Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS7018.roa
File: AS7018.roa (raw, json)
Hash identifier: 4nq377p77w1UdGMHVE8ylRI0/SDwP7wS5KgIBLnLrbk=
Subject key identifier: 16:B1:69:C6:C0:C5:C1:CD:96:29:5C:36:11:78:58:C5:48:30:29:EC
Certificate issuer: /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial: 4F3C97F0ED074A6A28ACF38D4D7A11EA4425DEE3
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS7018.roa
Signing time: Tue 12 Nov 2024 07:41:51 +0000
ROA not before: Tue 12 Nov 2024 07:36:51 +0000
ROA not after: Tue 11 Nov 2025 07:41:51 +0000
asID: 7018
IP address blocks: 66.225.255.0/24 maxlen: 24
75.102.6.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:3c:97:f0:ed:07:4a:6a:28:ac:f3:8d:4d:7a:11:ea:44:25:de:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Validity
Not Before: Nov 12 07:36:51 2024 GMT
Not After : Nov 11 07:41:51 2025 GMT
Subject: CN=16B169C6C0C5C1CD96295C36117858C5483029EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:eb:62:28:18:d6:3b:f9:5b:4f:ca:81:5f:94:
a5:54:90:54:13:f2:eb:19:a2:0f:7c:24:47:be:fc:
8b:6d:e8:31:c3:75:fb:43:3b:72:0c:32:77:66:9d:
13:6a:7d:5e:1e:77:9b:b5:db:ab:c1:63:42:f7:f3:
1d:28:a0:f8:03:05:d6:30:b1:41:ba:c4:8a:d5:b7:
75:00:cf:a1:5d:0b:1d:ea:1c:8d:44:3d:e8:cf:f8:
ba:bf:b0:21:18:98:5f:61:b8:4b:85:0d:29:7c:5d:
56:b3:a0:0c:31:77:ea:69:3e:4f:d4:62:62:b4:f3:
08:1c:8c:53:d3:74:24:0a:08:36:51:4c:76:18:3c:
92:08:e0:d2:d3:29:58:d7:15:10:2b:bf:52:e9:72:
36:0b:46:d1:70:d2:a5:e2:56:95:2d:0c:8f:99:8e:
fe:cb:48:37:2c:0e:a5:2f:2c:60:c2:7e:9e:20:0b:
61:1b:0d:31:05:3a:9d:d5:3f:cd:02:d7:08:da:f7:
9b:a9:0e:37:21:11:da:39:93:59:01:30:34:ed:6d:
e5:32:e5:83:fe:61:58:ea:22:f9:c6:8e:4f:a3:b4:
22:30:bc:c1:52:2d:2e:15:11:e7:55:c3:4c:0d:50:
49:ce:2b:3f:38:a3:72:f0:55:4d:9e:29:d7:16:57:
33:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:B1:69:C6:C0:C5:C1:CD:96:29:5C:36:11:78:58:C5:48:30:29:EC
X509v3 Authority Key Identifier:
keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS7018.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
66.225.255.0/24
75.102.6.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:00:ac:07:a5:1a:75:09:8d:7f:a7:c2:55:6f:86:5f:d4:2b:
cd:d0:14:45:ce:02:dc:4f:ab:1d:d5:5e:64:24:da:6c:3c:0f:
59:b3:3a:7b:de:3a:0f:ea:70:9d:34:58:16:22:d4:5f:fe:c2:
a8:03:91:48:f2:4a:03:ff:f4:cd:f5:19:4c:a2:59:a6:77:5c:
a5:98:6b:90:d5:aa:55:12:1e:b1:b9:72:ee:0a:95:a3:8b:02:
97:9c:ae:b2:ff:8b:6c:1c:a0:f9:4a:d8:d4:3b:5c:f0:88:a8:
8a:3e:d8:f1:fc:58:80:be:3d:d3:db:07:a5:e3:0e:47:75:ed:
d3:9e:33:38:43:0a:27:34:af:d3:e7:30:3e:be:9a:4e:eb:ee:
79:b2:21:c2:51:64:70:d6:66:52:30:da:2c:bc:2a:40:d6:c7:
80:f1:99:9d:7d:e6:76:8c:46:b7:ef:26:61:65:f9:07:43:df:
96:92:27:d0:4a:aa:07:a5:4c:9c:42:65:74:fb:65:b5:09:bb:
98:47:03:03:ce:61:e7:2f:23:59:83:b9:db:36:94:47:f1:15:
08:e8:98:7a:e7:d3:6d:47:97:1d:c1:f9:be:75:7a:cf:a5:63:
8d:22:5c:20:ab:5a:4f:81:49:5d:40:5f:00:d6:99:85:c2:7f:
c3:19:c6:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 15 19:49:50 2024 by rpki-client on console-fra.rpki-client.org