Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS210152.roa
File: AS210152.roa (raw, json)
Hash identifier: cOg8/mvPz+0+G+P/gmjLnWDBIZbpBFIxnjX25NVJVCw=
Subject key identifier: 99:60:A9:E7:0F:CB:68:8D:97:7C:90:60:1D:F0:8D:44:C3:EA:60:E1
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 631AB14E48DF4B10AED16200F2ED5C02A86F8BF3
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS210152.roa
Signing time: Tue 26 Nov 2024 20:40:12 +0000
ROA not before: Tue 26 Nov 2024 20:35:12 +0000
ROA not after: Tue 25 Nov 2025 20:40:12 +0000
asID: 210152
IP address blocks: 185.147.35.0/24 maxlen: 24
2a06:a005:1290::/44 maxlen: 48
2a06:a005:17f0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:1a:b1:4e:48:df:4b:10:ae:d1:62:00:f2:ed:5c:02:a8:6f:8b:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Nov 26 20:35:12 2024 GMT
Not After : Nov 25 20:40:12 2025 GMT
Subject: CN=9960A9E70FCB688D977C90601DF08D44C3EA60E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:24:29:9d:63:47:c0:1f:c4:bd:e0:df:44:0d:
ef:01:9d:b3:7d:47:f8:9b:bc:ed:ab:dc:3e:4b:7d:
c8:32:80:2d:88:4e:af:34:3b:bd:6d:37:6c:cf:d5:
7a:bf:89:04:0c:eb:95:91:b3:98:f3:9b:17:91:75:
d6:96:1c:40:21:95:2c:9c:2d:d7:58:06:ef:68:f4:
f4:cc:c8:6d:58:b1:53:c5:fc:1f:b6:1f:c3:74:7d:
bb:0a:91:9e:95:9c:d8:02:a4:e0:45:80:0e:e6:59:
b1:c2:1a:e8:77:4a:34:c4:d3:39:72:ba:97:ba:f5:
3c:21:eb:3b:13:d9:07:7c:9b:2c:c2:0e:93:a1:31:
d9:52:86:6b:51:07:2e:29:ad:99:55:02:d1:3a:58:
e6:c5:df:aa:3e:0e:44:67:60:0c:dc:92:39:7e:a0:
5e:0a:62:e5:95:67:ab:9b:ae:8f:ea:4a:fa:c4:be:
4d:08:01:27:a9:bc:50:9d:4c:ce:5b:9d:dc:06:da:
33:dc:7d:77:ee:7e:40:33:50:fb:7e:5e:d5:04:9f:
ca:9e:ec:76:c5:80:c3:24:69:f9:4e:4c:e0:50:9e:
4d:21:73:0b:f7:ac:40:cc:24:4a:cd:f4:85:17:df:
f5:7e:05:4d:f0:44:2a:28:00:7e:ff:f6:c5:d4:56:
4f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:60:A9:E7:0F:CB:68:8D:97:7C:90:60:1D:F0:8D:44:C3:EA:60:E1
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS210152.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.147.35.0/24
IPv6:
2a06:a005:1290::/44
2a06:a005:17f0::/44
Signature Algorithm: sha256WithRSAEncryption
bd:99:30:fc:0e:37:b7:49:ba:32:7e:e1:0d:e1:fa:01:05:57:
44:3f:17:8f:07:d0:af:9a:b2:c5:2b:57:fe:ca:cc:55:58:2e:
5a:7d:0a:72:f3:6d:21:0c:a0:9b:ad:29:cc:b4:5a:26:3c:6b:
32:0c:ae:81:21:d5:ba:2a:84:9a:f2:ab:ad:b7:49:36:f7:08:
64:cc:a4:bc:93:9b:e9:cc:06:43:8d:97:f3:8a:30:48:d2:ca:
3f:c9:be:fb:2c:4b:96:30:5d:aa:ef:ec:0b:44:14:65:78:04:
55:15:0a:c6:35:82:db:90:e3:61:82:c2:d1:fd:ea:9a:eb:85:
59:08:7e:d2:2c:62:6f:eb:25:23:70:0a:1a:c3:dd:d3:45:f6:
36:f1:32:20:5d:9d:0b:ea:49:2b:86:96:60:32:6b:cf:30:eb:
f7:ac:db:c4:54:62:d6:d1:cb:20:72:eb:a6:55:3b:bd:66:91:
1b:c6:f9:d1:ef:a8:03:6e:de:ec:80:6e:1d:48:c1:dd:68:e7:
4e:70:7c:89:b8:42:1d:d0:1c:e3:9c:37:cc:b3:48:ec:15:f8:
1e:b6:e1:90:93:40:68:9d:6b:b4:87:16:5c:08:55:3c:7a:b0:
06:03:eb:ec:ec:08:11:d6:95:a7:8d:db:57:5b:ed:40:e8:c2:
41:2b:57:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:41:18 2025 by rpki-client