:32:be:ef:a1:c9:30:69:b4:ff:ea:15:27:69:
28:d9:29:b5:87:78:98:b2:d0:c8:1f:5c:44:e7:b6:6e:e6:e3:
93:f4:22:0d:30:3c:0a:f3:79:07:6b:f4:50:26:24:bf:4f:d9:
55:41:40:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 12:12:18 2024 by rpki-client on console-ams.rpki-client.org