Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS13335.roa
File: AS13335.roa (raw, json)
Hash identifier: sHWV2REuB/sX+VdGu3vN0QLBsQpHZJNPARPCG8jGYkk=
Subject key identifier: 37:42:1C:9C:B8:9B:BF:7A:91:93:1E:80:2B:EC:4B:50:EF:72:DA:91
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 63A142862F0C2B6CAB4DAF7CE20482775A50806E
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS13335.roa
Signing time: Wed 03 Apr 2024 06:13:01 +0000
ROA not before: Wed 03 Apr 2024 06:08:01 +0000
ROA not after: Wed 02 Apr 2025 06:13:01 +0000
asID: 13335
IP address blocks: 81.31.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:a1:42:86:2f:0c:2b:6c:ab:4d:af:7c:e2:04:82:77:5a:50:80:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Apr 3 06:08:01 2024 GMT
Not After : Apr 2 06:13:01 2025 GMT
Subject: CN=37421C9CB89BBF7A91931E802BEC4B50EF72DA91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:02:b4:3f:bd:d7:62:d9:bb:02:b7:df:fe:e4:
ce:ea:45:7b:6a:41:7c:e2:fd:0e:1b:a5:32:06:99:
ac:c4:ad:af:a0:de:e5:f6:8d:23:47:0d:ac:66:fe:
09:8e:93:19:16:06:16:35:af:45:4f:0b:a4:37:af:
10:89:a4:8d:df:47:14:0f:f2:f2:01:08:22:c2:73:
e3:ac:bf:38:c1:a4:02:5a:37:90:2e:96:41:ef:1d:
c7:89:9c:41:83:6b:0b:48:e8:7a:a2:46:31:41:b2:
87:2c:9e:66:1c:ff:62:0b:0c:89:b7:34:da:57:28:
cd:26:3f:7c:4f:60:a1:e4:4b:e1:72:77:16:b7:8e:
43:4e:9d:93:90:3c:1f:10:3e:84:a2:8e:6e:12:83:
8f:3c:a0:3d:fa:c9:13:d9:e5:c9:a5:86:41:29:d9:
0f:24:70:09:da:cd:b1:58:e9:bd:f8:5e:8f:92:50:
59:8f:50:b3:9f:9e:0c:21:67:2a:d4:56:0a:ef:d5:
9a:99:b6:8b:a2:f8:71:da:d1:e7:bb:e6:df:f5:a6:
21:4d:65:59:41:ef:41:32:46:6d:52:6a:b3:04:a6:
2e:a4:fa:56:6e:d0:62:3a:57:ce:38:63:df:e9:1c:
55:ab:11:d6:4a:3d:fe:98:25:b4:6a:2f:24:ff:05:
a7:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:42:1C:9C:B8:9B:BF:7A:91:93:1E:80:2B:EC:4B:50:EF:72:DA:91
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS13335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.31.212.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:c5:96:44:3c:b6:84:df:3e:6b:6a:dc:4a:75:36:2b:b9:4f:
95:5f:6a:c6:ea:2e:3b:fc:7b:bc:5e:70:cd:da:a6:44:8f:0e:
30:71:07:d5:2c:85:d8:6b:28:7f:61:6a:a1:92:2a:20:f1:7f:
e7:8e:15:2f:be:0c:cc:85:5e:17:57:7a:9a:00:44:3e:b5:86:
c3:73:b3:a9:3d:bc:ff:8d:83:e9:37:4b:66:f1:20:66:a7:44:
ed:0a:eb:df:5e:18:a2:93:70:1e:7c:17:b3:69:08:6d:e2:2b:
96:05:bd:3c:8c:6c:60:b5:81:d9:e6:32:0b:a5:b9:58:a4:05:
8d:1a:40:c2:b7:69:e5:5d:ca:ab:b8:b4:50:28:38:52:99:86:
c6:69:87:1f:da:da:27:29:3c:d3:7e:0f:96:3a:b7:63:4c:27:
63:b7:99:fa:4c:5f:e9:a7:1e:99:56:fe:29:17:dd:97:db:66:
1f:d1:8c:d5:b7:57:16:26:13:77:16:98:35:9f:af:a5:7a:9f:
97:46:8c:83:9d:cf:80:84:3a:dd:45:c0:d3:6d:1d:a9:56:f2:
48:ff:15:f8:33:d7:98:bc:b2:ce:02:3b:66:e8:02:b9:ac:00:
62:2d:4a:da:cf:83:a0:bd:09:06:30:46:fc:e9:77:83:cc:dd:
b2:1e:09:35
-----BEGIN CERTIFICATE-----
MIIE5DCCA8ygAwIBAgIUY6FChi8MK2yrTa984gSCd1pQgG4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzk5NDM4ZjFiMTc2MmFlZWY4YTM1Y2Y0ZTZjYmFlOTc2
OTliZDAyMDAeFw0yNDA0MDMwNjA4MDFaFw0yNTA0MDIwNjEzMDFaMDMxMTAvBgNV
BAMTKDM3NDIxQzlDQjg5QkJGN0E5MTkzMUU4MDJCRUM0QjUwRUY3MkRBOTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmArQ/vddi2bsCt9/+5M7qRXtq
QXzi/Q4bpTIGmazEra+g3uX2jSNHDaxm/gmOkxkWBhY1r0VPC6Q3rxCJpI3fRxQP
8vIBCCLCc+OsvzjBpAJaN5AulkHvHceJnEGDawtI6HqiRjFBsocsnmYc/2ILDIm3
NNpXKM0mP3xPYKHkS+Fydxa3jkNOnZOQPB8QPoSijm4Sg488oD36yRPZ5cmlhkEp
2Q8kcAnazbFY6b34Xo+SUFmPULOfngwhZyrUVgrv1ZqZtoui+HHa0ee75t/1piFN
ZVlB70EyRm1SarMEpi6k+lZu0GI6V844Y9/pHFWrEdZKPf6YJbRqLyT/BadFAgMB
AAGjggHuMIIB6jAdBgNVHQ4EFgQUN0IcnLibv3qRkx6AK+xLUO9y2pEwHwYDVR0j
BBgwFoAUeZQ48bF2Ku74o1z05suul2mb0CAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi83OTk0MzhGMUIx
NzYyQUVFRjhBMzVDRjRFNkNCQUU5NzY5OUJEMDIwLmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZVpRNDhiRjJLdTc0bzF6MDVzdXVsMm1iMENBLmNlcjBvBggrBgEF
BQcBCwRjMGEwXwYIKwYBBQUHMAuGU3JzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv
cmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5ZC8yL0FT
MTMzMzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBABRH9QwDQYJKoZIhvcNAQELBQADggEBALfFlkQ8toTf
Pmtq3Ep1Niu5T5VfasbqLjv8e7xecM3apkSPDjBxB9UshdhrKH9haqGSKiDxf+eO
FS++DMyFXhdXepoARD61hsNzs6k9vP+Ng+k3S2bxIGanRO0K699eGKKTcB58F7Np
CG3iK5YFvTyMbGC1gdnmMguluVikBY0aQMK3aeVdyqu4tFAoOFKZhsZphx/a2icp
PNN+D5Y6t2NMJ2O3mfpMX+mnHplW/ikX3ZfbZh/RjNW3VxYmE3cWmDWfr6V6n5dG
jIOdz4CEOt1FwNNtHalW8kj/Ffgz15i8ss4CO2boArmsAGItStrPg6C9CQYwRvzp
d4PM3bIeCTU=
-----END CERTIFICATE-----
Generated at Fri May 3 20:12:30 2024 by rpki-client on console-ams.rpki-client.org