Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS200676.roa
File: AS200676.roa (raw, json)
Hash identifier: ptRoIJjYw6gLxgMc736rsYe+UOdL23fyK7ez6OsE3Fw=
Subject key identifier: 17:68:E8:AA:9B:F2:C1:8C:F5:C1:57:16:02:31:FA:BB:87:32:9B:7A
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 297A414229287DAAE610BA4F0F35CCCA49690C7B
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS200676.roa
Signing time: Thu 23 Jan 2025 22:26:33 +0000
ROA not before: Thu 23 Jan 2025 22:21:33 +0000
ROA not after: Thu 22 Jan 2026 22:26:33 +0000
asID: 200676
IP address blocks: 94.24.108.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:7a:41:42:29:28:7d:aa:e6:10:ba:4f:0f:35:cc:ca:49:69:0c:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Jan 23 22:21:33 2025 GMT
Not After : Jan 22 22:26:33 2026 GMT
Subject: CN=1768E8AA9BF2C18CF5C157160231FABB87329B7A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:44:62:a0:b9:a6:fb:78:40:91:cb:33:5d:89:
22:fd:9f:8e:7e:41:9d:61:d0:d3:1f:2a:66:0e:69:
8d:1f:e5:fb:5b:0c:89:23:00:7e:67:61:b5:db:b8:
1a:ed:0f:81:dd:72:f5:03:ba:9b:c8:42:cc:8b:ff:
f8:03:81:80:bf:93:d2:ff:5c:8a:b6:a8:9c:fe:b3:
0c:fd:9f:6e:00:34:59:ef:be:1f:5e:62:7b:98:ca:
35:90:b1:f8:0d:8f:e2:0d:e9:90:eb:e1:93:0b:7c:
40:91:b6:da:17:45:79:fd:c3:1f:17:0c:37:e8:e4:
44:e5:47:ec:91:05:84:57:f1:aa:8d:01:a2:98:cf:
b9:fd:90:df:ec:0a:aa:62:54:73:dc:54:d6:f4:c0:
48:b2:43:c1:bb:98:14:8c:70:fd:00:db:1d:38:4b:
1e:55:82:12:fd:0c:b5:83:8e:00:79:f1:5e:5e:9f:
d7:1e:f1:f1:4a:cf:f0:7e:e2:dc:46:20:fe:e2:0f:
66:a2:3b:d7:5a:cd:ba:48:f5:90:db:1a:02:c8:9e:
e1:91:37:f5:9a:e8:2a:fd:97:dd:ad:30:b8:45:f9:
69:43:14:6a:ad:0c:25:42:75:08:af:19:d9:01:45:
ea:3e:ab:d2:bd:7e:c9:f2:79:01:33:32:35:68:1a:
4f:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:68:E8:AA:9B:F2:C1:8C:F5:C1:57:16:02:31:FA:BB:87:32:9B:7A
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS200676.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.24.108.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:71:f2:f3:d3:c1:00:fa:fd:44:7e:15:f3:cd:71:3d:3e:40:
96:34:2a:d1:02:46:72:70:59:f6:ba:68:af:37:a5:21:48:0e:
f7:8d:10:05:7f:a0:7d:99:3f:d7:d2:40:f1:26:2e:91:3c:2a:
01:a1:7d:8c:23:49:06:c7:4a:64:3e:e8:1b:5d:93:f6:28:a8:
5f:cb:d9:f0:54:75:bb:57:2a:cd:91:f5:41:53:e8:38:7b:90:
44:d4:1f:86:38:59:c5:27:0b:97:fd:d7:f0:84:9c:36:91:1a:
7a:b9:c2:52:ad:ef:cb:56:e8:37:a7:07:88:f4:cf:d5:ac:0b:
af:67:db:2c:0e:18:7e:f6:39:f5:ed:14:fa:51:0c:6a:68:da:
c0:61:14:97:e6:5b:66:72:e3:59:21:a1:72:ff:51:de:ff:26:
9d:cc:28:bc:33:a1:c1:45:99:70:8b:8f:a0:c1:39:67:22:33:
be:3c:59:44:3e:50:28:6b:1b:32:02:e4:a1:3a:9f:9a:8c:36:
f5:3e:25:1b:d9:6a:72:06:e8:34:9d:12:d7:25:85:5b:b6:61:
ac:e6:61:b5:ae:50:94:ee:0c:3b:31:3b:14:f0:1a:b4:ea:6c:
fe:88:36:63:c2:e1:40:94:0c:04:7c:22:61:b3:be:b9:73:47:
9c:15:60:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 12:13:51 2025 by rpki-client