Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS150915.roa
File: AS150915.roa (raw, json)
Hash identifier: ZxoAvMbncz72f/GPaioT/mYFOrzV4LTbzaQhmiUnHsU=
Subject key identifier: 22:12:69:42:EB:31:DD:25:52:0C:B5:68:AB:D4:27:BE:06:5D:37:DD
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 0D1693AB434FBFC615CB5D3D273E5E69FA3F2B41
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS150915.roa
Signing time: Fri 02 Feb 2024 05:44:24 +0000
ROA not before: Fri 02 Feb 2024 05:39:24 +0000
ROA not after: Fri 31 Jan 2025 05:44:24 +0000
asID: 150915
IP address blocks: 2a06:a005:1878::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 14:41:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:16:93:ab:43:4f:bf:c6:15:cb:5d:3d:27:3e:5e:69:fa:3f:2b:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Feb 2 05:39:24 2024 GMT
Not After : Jan 31 05:44:24 2025 GMT
Subject: CN=22126942EB31DD25520CB568ABD427BE065D37DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:b6:a2:37:96:d3:90:8f:cc:95:74:92:d0:88:
1f:9e:b6:1d:00:4a:a4:e0:93:44:12:97:7c:90:0f:
21:08:c2:cc:8d:80:e8:4a:d8:fe:9d:aa:f7:7a:69:
c2:55:4c:6b:79:4f:83:1b:06:a2:fe:75:78:99:7f:
92:c1:b5:b1:0c:21:0e:bb:cb:72:7f:a6:12:44:65:
a9:a8:ac:ba:58:10:8a:d5:31:d6:79:7b:f4:85:5f:
bb:f5:32:18:5f:14:90:2e:72:11:04:34:eb:75:0f:
ad:0b:ed:b5:8c:39:e7:58:54:3e:d1:51:d1:75:e7:
08:03:48:f5:06:6b:95:65:52:49:99:0d:bc:e7:86:
1e:0b:0c:20:1a:21:63:e3:09:d6:3f:e4:76:4b:9a:
33:29:75:55:98:65:2f:ef:d0:84:59:73:c6:f6:af:
dc:d9:65:d7:19:78:a1:2a:19:a6:f7:6f:09:f9:45:
8a:b6:ea:1a:77:54:c9:dc:ff:cf:b1:7b:1f:54:db:
29:1f:e6:a0:44:00:80:e5:35:d3:6c:99:c7:63:28:
ab:13:02:b0:eb:2e:df:79:b3:0b:91:c5:3f:ed:6b:
1c:25:b4:6b:9f:f2:d5:72:77:59:3f:c6:77:47:d7:
09:2b:5b:28:08:19:79:1b:e5:ad:dd:2b:39:ad:fb:
ed:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:12:69:42:EB:31:DD:25:52:0C:B5:68:AB:D4:27:BE:06:5D:37:DD
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS150915.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1878::/48
Signature Algorithm: sha256WithRSAEncryption
35:d5:ba:d2:4d:6e:d7:8c:73:94:fd:31:98:f2:0b:09:dd:49:
b9:6c:69:b5:05:7e:10:fc:4a:e5:3d:3b:97:ed:c2:a8:9e:68:
5f:f6:60:7e:fa:07:74:4f:3e:d7:6e:f9:e8:f6:74:3f:b1:5b:
8f:f7:13:23:fa:89:87:ae:e0:95:4a:1e:a3:11:5c:35:2e:d2:
2e:1c:31:e5:af:c6:e8:e0:73:bc:48:35:b9:2d:a6:6e:5c:c4:
22:4d:8e:16:53:f1:a6:99:1a:1f:6c:9e:18:57:0e:35:a4:05:
b9:c9:db:f4:cd:e9:92:28:b5:3f:87:b7:66:f8:c7:01:17:a4:
1c:62:68:c4:18:94:7c:e5:68:95:ba:82:1f:37:80:73:32:78:
84:46:ea:dd:4d:9e:fe:d8:d9:8c:15:4a:9c:70:06:c3:61:2b:
a7:1d:0b:fa:be:c7:70:97:8a:22:28:eb:e1:5a:c5:61:41:0c:
f3:78:53:7a:e1:59:21:5b:09:77:71:d3:b0:ab:a8:a0:cc:fc:
5b:1f:ec:be:68:ab:65:75:bc:6b:21:02:26:16:0a:53:8f:cf:
a5:99:01:e3:0e:93:ee:ff:f6:75:7d:cc:2f:72:39:ad:aa:62:
48:2a:9d:4e:9c:be:13:b4:5e:0d:28:7a:66:02:23:6a:18:a1:
fd:aa:09:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 20:32:55 2024 by rpki-client on console-fra.rpki-client.org