Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS174.roa
File: AS174.roa (raw, json)
Hash identifier: 8Lvk8QH9hbr//PqWAQFeLKSqBEkmmKKB6GzxLaFIkL4=
Subject key identifier: 57:47:17:5C:FF:66:F4:4C:86:89:07:D6:66:F0:28:98:BC:0E:23:F5
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 432E0532E19C613DA3DCF974B4FF1124442D060F
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS174.roa
Signing time: Mon 30 Sep 2024 09:30:12 +0000
ROA not before: Mon 30 Sep 2024 09:25:12 +0000
ROA not after: Mon 29 Sep 2025 09:30:12 +0000
asID: 174
IP address blocks: 2a09:54c1::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 05:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:2e:05:32:e1:9c:61:3d:a3:dc:f9:74:b4:ff:11:24:44:2d:06:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Sep 30 09:25:12 2024 GMT
Not After : Sep 29 09:30:12 2025 GMT
Subject: CN=5747175CFF66F44C868907D666F02898BC0E23F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:e1:35:2f:a6:00:b8:9b:ac:fa:a0:e2:18:7a:
d1:a8:85:14:99:64:9b:26:d5:89:2f:96:f0:02:4a:
9d:46:34:c5:2f:2d:f6:fb:53:ad:a1:ea:eb:47:70:
68:ff:e6:d7:f8:63:3a:bf:17:04:8e:4f:b4:38:c2:
85:46:5e:6a:f8:8c:34:4c:0a:7c:e1:e6:f3:ec:ce:
3e:59:57:cd:9f:48:4f:20:28:21:04:ad:a2:0c:c3:
27:e4:02:c6:14:b9:35:20:e0:a7:67:e8:ec:00:8c:
10:b8:2b:d1:e4:34:ee:ac:ff:85:6b:81:6e:9a:5d:
1a:45:31:f8:b7:1f:0e:76:c8:50:d4:30:f8:04:70:
8a:6e:20:15:40:d8:b7:4e:1e:81:7f:2f:44:3d:15:
b9:b2:28:5e:70:e4:51:33:2b:5a:85:fa:c3:d5:7f:
a4:d9:b7:6d:6b:25:5c:85:00:21:1f:35:0c:28:b8:
2f:18:2d:32:78:bd:3d:17:39:74:f9:0b:c9:03:01:
7d:95:6b:68:ab:7b:19:f0:ab:58:8f:f4:49:a4:c9:
58:73:20:db:b3:4e:41:29:0c:28:09:0e:37:c7:4c:
c3:ef:94:4b:e8:5c:a1:83:0c:3a:15:61:7c:0a:4e:
f4:38:ea:29:53:9f:fd:d6:5f:8b:25:0a:00:ba:79:
af:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:47:17:5C:FF:66:F4:4C:86:89:07:D6:66:F0:28:98:BC:0E:23:F5
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS174.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:54c1::/32
Signature Algorithm: sha256WithRSAEncryption
4d:93:5e:e5:0d:a4:02:fc:52:de:e3:20:75:57:cd:07:4f:d4:
ed:d6:56:00:ad:fe:92:3d:c1:bf:8a:77:20:55:cd:98:49:7f:
d1:a3:3f:87:2b:71:c7:29:5d:cd:a7:f6:a2:08:ae:2e:bf:36:
9e:b8:c5:21:4f:93:04:07:38:0b:ae:db:0f:df:35:29:6a:48:
6f:49:97:f1:f8:1e:97:91:03:d5:b9:fc:69:ce:f8:33:b9:7d:
aa:bb:07:a5:c4:79:9f:4e:e0:f1:05:00:5f:2c:cb:1a:15:61:
44:e9:1a:cf:0e:6d:63:d6:25:28:93:9d:8e:91:c5:0d:b9:a3:
a2:1a:46:94:80:0c:4e:6a:0e:a7:06:c6:ea:94:18:4d:f2:46:
c4:cc:9a:c9:32:62:28:bd:54:c2:b8:96:1c:ea:52:d9:99:1d:
aa:33:63:2c:02:e2:4c:2b:bc:c5:a0:9d:0f:3d:04:84:f6:64:
4d:bf:29:e1:ac:92:30:59:ba:67:6f:f1:ac:57:b0:4b:4a:32:
3a:c9:ca:f8:dd:3d:d5:8d:45:33:56:95:8f:c0:cd:cb:fa:91:
d7:45:0f:1e:be:f3:a1:ac:61:0c:ac:bc:c7:d5:91:bb:14:f5:
1a:91:fa:2f:b0:a4:8b:41:a6:f3:3b:09:8d:39:cb:75:ba:9e:
c7:3a:cd:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:17:01 2025 by rpki-client