Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS214710.roa
File: AS214710.roa (raw, json)
Hash identifier: 0ICtA534iDr3GHv/rGvlJfuToKDRoUsSfLaF4ZtUP04=
Subject key identifier: 70:72:7B:BF:06:B0:F7:D5:B9:B8:08:9E:00:41:9C:FD:F8:27:B2:A9
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 71ADAF16F72B568831B326FBB30187D891D11EFE
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS214710.roa
Signing time: Wed 10 Jul 2024 10:03:02 +0000
ROA not before: Wed 10 Jul 2024 09:58:02 +0000
ROA not after: Wed 09 Jul 2025 10:03:02 +0000
asID: 214710
IP address blocks: 94.26.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 15:28:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:ad:af:16:f7:2b:56:88:31:b3:26:fb:b3:01:87:d8:91:d1:1e:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Jul 10 09:58:02 2024 GMT
Not After : Jul 9 10:03:02 2025 GMT
Subject: CN=70727BBF06B0F7D5B9B8089E00419CFDF827B2A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:cc:e1:45:e9:7f:e0:c8:27:96:5b:72:11:19:
69:ae:92:84:15:02:12:b9:4a:b0:bd:f9:b5:c4:9e:
7d:be:b5:51:7d:1b:08:7c:5e:dc:10:3c:dd:27:bc:
de:33:2c:47:1e:c1:ff:db:38:64:d5:54:55:0d:71:
c4:1e:ba:bb:77:83:bd:e1:9c:43:2a:4e:25:15:33:
ce:91:63:30:6d:2b:39:63:fe:dd:cc:75:ce:c3:d7:
1f:01:39:93:b9:25:c6:dc:b6:60:76:dd:e9:db:28:
e9:56:02:fa:c1:23:e8:d6:98:1c:fd:97:11:4c:35:
a0:87:02:1a:d6:41:49:00:0c:e0:ad:4b:71:ba:d7:
13:dd:f8:14:2d:de:25:f3:44:cf:cd:26:2c:79:f6:
bb:f3:0d:e6:71:c7:91:92:d8:0d:0e:ba:10:71:a3:
27:b3:37:df:7b:80:8f:5d:86:66:9a:14:c7:d5:93:
13:68:a8:1a:e8:88:d6:07:59:00:3a:1d:44:60:37:
22:0f:64:eb:3e:7c:d3:00:4f:95:99:2e:5d:1a:09:
e3:f8:8c:4c:ea:39:31:99:03:2e:2e:9f:46:00:87:
51:5e:e1:e8:a3:b4:11:b3:9c:70:e7:49:d3:e9:f0:
b2:a9:53:3c:ca:46:32:ce:cf:cc:ad:3e:15:e1:54:
ed:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:72:7B:BF:06:B0:F7:D5:B9:B8:08:9E:00:41:9C:FD:F8:27:B2:A9
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS214710.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.26.25.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:aa:55:d8:b8:40:26:3f:99:4b:bd:55:a3:8a:da:84:b4:af:
6e:d9:9c:d5:bf:ed:0f:82:30:05:f9:4d:f4:2c:dd:fa:65:cd:
eb:0d:a5:aa:38:1e:4f:77:8a:cc:0e:63:36:36:ea:88:68:83:
9b:cb:4c:38:81:ae:31:62:94:45:a5:a0:27:25:10:da:52:61:
e1:15:58:92:f6:6b:8f:fa:2b:73:a0:8b:6b:d9:c1:eb:79:42:
83:98:2d:a5:84:6e:a6:54:d0:d1:d6:74:bc:75:bc:b6:e9:f6:
1d:cd:ac:4c:5a:7d:97:a6:0d:78:cb:97:11:67:a6:f2:ed:c9:
d2:80:c4:58:94:14:d8:40:0d:ec:8b:3b:f5:94:e2:09:23:de:
ba:44:79:b3:fa:58:e6:23:08:df:6d:6d:7f:b8:04:0e:ad:54:
88:e1:23:e8:15:61:a0:34:cd:ad:89:a1:03:24:88:d4:16:9c:
26:95:c0:94:69:67:bc:cb:e3:db:11:b7:f7:6c:cf:9d:4d:24:
70:a5:de:83:ed:0e:ba:7f:65:1b:1e:c5:20:47:bc:6c:aa:68:
27:0d:b6:f6:ef:da:b7:4a:ee:a5:b4:93:67:79:0a:dc:d7:6e:
5e:0d:8b:30:fa:8b:3e:b1:ac:40:0f:9f:28:23:cc:42:71:cd:
7d:ca:20:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 01:46:18 2025 by rpki-client