Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS215917.roa
File: AS215917.roa (raw, json)
Hash identifier: YT32umJNK/ZlcLi7uCiYDRcvvuBqP3yeoTwTc7aBwqI=
Subject key identifier: D0:9E:3B:D0:8E:2A:D8:69:CE:BB:45:26:D7:29:5B:F4:E9:6A:84:45
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 767726128AC88A3AF5CDDEFC711873F4018AD53D
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS215917.roa
Signing time: Wed 10 Jan 2024 18:35:48 +0000
ROA not before: Wed 10 Jan 2024 18:30:48 +0000
ROA not after: Wed 08 Jan 2025 18:35:48 +0000
asID: 215917
IP address blocks: 81.31.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:77:26:12:8a:c8:8a:3a:f5:cd:de:fc:71:18:73:f4:01:8a:d5:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Jan 10 18:30:48 2024 GMT
Not After : Jan 8 18:35:48 2025 GMT
Subject: CN=D09E3BD08E2AD869CEBB4526D7295BF4E96A8445
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e4:67:19:29:82:41:92:b2:ac:e8:de:20:c0:
a9:72:22:84:27:ec:69:a9:53:9c:f0:23:9b:94:37:
73:99:ff:a6:5b:13:91:f8:a1:09:11:96:46:21:67:
58:48:15:ce:ff:d4:37:5c:18:a3:e2:09:ba:e9:e1:
4e:76:5b:42:58:62:9a:a2:c4:8f:f5:3d:74:af:ae:
14:91:6d:3d:ae:ff:92:0f:21:2f:c0:65:3d:ae:1d:
95:ee:ba:5f:53:5e:07:97:2f:81:b2:41:fd:8b:7f:
c4:2d:b6:95:07:37:0f:54:0d:87:29:33:60:0f:01:
5e:20:98:df:50:ce:2d:b5:33:1c:58:e1:16:a0:43:
60:a8:14:31:07:32:12:b6:f4:a3:dc:19:bb:7a:3f:
a4:3d:91:d1:0d:0f:da:ce:95:ae:73:db:49:a9:d5:
11:52:a0:cc:13:eb:cb:f4:40:f4:f0:da:f0:bc:7c:
13:61:02:ea:a1:99:c1:eb:a4:18:55:ed:55:a6:67:
20:7c:6d:1f:68:5a:a4:23:29:aa:ef:54:7c:a5:b9:
ad:97:d9:d0:df:11:09:a8:0e:13:70:71:94:ff:ee:
68:18:10:41:e6:5f:f3:22:bf:d1:64:b4:03:5b:92:
bd:59:8e:17:85:9a:17:46:e0:97:1c:50:97:67:98:
c8:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:9E:3B:D0:8E:2A:D8:69:CE:BB:45:26:D7:29:5B:F4:E9:6A:84:45
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS215917.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.31.209.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:93:aa:5c:cf:f2:ca:27:68:c4:53:a4:98:ff:5b:b8:00:6d:
51:ee:85:e1:11:25:24:63:25:6b:16:c3:e8:49:5a:8a:80:da:
82:ba:7d:af:99:52:51:8b:ed:91:02:4a:ea:87:84:22:f4:06:
5f:de:c2:15:d2:8b:1b:bf:02:cf:06:c7:25:fc:3d:9e:fb:bb:
41:14:91:f5:c2:ac:88:af:b8:69:09:c8:98:78:47:6e:be:57:
ed:9b:40:43:bd:ae:58:e4:ca:a9:b9:fb:37:95:dc:58:7b:7c:
67:90:52:f9:c8:56:ba:30:7a:c3:9c:df:6f:af:75:59:35:e2:
41:ac:f4:76:1e:8c:5d:36:ee:a9:21:47:0a:f2:7d:bf:d9:1b:
21:3e:80:e6:fa:38:81:99:21:4e:a0:3b:0d:c3:8e:82:de:57:
eb:56:08:ed:09:bc:1d:d4:23:48:f3:e9:d8:b9:bb:b2:eb:01:
5b:5c:25:c3:82:2b:63:4d:f8:09:c3:71:e6:e6:e0:8f:0e:d6:
45:85:83:50:ac:fc:50:49:52:c0:6c:46:87:e7:6a:ab:95:6d:
c7:fe:e5:e2:a3:10:34:65:67:f2:04:22:2c:b9:3c:74:c2:b4:
7c:da:fd:b4:ad:d2:4c:41:78:3d:e8:5f:5e:87:dc:80:1e:06:
f1:db:8d:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 20:12:34 2024 by rpki-client on console-ams.rpki-client.org