Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS148996.roa
File: AS148996.roa (raw, json)
Hash identifier: CFaBx0VXCM1G/dM4Lwt9UdM2qB1tcYQ7rLWz7Q8k03E=
Subject key identifier: 5A:71:86:D9:05:11:20:FC:75:AF:4F:DB:12:D5:D5:05:21:E0:97:1A
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 36E8BCA29AE8C26CA5B5C6202109178A4661C55E
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS148996.roa
Signing time: Tue 05 Nov 2024 03:40:10 +0000
ROA not before: Tue 05 Nov 2024 03:35:10 +0000
ROA not after: Tue 04 Nov 2025 03:40:10 +0000
asID: 148996
IP address blocks: 2a06:a005:60::/44 maxlen: 48
2a06:a005:70::/44 maxlen: 48
2a06:a005:2e0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:e8:bc:a2:9a:e8:c2:6c:a5:b5:c6:20:21:09:17:8a:46:61:c5:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Nov 5 03:35:10 2024 GMT
Not After : Nov 4 03:40:10 2025 GMT
Subject: CN=5A7186D9051120FC75AF4FDB12D5D50521E0971A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c1:38:bf:a2:4a:d6:7d:88:d3:7c:1b:41:4c:
3d:b5:ab:d8:7a:ef:4c:a6:62:0c:2b:1e:94:73:4e:
aa:7e:55:b8:a2:7b:30:ee:de:f2:69:69:5f:77:c5:
b1:9e:f9:c1:f6:52:f0:94:e5:4f:f5:45:05:b4:06:
15:2d:c0:08:29:bc:a8:cc:41:96:fc:c7:05:de:90:
c8:bf:56:a0:52:cd:c4:8f:35:2c:4a:84:5e:76:04:
05:c8:fc:99:02:de:61:93:5c:fa:44:fd:58:27:bc:
be:d4:d3:cb:ac:5a:fb:a3:96:58:0c:7f:6e:4a:ea:
5f:9f:ce:11:be:14:5b:eb:02:3c:ea:e4:1d:dd:b9:
81:ed:fb:c4:8b:62:f0:de:28:04:e7:0c:42:54:f8:
8b:6d:c2:97:20:04:86:77:61:7c:a5:3b:a8:43:03:
ea:c3:66:d6:ae:82:5f:bd:2b:da:35:cf:39:fe:9e:
f6:b8:71:64:d2:e6:37:b4:f8:d1:d5:c3:84:ef:56:
d0:8f:7f:11:da:31:1f:6c:48:0c:9b:a6:38:48:9c:
02:79:cf:e2:08:55:b8:b6:8c:b6:08:77:7c:c1:5b:
06:e3:b8:cd:f1:75:43:1c:56:dd:1e:fb:a7:52:90:
5b:5a:f6:ef:ef:8f:09:5f:3f:dd:a6:78:e5:fb:30:
79:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:71:86:D9:05:11:20:FC:75:AF:4F:DB:12:D5:D5:05:21:E0:97:1A
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS148996.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:60::/43
2a06:a005:2e0::/44
Signature Algorithm: sha256WithRSAEncryption
b4:12:7d:3a:0b:a4:20:24:e6:41:c2:11:fb:04:e0:ae:e6:c7:
8e:1a:46:4e:5e:f8:9c:18:ce:c5:06:85:93:5a:2b:4e:c3:15:
a2:8f:54:64:8f:05:6f:48:c2:51:7d:a1:1d:16:bd:64:f2:ef:
98:94:7c:ea:b1:69:8c:0b:a8:5e:31:44:a0:50:2d:35:9d:50:
8d:cd:48:c1:14:a1:d7:43:fe:60:ee:88:0b:cb:f7:d3:8d:79:
ec:de:21:04:8e:fc:7a:ba:e9:64:27:5f:3b:82:e2:6e:e7:fc:
72:b5:7f:ac:45:73:16:0f:3d:29:06:fa:db:e2:56:05:0a:35:
1b:bb:13:d5:c5:36:15:b6:e6:15:69:aa:11:af:0e:ef:0b:fd:
c6:8d:94:39:ba:b7:2d:21:d7:b1:9b:04:07:ab:c7:bc:b8:f0:
b1:a6:7b:71:46:50:4c:88:53:80:c1:04:84:81:21:9b:63:12:
b7:3f:4b:20:27:c4:03:32:7e:ed:35:53:e6:20:df:ef:76:2e:
33:cc:eb:ba:9d:10:b8:73:fe:4d:b2:1b:d0:1d:20:d7:7b:f3:
9d:d2:e6:19:2e:d2:a8:5f:38:7e:10:94:97:bb:5d:35:d9:5e:
fe:43:01:35:f9:13:36:cc:a2:7f:d7:2b:b0:7e:96:0f:14:2d:
bd:b1:44:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:13:34 2024 by rpki-client on console-fra.rpki-client.org