Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS215274.roa
File: AS215274.roa (raw, json)
Hash identifier: okO1hfjjpmRbyhYw0Ahz1RjPz9K79W9DWphI8b0PKT8=
Subject key identifier: 7E:E9:C5:B9:93:EA:A5:3B:32:B3:60:7B:8D:CD:61:38:8B:9F:E0:7A
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 7FB85F64A6F3CAEA6812D6E54982ABF70054F2
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS215274.roa
Signing time: Thu 09 May 2024 18:38:50 +0000
ROA not before: Thu 09 May 2024 18:33:50 +0000
ROA not after: Thu 08 May 2025 18:38:50 +0000
asID: 215274
IP address blocks: 195.184.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Jun 2024 04:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:b8:5f:64:a6:f3:ca:ea:68:12:d6:e5:49:82:ab:f7:00:54:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: May 9 18:33:50 2024 GMT
Not After : May 8 18:38:50 2025 GMT
Subject: CN=7EE9C5B993EAA53B32B3607B8DCD61388B9FE07A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:cc:48:e4:2f:d2:3f:a3:b8:10:f0:90:9d:1d:
09:b8:9a:2a:1f:5a:a6:46:69:70:4d:49:23:81:61:
73:81:c7:ed:01:e7:58:f2:45:28:6b:80:a7:32:6d:
28:91:71:c1:36:f1:ee:55:d5:35:3f:b9:5b:c7:bf:
82:6c:57:c5:28:79:6d:bb:8e:76:78:55:1d:35:90:
16:cb:24:81:b8:5c:72:de:07:ad:40:c9:af:96:a2:
55:0a:b0:5b:88:4c:66:8c:93:20:06:bc:bd:3b:97:
51:f9:06:5f:b0:59:77:d7:77:30:e7:31:a3:6f:e8:
68:ed:ac:12:6d:b4:2e:98:53:d6:61:b2:ad:82:bf:
80:e8:3a:1d:2b:2c:aa:c8:d1:5d:96:94:71:1a:dd:
c6:13:00:76:d3:67:05:d7:ef:fa:e2:64:0b:d7:c2:
44:29:28:9d:7d:82:50:21:07:b4:07:c2:4b:48:15:
19:50:db:ca:b2:77:a0:cf:b9:55:b0:5b:3a:f6:05:
fd:91:cf:58:b2:96:4d:81:d8:ae:f1:61:26:65:51:
e8:2d:e3:a0:f0:72:eb:f5:7c:ec:84:8c:23:2e:e0:
f0:34:74:33:97:c6:39:0a:0a:d6:68:49:54:c7:cc:
a8:98:41:81:6b:25:00:2a:24:e7:5d:d4:b8:3a:91:
25:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:E9:C5:B9:93:EA:A5:3B:32:B3:60:7B:8D:CD:61:38:8B:9F:E0:7A
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS215274.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.184.246.0/24
Signature Algorithm: sha256WithRSAEncryption
43:ef:db:50:cf:aa:8b:96:71:47:4d:c4:fd:0a:d0:c4:de:00:
e4:7f:88:b2:e5:4a:30:fd:94:69:77:fc:50:f1:f3:37:19:cd:
7f:4c:42:c8:14:61:c9:18:7e:8a:cf:ab:33:c0:61:b8:9f:6f:
d9:6d:1b:a9:48:40:82:71:f1:fd:c3:0e:52:73:de:25:ec:d7:
c5:62:46:ad:e8:5f:d5:90:60:0a:c3:ac:44:b7:76:5b:61:c5:
d9:42:c1:61:4e:f4:8a:32:a2:15:22:95:0d:ee:50:8d:87:af:
02:4e:8c:77:89:d5:56:a8:0a:e3:3d:85:f3:76:7f:83:f3:44:
77:15:f9:e1:55:73:6f:30:0a:67:57:04:55:13:e3:14:2d:52:
85:c3:3f:3f:d3:d7:c9:8b:f6:cc:f8:8c:3c:54:b8:36:b8:64:
9d:1d:ad:4f:b5:6c:23:7c:7f:00:8d:d8:fa:0f:07:80:3d:0f:
8c:38:82:ac:7f:33:93:30:f8:1d:25:d7:4d:34:44:c1:7d:b9:
4b:c8:16:1a:6c:0f:9b:f2:f6:09:c9:14:4f:32:d4:90:ef:37:
ae:04:2f:04:10:59:52:04:94:69:24:99:eb:1e:a1:00:c9:34:
ef:05:24:b4:2b:3f:14:d7:5e:25:94:e6:dd:5a:69:53:2f:a4:
7d:23:e8:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 12:46:26 2024 by rpki-client on console-ams.rpki-client.org