Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS6145.roa
File: AS6145.roa (raw, json)
Hash identifier: 4qsO5lQNCWx3EtolVZZClp8LvkdJQFlTTLFdX4zylOE=
Subject key identifier: 43:26:F2:C1:8E:B2:40:8B:7E:14:B4:9D:E1:63:12:10:0C:08:23:F4
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 715F9505AD4CAA52CC3C7871EBB05D606AB28F6E
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS6145.roa
Signing time: Tue 05 Nov 2024 03:40:05 +0000
ROA not before: Tue 05 Nov 2024 03:35:05 +0000
ROA not after: Tue 04 Nov 2025 03:40:05 +0000
asID: 6145
IP address blocks: 2a06:a005:1500::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:5f:95:05:ad:4c:aa:52:cc:3c:78:71:eb:b0:5d:60:6a:b2:8f:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Nov 5 03:35:05 2024 GMT
Not After : Nov 4 03:40:05 2025 GMT
Subject: CN=4326F2C18EB2408B7E14B49DE16312100C0823F4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:9f:43:31:15:75:85:d6:34:2c:9f:6d:6e:82:
1c:34:19:1d:bf:03:b7:89:da:9f:34:fa:f5:5c:9e:
25:3f:01:b1:e0:f6:54:c7:3f:c2:f7:74:a5:e6:4f:
94:12:52:b8:d8:98:61:a5:d6:85:b9:31:c8:98:f6:
75:95:95:fd:45:3b:b5:1d:a7:dd:9b:08:69:39:52:
c8:c0:4c:94:6a:84:00:0f:cb:27:bd:1b:c4:d4:ac:
08:f5:9b:a0:15:04:e1:f6:1e:6e:41:cf:66:c4:93:
fc:6a:72:e2:3a:d6:a1:f2:05:99:7c:a8:1b:c7:da:
11:d9:b8:c9:83:38:2f:b7:9b:89:df:c9:24:6f:9a:
07:78:f6:ad:5a:e8:6b:f5:14:05:8e:bc:f7:47:bb:
91:62:66:d0:ca:2b:d5:13:8b:9f:9f:2d:e3:76:2c:
21:03:c2:60:74:c4:42:52:ab:2f:24:02:62:16:98:
06:69:4a:f1:aa:fc:1b:93:28:d3:11:f3:d9:09:b0:
23:b4:5b:61:a0:6b:22:64:18:30:41:83:32:58:a2:
41:58:9a:8e:f8:0b:18:3d:12:b4:be:a0:1a:eb:1b:
e8:e4:d9:95:6f:a4:f1:90:18:d0:4d:47:5b:b2:5e:
e8:dd:8a:f9:20:61:a5:be:bb:1d:15:8b:80:3b:ca:
f5:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:26:F2:C1:8E:B2:40:8B:7E:14:B4:9D:E1:63:12:10:0C:08:23:F4
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS6145.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1500::/48
Signature Algorithm: sha256WithRSAEncryption
2e:a8:1f:4f:b2:3f:90:f2:99:28:e5:c0:7a:7d:21:20:5d:d7:
92:dd:2f:91:e0:9a:ca:10:16:47:50:c4:44:8a:ac:cb:ac:45:
b5:3f:49:9c:f1:f9:b7:2a:ae:17:92:c8:8b:98:cf:ae:e4:62:
23:a1:46:b7:2b:a6:13:ed:36:94:52:d1:58:93:1a:a9:7d:2f:
de:01:0a:b8:ab:04:5b:aa:84:68:f5:0c:25:7b:7f:bb:24:21:
00:26:cc:2b:7d:a7:c9:7f:2b:f7:88:9d:d5:e4:10:d6:26:b4:
ef:d4:50:cb:8a:dc:34:5b:4c:e8:15:81:db:34:a6:6f:2f:c3:
8b:2b:85:da:f0:0a:b2:f2:2a:19:69:8c:8d:36:ae:69:9c:33:
b3:e3:f4:38:3f:f3:44:ce:12:fc:d4:0e:6d:a8:8e:a1:02:54:
f3:b4:c4:c4:f6:8a:aa:fb:17:15:15:de:d2:35:32:a8:56:0a:
f8:10:8a:08:8b:13:b2:d3:38:b7:0d:a9:e9:f5:24:46:cf:2c:
a2:69:7a:9a:96:8e:b0:31:95:54:4a:b0:20:89:e7:42:dd:a4:
8d:3e:f1:ca:74:26:ea:5e:4a:2d:b6:92:ae:8d:c5:07:79:2b:
20:ed:b4:a0:95:55:2b:ad:eb:f9:f6:2c:7b:46:dd:7c:62:45:
f4:75:49:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 22:04:25 2024 by rpki-client on console-fra.rpki-client.org