Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/3137362e35382e39342e302f32342d3234203d3e203336323336.roa
File: 3137362e35382e39342e302f32342d3234203d3e203336323336.roa (raw, json)
Hash identifier: ohDV9Z7cud0DqCsCGhJTdNcRRdyW42oOV8gInLJXqoY=
Subject key identifier: 49:E3:DF:26:52:98:61:DC:B9:18:EF:EE:DE:AB:CF:89:28:7D:D2:7A
Certificate issuer: /CN=eb2c7e62503b0634eb4ab53f88c06950ac76dcd1
Certificate serial: 1C2A375E57E6784BB653919B7D584A329CAFF1F4
Authority key identifier: EB:2C:7E:62:50:3B:06:34:EB:4A:B5:3F:88:C0:69:50:AC:76:DC:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/3137362e35382e39342e302f32342d3234203d3e203336323336.roa
Signing time: Mon 02 Sep 2024 23:13:14 +0000
ROA not before: Mon 02 Sep 2024 23:08:14 +0000
ROA not after: Mon 01 Sep 2025 23:13:14 +0000
asID: 36236
IP address blocks: 176.58.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.crl
rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.mft
rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:2a:37:5e:57:e6:78:4b:b6:53:91:9b:7d:58:4a:32:9c:af:f1:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb2c7e62503b0634eb4ab53f88c06950ac76dcd1
Validity
Not Before: Sep 2 23:08:14 2024 GMT
Not After : Sep 1 23:13:14 2025 GMT
Subject: CN=49E3DF26529861DCB918EFEEDEABCF89287DD27A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:70:d4:1c:9f:5a:11:e6:28:56:8d:38:4f:98:
5d:83:a4:4c:47:c5:ab:13:65:f0:b9:ff:0f:d4:7b:
23:e8:cc:d7:f4:8b:ce:9a:ba:2b:87:bb:15:fb:43:
0e:f7:c2:62:a2:f4:d3:df:95:55:a9:35:f3:67:64:
55:9c:7d:8d:6c:43:11:a3:c8:67:10:39:2e:65:a1:
ab:da:1b:c1:68:c4:35:a6:92:0e:db:3b:76:bb:ff:
10:7b:bb:fb:85:4d:1f:96:5b:6d:22:ff:02:7f:ac:
ad:32:9e:4e:8b:50:c4:03:3a:f7:c6:31:4c:7f:af:
64:07:0d:22:ec:67:9c:52:b5:3f:3d:84:39:69:0c:
11:98:2d:90:38:eb:12:9c:c6:8b:a7:ff:83:57:1b:
e0:50:a0:16:51:42:50:39:96:46:c7:be:56:c3:fb:
a2:03:73:09:5f:a0:9e:8d:d3:07:b5:e1:1a:39:98:
f0:3d:cf:50:8c:e4:9b:b5:9c:a0:a5:a6:03:ce:64:
b8:c6:28:25:61:72:1e:7f:6a:6c:43:ee:73:2a:59:
1e:49:60:d5:e4:74:7c:24:5c:38:66:d1:82:b4:02:
12:13:74:d8:07:a5:3a:a9:48:d5:87:e2:0d:78:18:
5d:cb:4e:3a:f5:a1:35:fe:e0:54:17:04:be:85:34:
c1:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:E3:DF:26:52:98:61:DC:B9:18:EF:EE:DE:AB:CF:89:28:7D:D2:7A
X509v3 Authority Key Identifier:
keyid:EB:2C:7E:62:50:3B:06:34:EB:4A:B5:3F:88:C0:69:50:AC:76:DC:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/3137362e35382e39342e302f32342d3234203d3e203336323336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.58.94.0/24
Signature Algorithm: sha256WithRSAEncryption
23:34:97:a1:d0:6b:49:a7:6e:9d:2a:03:45:d5:3f:c0:66:df:
4f:77:61:a1:62:3a:c5:9f:2d:d0:5f:e2:d9:54:be:96:f8:7a:
7d:0b:15:8f:7a:d2:45:da:e4:74:27:12:fc:28:c3:48:2d:9b:
51:79:1f:dc:7f:a1:5d:c5:63:4f:d1:ca:f6:50:35:a1:11:b2:
d2:c8:32:9d:3f:f8:85:81:da:e0:6a:4f:a4:f7:2e:ef:e8:ac:
a1:e7:1a:3f:91:7f:0f:e7:16:7d:93:11:da:ee:a3:c7:37:62:
1c:ff:31:73:69:a3:53:e4:1c:19:70:95:24:1a:a5:9d:e1:5c:
0d:72:b5:0f:7e:be:56:f3:38:8d:d6:f8:d5:4f:e7:16:84:77:
e9:69:78:2b:e5:e1:b1:f0:be:99:41:15:b9:0c:d4:69:4d:05:
c7:a5:95:3c:d6:8e:50:50:94:54:80:56:ab:09:c8:46:c9:fc:
a2:c4:2a:f1:a4:06:a0:2e:c3:de:96:ae:ff:9b:32:29:73:6d:
20:38:6c:3c:d1:b1:4a:11:dd:8d:c1:4b:99:6d:e2:34:89:6e:
0b:90:01:9b:c5:65:8e:9c:98:03:0b:d4:42:37:6a:1d:f2:6e:
e8:96:73:5c:3a:3f:a4:66:87:b5:d8:e6:be:cf:4d:d8:b2:15:
7f:bf:59:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:33:36 2024 by rpki-client on console-ams.rpki-client.org