Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS207487.roa
File: AS207487.roa (raw, json)
Hash identifier: VYG39ajG3ffkmexs8MDta+6PtOcsLHouByWMaXoVZto=
Subject key identifier: A7:82:A2:46:DD:39:CF:B4:4C:22:F9:C0:61:B4:66:8A:EF:91:96:8D
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 2E20F71AC34A54E8A92DB57C8F265F940868A6FD
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS207487.roa
Signing time: Sat 16 Mar 2024 08:30:27 +0000
ROA not before: Sat 16 Mar 2024 08:25:27 +0000
ROA not after: Sat 15 Mar 2025 08:30:27 +0000
asID: 207487
IP address blocks: 94.26.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:20:f7:1a:c3:4a:54:e8:a9:2d:b5:7c:8f:26:5f:94:08:68:a6:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Mar 16 08:25:27 2024 GMT
Not After : Mar 15 08:30:27 2025 GMT
Subject: CN=A782A246DD39CFB44C22F9C061B4668AEF91968D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:93:db:6b:91:9c:b6:56:e8:44:19:53:ff:c5:
84:b8:c3:07:41:e3:03:0a:78:05:e9:6b:61:06:cf:
c9:35:aa:65:63:37:88:ad:10:39:28:45:cf:a6:4b:
69:9b:29:64:d8:d7:8c:f2:9d:88:15:f3:46:3c:9e:
a5:21:65:0f:bd:7c:b9:80:4e:2e:3d:61:6b:3d:d9:
27:85:42:17:6d:c3:3a:d6:12:4f:d9:8d:81:49:63:
4b:72:0b:80:f3:a8:69:d0:d5:61:95:c3:b2:6d:3b:
88:28:c8:f2:68:9d:dc:dc:ae:88:b8:8d:fd:64:58:
da:c8:3a:31:0c:92:08:14:0f:cb:5e:58:98:e2:b3:
be:b6:f1:82:19:29:3c:18:34:bf:83:44:3c:7f:d6:
64:36:8f:35:84:00:1c:65:08:5a:15:70:42:47:50:
2e:f1:ee:5c:e4:ed:c8:4e:21:52:57:86:15:28:60:
d2:48:5e:b5:33:f5:7f:e7:f6:48:c2:43:68:53:c2:
aa:80:2a:83:8a:54:80:5c:a8:46:0e:41:e2:c5:4f:
2e:81:4a:70:bc:0d:f5:f7:b4:1b:d6:40:6a:7e:33:
c1:60:c3:76:04:d8:fb:69:71:23:73:c3:06:b0:e7:
1c:62:54:19:84:a3:49:a2:36:10:1c:a6:64:d3:f2:
0d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:82:A2:46:DD:39:CF:B4:4C:22:F9:C0:61:B4:66:8A:EF:91:96:8D
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS207487.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.26.24.0/24
Signature Algorithm: sha256WithRSAEncryption
30:70:e4:1d:78:c7:22:49:8b:4b:2e:83:45:5d:c4:28:6c:fe:
00:c6:23:90:06:5b:65:20:28:c9:8c:88:24:a6:98:d2:81:b7:
79:63:c6:9b:af:9c:de:e4:99:2c:c6:ee:05:77:7e:76:9a:88:
c0:3a:e1:5f:1e:36:9f:7c:35:d0:30:fd:e1:67:68:69:8c:16:
38:32:c7:a0:7f:07:f4:e1:8b:e3:29:7e:f6:64:b3:73:2a:79:
38:5a:b6:16:8a:31:fe:1b:4c:75:66:88:05:7a:ec:41:65:80:
16:a9:8a:81:90:ad:f0:0d:d0:fe:32:d2:f7:77:d9:59:fe:ac:
32:05:1f:fa:95:59:71:75:06:ae:2e:7d:b5:d0:38:ce:6f:57:
0c:74:6f:8d:59:14:35:9f:18:ff:8a:f2:27:ae:af:db:a9:a0:
92:b4:ea:3a:ce:13:af:07:ad:ab:1e:ee:0b:b1:fa:51:ce:21:
dc:d6:ca:60:e8:c3:6a:2f:af:36:6b:ff:8d:22:73:23:dc:60:
87:85:84:e6:8e:9a:2d:fd:bc:57:66:bb:f5:5a:e7:98:6a:f5:
e8:c7:ec:8e:fc:24:6d:ec:7c:b4:fc:07:c5:71:12:da:ea:c9:
3a:ff:5d:23:d0:23:cc:23:3a:74:8e:7c:e4:29:b1:8d:33:de:
d1:5e:d1:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 12:13:12 2024 by rpki-client on console-fra.rpki-client.org