Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS13335.roa
File: AS13335.roa (raw, json)
Hash identifier: LdYR1FfZuJM8Z8L9Cs98sczmfhn+D7vlox1E8v4QusU=
Subject key identifier: 22:88:9E:8B:3E:EF:81:FD:99:41:69:5C:1B:77:95:58:88:A6:FA:CA
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 23F5608136D879BDDE0A3010BCDEA6967F25AAFF
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS13335.roa
Signing time: Wed 05 Mar 2025 06:40:18 +0000
ROA not before: Wed 05 Mar 2025 06:35:18 +0000
ROA not after: Wed 04 Mar 2026 06:40:18 +0000
asID: 13335
IP address blocks: 81.31.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 15:28:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:f5:60:81:36:d8:79:bd:de:0a:30:10:bc:de:a6:96:7f:25:aa:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Mar 5 06:35:18 2025 GMT
Not After : Mar 4 06:40:18 2026 GMT
Subject: CN=22889E8B3EEF81FD9941695C1B77955888A6FACA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:eb:e2:b2:73:ad:1a:38:6d:5b:19:88:2f:23:
42:06:8f:22:11:79:d1:73:98:3c:2a:47:c3:0d:74:
e7:c2:7c:51:79:14:96:bf:44:f8:60:c5:b0:ff:14:
d2:33:2c:22:45:10:d5:7c:d3:61:85:9d:d4:28:d7:
77:01:66:a7:4a:50:4c:b3:1a:7c:4e:87:60:79:63:
35:bd:02:7c:82:91:ad:71:73:1f:04:26:52:1a:07:
6c:ba:30:09:ac:ef:02:33:12:ed:8a:67:81:ab:90:
78:cc:5b:82:99:ff:54:13:3c:49:5c:0b:e7:90:40:
d5:6d:52:75:22:22:53:56:ac:9c:e2:c1:cc:d6:50:
41:e5:34:3e:0e:44:be:aa:4e:f3:1f:8f:d8:72:88:
23:80:59:d4:56:32:2f:af:ff:db:95:6a:69:81:e1:
26:37:08:ac:df:2b:79:bc:0d:63:65:12:a1:4a:15:
35:94:bf:a8:92:d8:da:76:a7:46:ae:39:b7:71:9d:
90:a1:6d:34:57:fc:92:6a:4b:fe:2c:a5:eb:0e:19:
41:1d:30:6b:89:09:5e:7a:c7:e6:14:ae:de:20:80:
38:7b:5c:5b:48:04:5a:11:15:86:23:25:53:ec:12:
5a:07:1a:0f:0f:13:ba:25:21:34:ca:c0:ed:6a:91:
4a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:88:9E:8B:3E:EF:81:FD:99:41:69:5C:1B:77:95:58:88:A6:FA:CA
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS13335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.31.212.0/24
Signature Algorithm: sha256WithRSAEncryption
71:fa:1d:f6:e5:47:8e:6f:c6:52:11:ab:10:fa:11:e1:e8:dd:
9d:ad:15:38:aa:20:81:fd:1f:4d:13:e3:47:42:1e:d0:93:e9:
1e:4e:89:ec:f3:b0:ea:09:82:c5:7f:15:ba:b2:54:d4:d0:18:
22:c6:9f:d5:1f:42:9a:e9:47:6f:d2:6a:ea:84:ed:22:68:ff:
65:53:43:f8:ab:93:5b:42:9b:ac:4f:d2:de:cd:38:75:ee:85:
03:5e:9b:0e:93:5d:38:b5:82:2f:49:be:2f:c9:a3:0a:55:2b:
f3:34:23:0f:d8:35:c1:de:ed:4a:c7:6a:6c:c0:cc:f4:9d:0a:
02:5f:c6:a5:09:f3:fd:77:6c:aa:b4:7a:1a:a6:69:88:33:07:
ae:f7:bd:60:a0:f7:f1:1e:64:c7:a7:31:c2:8c:c2:f2:87:38:
13:99:f1:98:41:bf:8d:b2:c6:23:cf:1f:b9:55:b0:a8:44:ba:
e6:cf:01:1b:36:af:19:c9:ec:57:76:3b:21:7d:21:df:18:b4:
e8:29:3a:c7:35:ac:c1:6c:c2:6e:a8:c0:06:18:5d:79:6d:11:
57:58:f5:c1:bb:bc:da:6f:14:f2:66:29:5f:8f:0f:d1:17:35:
15:e1:8a:d7:a1:f3:1b:7f:d1:61:99:31:54:bd:23:af:20:53:
00:25:a8:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 01:47:35 2025 by rpki-client