Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS62390.roa
File: AS62390.roa (raw, json)
Hash identifier: TSRyHjTWX11uYL2dXfhVlXE++UkzlBdFx2Uc7g3iaoE=
Subject key identifier: 96:AC:05:CD:AF:46:CA:DD:04:8B:51:2A:E9:1A:4A:3A:CF:A9:2A:90
Certificate issuer: /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial: 70811BABDCDE799631F0551D473A7D6BEABBB6CE
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS62390.roa
Signing time: Fri 16 Feb 2024 15:25:51 +0000
ROA not before: Fri 16 Feb 2024 15:20:51 +0000
ROA not after: Fri 14 Feb 2025 15:25:51 +0000
asID: 62390
IP address blocks: 23.130.112.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:81:1b:ab:dc:de:79:96:31:f0:55:1d:47:3a:7d:6b:ea:bb:b6:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Validity
Not Before: Feb 16 15:20:51 2024 GMT
Not After : Feb 14 15:25:51 2025 GMT
Subject: CN=96AC05CDAF46CADD048B512AE91A4A3ACFA92A90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:15:04:44:56:7a:a0:94:e2:3b:ea:c2:c1:99:
cf:c4:65:39:55:28:11:b9:95:6d:49:87:c5:9e:b7:
ee:85:4a:55:f5:ff:04:1b:b2:94:03:c7:75:d6:7e:
40:fb:fd:d7:8f:03:67:cb:7c:6b:85:4e:90:da:61:
cc:d7:49:5f:d7:62:4d:90:cc:5b:9c:35:35:a9:66:
00:8d:d3:bb:bc:85:74:39:72:61:a9:9d:27:e3:c4:
ce:2e:d9:a5:99:d0:4b:e9:e5:b7:f3:ce:8d:14:4f:
2e:e5:ea:b1:12:01:7a:60:96:19:f3:89:27:e2:7a:
1f:77:e3:6e:5a:e3:75:b4:35:e1:73:92:47:cf:b9:
77:48:06:bf:92:89:16:68:b5:bb:c5:9c:5f:37:73:
2c:81:b2:a3:38:60:ee:8b:dc:35:62:ae:40:54:2c:
44:a3:e2:4d:08:db:95:81:b8:52:f4:5b:90:37:45:
49:e4:0a:d2:f3:00:36:4f:e1:8e:dd:d9:1e:6c:43:
19:27:e6:02:d9:67:d1:27:32:d3:e1:5f:4b:b3:f4:
b9:02:9d:b7:fc:2d:27:c2:4f:28:2a:6c:7d:57:a7:
4e:96:d6:1a:88:df:cd:ce:d9:30:ce:50:03:00:ae:
6b:7c:2f:09:50:ce:d9:a1:c8:1f:42:ae:d0:2b:79:
d0:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:AC:05:CD:AF:46:CA:DD:04:8B:51:2A:E9:1A:4A:3A:CF:A9:2A:90
X509v3 Authority Key Identifier:
keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS62390.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.130.112.0/24
Signature Algorithm: sha256WithRSAEncryption
95:83:6f:e1:11:32:08:80:7a:c9:be:e9:9c:a7:17:ed:aa:4b:
32:b7:d0:95:28:10:64:26:64:4a:fa:da:3f:28:f6:84:f0:67:
49:96:50:e4:69:dc:f2:c6:c2:2d:25:a1:a7:f1:92:a8:fa:21:
d3:f9:a9:bd:df:16:61:74:b5:23:c4:87:ed:68:13:8f:fb:83:
d5:64:c1:be:7c:47:37:bd:d8:8c:e8:ed:70:16:7c:ed:43:0a:
c1:c4:5e:fa:4f:1f:ea:7f:8c:d6:67:d2:8c:56:97:6f:e7:9d:
83:8e:1a:57:6d:b6:dd:3e:e7:6e:7c:e9:e2:9e:20:d6:c3:cc:
77:3e:9f:74:36:b1:89:5d:60:5b:18:ca:09:51:e6:4e:62:2d:
fe:c2:a6:8f:e9:42:3a:d8:a4:68:9e:46:4e:56:71:89:da:33:
2d:2e:76:c4:1d:e4:b0:52:5a:71:24:07:fe:d5:f0:c4:bf:21:
c0:ac:3b:0e:e8:e1:42:6c:8a:5a:2d:70:8b:31:86:01:01:cd:
93:c9:6e:91:98:93:fe:fd:ea:85:3d:9d:1a:59:4b:37:9f:a7:
12:60:8e:b5:ad:0d:e1:47:e0:0e:96:ab:33:e7:fd:17:4c:95:
d5:84:fc:36:2a:ee:19:1f:9c:5b:35:cb:82:af:fc:fb:21:8f:
d8:2a:4c:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:01:27 2025 by rpki-client