Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS214323.roa
File: AS214323.roa (raw, json)
Hash identifier: VCX8iEPQ34vRVXxy9gntLn81OA8fF5eEA5zy3F9RfWk=
Subject key identifier: 05:9B:BE:E8:73:D2:29:51:9E:31:FC:74:72:51:85:07:8F:84:F1:77
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 4FEA9826BC7E5E4E8EF5E35811DDA6E7734BBEF6
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS214323.roa
Signing time: Mon 23 Sep 2024 20:35:09 +0000
ROA not before: Mon 23 Sep 2024 20:30:09 +0000
ROA not after: Mon 22 Sep 2025 20:35:09 +0000
asID: 214323
IP address blocks: 194.58.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:ea:98:26:bc:7e:5e:4e:8e:f5:e3:58:11:dd:a6:e7:73:4b:be:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Sep 23 20:30:09 2024 GMT
Not After : Sep 22 20:35:09 2025 GMT
Subject: CN=059BBEE873D229519E31FC74725185078F84F177
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:5c:13:af:02:92:4a:de:e1:8f:a2:aa:6a:2f:
05:58:b5:11:eb:d4:20:f5:1d:93:19:d9:7d:91:a4:
67:5f:9d:75:f5:3d:04:6f:b0:a1:55:25:8a:f8:1d:
16:f6:48:7b:bc:88:7b:1c:a1:e4:80:a3:03:36:1e:
10:20:35:a9:a0:8c:b2:6a:98:90:15:01:0d:71:10:
96:9c:3f:c4:ec:c8:33:47:9b:52:25:6e:dc:cf:c3:
c8:90:42:d3:40:73:c7:b7:64:d4:b3:bd:67:04:5d:
63:64:ef:29:67:1b:58:52:96:8d:74:bd:a6:87:8c:
9b:7b:93:de:10:0e:59:89:ee:20:1a:e7:f4:e2:20:
09:a4:2f:62:f8:a9:8f:a2:05:93:31:c9:85:94:fa:
a3:a2:56:43:eb:69:18:8f:0a:4e:34:f0:d5:11:6f:
7f:7e:a7:e3:f6:ec:b3:24:14:fc:13:c3:22:ac:75:
04:c9:f9:f9:bb:dc:a7:19:b6:a0:f1:fd:f2:57:0f:
e3:20:45:3f:6c:ae:b9:4c:89:fd:06:cf:f3:13:3e:
23:b9:5a:5e:21:12:13:0d:f9:33:8e:ec:27:ea:a8:
5e:d2:16:d0:a2:0e:33:59:6c:0e:8b:d2:a5:3e:1f:
00:a6:a1:27:a3:9e:c9:b3:03:fd:06:74:88:1f:73:
97:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:9B:BE:E8:73:D2:29:51:9E:31:FC:74:72:51:85:07:8F:84:F1:77
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS214323.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.58.64.0/24
Signature Algorithm: sha256WithRSAEncryption
01:97:5b:d6:9f:01:20:dc:37:62:93:00:0d:18:88:ae:0c:53:
99:5f:df:50:72:7f:a8:40:84:4a:d9:1b:bf:79:0d:04:7d:83:
02:2e:a1:02:b6:1a:8c:ec:e4:91:6a:60:29:71:76:ea:45:c5:
77:4c:a7:7e:c0:02:2d:09:0b:b5:50:d4:15:a8:7a:8c:fd:c1:
4a:5b:31:e5:26:ff:ef:ea:2a:37:bc:a2:b1:15:69:82:90:af:
27:ca:c2:bd:62:f8:a4:06:e8:d4:2c:b8:da:19:47:c3:0d:38:
e0:ac:dc:30:ac:e4:d6:4b:c5:a2:df:77:93:28:9f:cc:69:34:
0c:b9:af:97:49:87:14:fc:f0:0f:e6:45:e7:57:e9:83:e2:99:
b6:64:f6:ee:57:52:e5:07:c6:69:7b:ea:ad:dd:e2:74:bc:47:
85:f5:50:c7:24:97:47:de:f8:a2:4a:ba:83:fd:33:23:e4:da:
ed:67:07:3d:10:39:ea:d6:97:a2:69:b0:31:bd:77:a0:dc:38:
8b:28:0e:52:a6:4d:59:2b:36:a6:19:96:02:a7:a9:17:8d:fb:
2c:ab:04:c4:14:75:a9:7e:0b:74:42:ec:57:5f:25:37:0b:50:
7d:03:cb:22:b6:72:c1:a8:98:83:0d:8c:54:a5:b7:af:da:f0:
95:aa:ad:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:13:37 2024 by rpki-client on console-fra.rpki-client.org