Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS150184.roa
File: AS150184.roa (raw, json)
Hash identifier: Vo1s/57UvUAbHSGNNuS1UaFWv5CVIbctDQoqzwLAvwI=
Subject key identifier: EF:0C:22:FA:7F:07:30:37:03:FC:FA:F2:12:45:7E:D7:09:38:31:80
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 6291596B3A658F38D7DE0B1D7F6A7FCD2C997EAD
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS150184.roa
Signing time: Tue 05 Dec 2023 02:44:14 +0000
ROA not before: Tue 05 Dec 2023 02:39:14 +0000
ROA not after: Tue 03 Dec 2024 02:44:14 +0000
asID: 150184
IP address blocks: 2a06:a005:5f4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 14:41:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:91:59:6b:3a:65:8f:38:d7:de:0b:1d:7f:6a:7f:cd:2c:99:7e:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Dec 5 02:39:14 2023 GMT
Not After : Dec 3 02:44:14 2024 GMT
Subject: CN=EF0C22FA7F07303703FCFAF212457ED709383180
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:e3:ab:e3:ea:52:12:46:94:98:47:ad:bf:42:
c0:60:57:b8:35:c5:24:0f:67:6f:b7:bc:1c:be:c2:
0d:f3:dd:c1:21:c4:67:e4:0e:60:55:f7:a8:f0:06:
53:52:2b:e7:34:33:c5:f0:be:45:2e:e3:a4:7a:44:
3f:eb:4f:7d:ed:ea:0a:ab:43:a7:db:ec:f8:0b:56:
f3:13:9d:50:b4:a3:e2:79:2e:d0:18:a1:dc:68:54:
79:f8:78:2a:a9:66:c7:af:98:f9:64:2e:ec:85:f6:
8c:4e:47:96:12:ba:a3:2d:5e:c4:a3:cd:63:b2:d2:
35:87:b9:1a:23:39:67:c0:dd:1a:98:eb:95:33:7c:
88:7d:22:d1:ce:f2:bb:26:ad:33:e2:55:67:11:9f:
d2:e3:8d:2d:df:36:ba:a6:67:f0:83:c9:7c:b5:7f:
33:bf:22:d9:b5:2e:b6:67:a1:d1:5c:0a:ec:d6:b0:
af:80:38:c2:a4:90:16:ae:28:6d:7d:9d:88:6f:63:
fd:5c:73:ac:bd:6c:32:bf:5b:be:89:6c:76:a4:37:
a0:9d:64:8f:dd:52:7d:2d:51:07:fe:6f:c5:0a:36:
33:c3:4c:72:17:e0:08:78:72:8f:50:77:fb:de:a5:
15:04:aa:ab:f1:98:1f:87:14:74:af:c2:91:9f:81:
0c:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:0C:22:FA:7F:07:30:37:03:FC:FA:F2:12:45:7E:D7:09:38:31:80
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS150184.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:5f4::/48
Signature Algorithm: sha256WithRSAEncryption
aa:97:9a:d2:ca:62:1f:ed:77:46:4f:67:54:d2:c8:80:1b:91:
4e:e9:c6:d6:ea:19:f5:9b:6a:5a:da:d9:78:27:f7:36:a4:b1:
7f:c6:9d:02:8c:03:d7:40:60:bb:91:8a:fc:2d:4e:58:03:05:
e1:9c:b2:ed:30:2b:54:6d:70:62:07:98:0b:91:64:5b:66:a9:
9b:93:0a:b3:32:7b:7b:93:16:13:f4:f3:78:a8:c3:5a:69:34:
d7:75:f1:94:d1:54:e5:e9:88:ec:e8:2c:18:34:82:fc:94:1a:
5c:bf:82:60:28:78:e7:0e:76:8f:75:d7:d4:30:45:e7:67:9e:
26:ee:e4:d1:74:e6:f6:a3:f4:ce:46:34:4b:a1:67:a8:33:8e:
d9:3a:30:28:6f:95:7b:59:ba:1b:45:bf:b8:19:93:76:b8:84:
d4:ba:98:2e:50:a7:3e:71:a2:88:67:35:3e:d9:f4:48:4a:42:
93:3f:46:f2:38:f1:2d:33:1a:cf:40:f6:3c:e9:e3:93:31:bd:
46:2f:cb:e3:84:bf:d2:a0:ad:e8:f7:5b:4f:0c:e6:13:3e:0e:
6f:06:be:ce:06:74:a5:9a:52:2d:ea:c4:78:be:b3:c3:1a:37:
e5:e6:13:44:ed:ea:2c:e1:b3:22:4c:dd:dd:d8:0f:d0:e8:7e:
12:7c:58:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 20:32:55 2024 by rpki-client on console-fra.rpki-client.org