Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS150184.roa
File: AS150184.roa (raw, json)
Hash identifier: 4giJrbKIpbrFpcP8GZbg2n1LwGCraGPlfSUS4q4rcPU=
Subject key identifier: F8:2D:06:3F:54:9A:5B:3A:D3:FD:CD:0C:4A:14:B7:37:27:8A:BD:7F
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 04A88A6F8776944E0A3498A95939AB354EB9425D
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS150184.roa
Signing time: Tue 05 Nov 2024 03:40:07 +0000
ROA not before: Tue 05 Nov 2024 03:35:07 +0000
ROA not after: Tue 04 Nov 2025 03:40:07 +0000
asID: 150184
IP address blocks: 2a06:a005:5f4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 11:21:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:a8:8a:6f:87:76:94:4e:0a:34:98:a9:59:39:ab:35:4e:b9:42:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Nov 5 03:35:07 2024 GMT
Not After : Nov 4 03:40:07 2025 GMT
Subject: CN=F82D063F549A5B3AD3FDCD0C4A14B737278ABD7F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e4:79:36:37:61:26:e8:3f:90:4c:ae:25:e4:
e3:48:93:c5:8e:d7:95:97:a8:ff:53:76:8f:2f:94:
fb:af:bd:79:dd:bd:10:cf:de:53:96:f1:2a:eb:05:
a2:ad:97:ab:4c:47:fb:8e:80:ad:e0:91:a8:8d:23:
75:e8:53:23:0d:84:8e:9f:17:26:ac:a2:0c:6c:05:
36:38:cd:b6:c2:03:a0:bb:ef:a4:11:a0:ff:dc:f1:
46:b8:77:55:a1:b4:b0:db:72:8d:48:27:3b:11:00:
f0:d7:bb:48:60:87:1e:98:6a:48:c0:f5:f6:6e:96:
61:9c:b3:a8:b5:8e:a2:99:ad:7c:13:56:16:65:fb:
08:2b:fa:e5:ba:ff:02:b4:8c:26:9d:49:8c:b0:e6:
88:0c:e2:fe:42:f5:71:db:64:42:3e:23:67:f2:30:
bf:ab:5b:cb:56:33:62:20:76:f6:ab:b8:b4:53:c3:
3f:ac:b5:57:ec:7f:11:24:88:a5:d3:ac:73:91:eb:
de:c2:f2:4c:98:8e:ed:49:bf:d2:c8:9d:fd:1f:b2:
48:a9:6f:18:fd:78:33:be:cc:60:6e:2b:a8:f6:de:
04:f1:68:3d:e7:f8:6e:79:89:24:ac:65:83:ab:a3:
81:66:4d:69:89:c4:f1:40:5c:60:b8:33:79:b5:f5:
1a:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:2D:06:3F:54:9A:5B:3A:D3:FD:CD:0C:4A:14:B7:37:27:8A:BD:7F
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS150184.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:5f4::/48
Signature Algorithm: sha256WithRSAEncryption
77:32:8d:08:46:71:b9:73:86:6c:33:6a:27:3b:3d:cd:06:4e:
ee:e4:38:21:ad:35:25:16:fa:67:e7:ec:2e:4f:00:5e:d9:9e:
90:2d:e6:4e:d0:c1:96:75:7b:a5:ef:73:68:45:ce:f5:0c:2d:
fb:f9:de:63:87:9a:ce:c0:25:dd:1a:a5:ff:a7:34:84:e0:1a:
6c:39:ba:21:5d:66:4b:6b:7b:b1:a6:24:38:4c:c0:a0:45:b5:
92:5a:54:d9:5f:a7:a7:d7:28:ac:23:8e:2f:7a:2b:78:00:1f:
2d:14:5c:1a:fe:60:bb:b2:d8:15:79:7a:ee:0f:a4:77:5f:98:
e7:f9:56:91:68:cb:4c:ac:2d:d2:14:1b:a8:97:e2:e7:37:7d:
e7:f9:95:97:d7:a3:a4:ec:b4:b5:4d:51:5c:90:ca:a4:70:c8:
de:c3:f6:09:9d:ae:70:42:f4:a2:94:f0:f1:4c:bf:ef:b2:d9:
9f:ca:08:2d:29:40:62:4d:cf:72:48:27:88:73:69:c0:33:41:
e2:df:02:82:86:0c:5a:c7:7c:16:41:18:7c:a6:f8:71:71:97:
69:6e:b7:e7:23:6e:ff:e3:d0:9a:6f:9a:c5:f8:4b:5c:5e:df:
59:a5:9a:d0:12:ea:44:47:96:66:28:55:67:f6:d4:e8:a0:68:
df:cb:7b:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:11:14 2025 by rpki-client