Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS13768.roa
File: AS13768.roa (raw, json)
Hash identifier: aPTnUehwfy5d4WkiByQb2xfYCqkMncAYgrsqoJ5Wktk=
Subject key identifier: 58:DA:98:9B:4B:F7:22:ED:4C:FC:95:AA:3E:40:36:E6:A2:9E:37:AC
Certificate issuer: /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial: 3C343D9F56ACAC1F292A5AFFF9FC8D6DB404B762
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS13768.roa
Signing time: Sat 27 Apr 2024 13:01:15 +0000
ROA not before: Sat 27 Apr 2024 12:56:15 +0000
ROA not after: Sat 26 Apr 2025 13:01:15 +0000
asID: 13768
IP address blocks: 75.102.24.0/23 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:34:3d:9f:56:ac:ac:1f:29:2a:5a:ff:f9:fc:8d:6d:b4:04:b7:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Validity
Not Before: Apr 27 12:56:15 2024 GMT
Not After : Apr 26 13:01:15 2025 GMT
Subject: CN=58DA989B4BF722ED4CFC95AA3E4036E6A29E37AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9f:ce:c6:f3:0e:25:2e:bd:25:a4:6f:f1:8d:
19:0c:36:c4:6d:ac:e8:1a:01:ae:80:03:45:f2:4f:
2f:1c:fd:0a:c7:f1:41:57:fe:8f:cd:fb:bd:fe:52:
33:c5:2c:d0:52:51:77:6f:5c:5a:12:85:b6:53:3f:
72:5d:b3:c9:a9:33:8b:27:4a:23:e7:37:5d:fc:1e:
7e:88:4d:a4:c8:92:e5:25:0e:9b:91:37:43:b6:8b:
de:98:47:17:cb:d7:79:3b:ea:cd:a9:03:0a:70:87:
d3:0e:e7:4f:d0:3a:19:89:de:38:75:d4:3f:59:7b:
ab:3e:48:14:7a:fa:53:90:c9:c7:ed:2d:2e:cc:a4:
be:8e:7a:a0:15:61:ba:2d:59:88:5c:fa:6c:f7:44:
05:b0:d0:b1:f3:c1:2e:0e:b1:49:ee:db:f3:28:b9:
c2:ba:78:44:a6:67:57:83:46:32:40:8c:1f:d0:63:
1b:b5:1e:06:98:59:b9:79:87:67:16:28:01:c0:73:
6f:25:1b:e4:c7:e2:46:5e:15:e4:ea:f3:d5:a3:6e:
eb:95:21:58:a8:14:28:df:33:04:00:b0:15:0a:c7:
41:ea:bd:07:18:f4:3e:29:f6:59:63:cb:ac:41:60:
07:e3:0a:5b:1f:ac:fc:8f:c7:8d:42:e7:a0:b2:04:
19:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:DA:98:9B:4B:F7:22:ED:4C:FC:95:AA:3E:40:36:E6:A2:9E:37:AC
X509v3 Authority Key Identifier:
keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS13768.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
75.102.24.0/23
Signature Algorithm: sha256WithRSAEncryption
7c:5a:57:55:89:0a:e0:ca:9f:06:91:b3:be:13:80:6b:5c:c1:
47:a5:24:fb:be:a5:ba:f1:4f:cb:ac:e9:5a:62:26:37:03:cb:
b5:0c:c3:fb:1e:df:5f:86:4b:22:77:ef:4b:63:94:13:f3:17:
3b:7e:32:f9:4d:ad:df:d7:9d:3a:b2:4b:45:07:24:ac:20:16:
72:de:ba:5b:4f:7d:1a:91:b1:49:8a:0c:b3:66:9e:a5:22:03:
c0:e8:6c:1e:fe:6d:4d:38:31:17:30:8b:73:76:1e:b1:5f:f1:
f8:fc:f7:be:c9:ee:4e:bd:52:b8:d1:5b:dd:04:04:63:7b:9b:
08:25:99:00:31:2a:01:d0:a4:7f:af:c1:3b:27:08:8c:17:8b:
b2:d4:63:dc:96:38:2d:48:38:a4:6c:36:ac:0d:5b:a2:af:5c:
f9:cc:92:87:f3:7a:6b:5d:72:ae:00:f4:63:05:62:48:68:a5:
7b:ca:0e:74:58:ae:9c:f7:96:da:e4:8e:83:30:1d:72:5a:53:
5a:45:d6:ee:68:07:a9:f1:da:f8:c6:5a:3d:f2:72:3a:73:fe:
c8:3d:b4:dd:ac:f6:ee:0a:ac:ae:1d:13:14:59:41:b0:25:23:
76:09:f4:5e:f3:97:47:a8:cb:01:45:3f:3e:0c:d3:38:9f:16:
36:74:bf:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 15 20:45:04 2024 by rpki-client on console-ams.rpki-client.org