Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/AS33696.roa
File: AS33696.roa (raw, json)
Hash identifier: ZUahkSr1oNJnuMlnB9ExoO1/pZ2wRc0mciDWksklch0=
Subject key identifier: 49:4B:83:15:65:BA:B7:4E:EB:95:AF:6A:D9:60:F1:24:41:08:15:50
Certificate issuer: /CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
Certificate serial: 428410D0EF124C3BC68718507D39EF12E2884FAB
Authority key identifier: 36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/AS33696.roa
Signing time: Thu 08 Sep 2022 06:49:10 +0000
ROA not before: Thu 08 Sep 2022 06:44:10 +0000
ROA not after: Thu 07 Sep 2023 06:49:10 +0000
asID: 33696
IP address blocks: 216.122.175.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:84:10:d0:ef:12:4c:3b:c6:87:18:50:7d:39:ef:12:e2:88:4f:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
Validity
Not Before: Sep 8 06:44:10 2022 GMT
Not After : Sep 7 06:49:10 2023 GMT
Subject: CN=494B831565BAB74EEB95AF6AD960F12441081550
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:94:4f:2a:a9:42:33:d5:5b:19:be:1c:7f:62:
e5:b0:ea:36:04:b4:e3:c2:88:75:5d:07:0d:1c:6e:
97:e0:e7:03:db:ad:81:d2:33:36:32:08:07:83:ed:
89:4e:0d:05:5c:6d:84:8c:36:c5:47:45:65:b3:c6:
92:9f:b3:ef:b0:3e:81:f2:39:5e:0d:90:dd:70:fc:
95:8d:3f:88:5b:2e:73:77:e4:fe:32:e8:70:af:03:
9b:86:ca:be:5d:f0:f8:f6:47:eb:7d:53:ea:af:d1:
a4:7d:2d:5f:31:82:ac:41:f6:ab:64:ba:6e:09:ef:
18:96:00:9a:28:d1:d6:0e:8b:17:a8:df:e2:b7:4d:
2f:20:f6:55:73:dc:8c:d0:32:94:2f:07:99:48:67:
f8:c7:0a:f5:5a:7d:bd:f3:b5:da:94:26:41:60:a0:
c5:a8:05:a6:96:37:c1:2d:05:bc:92:83:1c:f4:70:
66:aa:24:fd:78:79:2a:70:23:88:01:bd:97:1f:c1:
09:eb:8b:a8:36:ba:28:45:d9:a1:57:3f:97:3e:ab:
57:d2:7b:21:3c:49:98:7a:ac:44:66:ea:44:7e:2c:
0e:55:d6:59:e5:0d:62:a6:b3:7a:30:47:29:93:6d:
c4:ff:a4:53:b5:c7:68:2e:a0:2b:18:30:f3:34:45:
57:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:4B:83:15:65:BA:B7:4E:EB:95:AF:6A:D9:60:F1:24:41:08:15:50
X509v3 Authority Key Identifier:
keyid:36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/36586C309028073CA6EAD3688E3D889308736587.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/AS33696.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.122.175.0/24
Signature Algorithm: sha256WithRSAEncryption
48:14:55:c8:ee:d8:96:b6:a0:e4:5e:cf:c1:ac:ff:97:2a:49:
d8:e1:20:f1:dd:1b:41:67:ff:fb:2c:a5:91:6c:da:cd:44:45:
0a:32:a0:51:21:c1:70:a4:63:ea:6b:87:9e:2a:cb:f0:5c:47:
07:74:81:1f:c4:06:ca:06:b6:56:0f:ea:de:37:96:3c:97:06:
92:c0:bc:b0:5e:bf:d2:5f:46:34:bd:7d:d3:bf:aa:53:cb:cc:
f0:e2:d6:3a:38:f5:fb:6b:af:1f:fd:18:82:86:2b:bd:1f:84:
de:3e:ba:ce:de:8f:24:72:ce:3b:a0:84:9f:a5:45:92:be:58:
83:03:b3:cf:91:a6:e5:29:9b:aa:73:f0:d8:ff:cc:34:80:34:
e3:30:ac:56:4d:33:a3:97:aa:9c:92:ff:dd:b0:31:6b:29:7f:
cf:b5:aa:25:95:e5:0b:17:b1:5c:fb:0a:91:fe:f7:a9:2e:a5:
02:6c:9a:b1:cb:d0:81:bd:3b:4c:0a:62:c0:13:ae:7b:64:27:
c3:85:8e:0c:48:d9:f9:ae:c0:c0:3f:8d:78:1d:f2:9f:4e:f1:
59:29:87:00:b0:a6:38:2a:5f:8e:6c:fd:f4:f4:f3:46:be:6e:
9a:aa:b9:05:93:e3:8e:00:65:c0:81:09:88:9c:57:c0:66:6a:
e7:8a:4a:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:02 2024 by rpki-client on console-fra.rpki-client.org