Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS34927.roa
File: AS34927.roa (raw, json)
Hash identifier: am09jx4HQ2zExyZeWsAyhX6TndUCiGTKGzX/bt8kptM=
Subject key identifier: 80:2D:05:DE:71:9A:16:83:70:CC:0E:DF:F8:63:66:59:AD:22:2F:A1
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 5AD9DD7AF863559895FC64798025639AEEE66937
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS34927.roa
Signing time: Wed 28 Aug 2024 14:09:30 +0000
ROA not before: Wed 28 Aug 2024 14:04:30 +0000
ROA not after: Wed 27 Aug 2025 14:09:30 +0000
asID: 34927
IP address blocks: 118.91.186.0/23 maxlen: 24
144.48.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:d9:dd:7a:f8:63:55:98:95:fc:64:79:80:25:63:9a:ee:e6:69:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Aug 28 14:04:30 2024 GMT
Not After : Aug 27 14:09:30 2025 GMT
Subject: CN=802D05DE719A168370CC0EDFF8636659AD222FA1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:04:84:b5:c3:34:53:11:08:8e:b0:0b:e7:28:
d9:87:4c:22:cd:b5:99:00:a7:14:74:a1:52:b8:d3:
f0:5e:78:78:a2:8b:de:ba:f8:8e:82:9d:7c:3c:84:
6b:46:f6:ba:84:5a:02:6a:d9:33:00:43:cc:2f:a9:
ae:52:61:1f:db:17:2b:33:8c:36:95:23:e0:b1:a6:
6a:28:54:a1:22:9e:2b:51:d1:3e:f0:ac:d3:f7:e4:
7e:33:4e:1f:39:7d:57:14:f8:1f:ec:73:2c:fe:eb:
ea:7e:0e:30:38:75:24:93:6a:6c:15:f8:57:8f:80:
f6:77:ac:63:59:28:35:b3:25:ba:6b:c7:16:3e:c2:
92:ec:79:57:77:47:f9:ef:eb:2a:ba:f8:a6:f9:71:
6e:05:a3:5a:68:21:bf:94:2c:f3:93:4e:c0:5a:66:
5e:13:35:64:6c:8f:a9:36:50:ee:87:2e:04:48:5a:
bc:31:48:41:90:32:14:8a:7e:40:1d:72:2e:22:0c:
d5:70:21:71:f0:07:ea:25:9d:2c:3d:3e:c9:d0:0c:
81:3a:cb:2b:29:d8:60:d1:01:36:16:36:9b:91:11:
4c:38:1a:db:bb:e6:88:1c:ba:ee:4a:9e:d7:01:70:
23:85:26:a0:d3:40:80:3b:67:f0:8c:b3:7c:c0:62:
02:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:2D:05:DE:71:9A:16:83:70:CC:0E:DF:F8:63:66:59:AD:22:2F:A1
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS34927.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
118.91.186.0/23
144.48.81.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:cd:75:eb:4a:db:cc:c0:7f:28:fd:12:48:19:c7:e7:3d:5f:
36:d7:61:4c:92:26:01:04:c5:11:8f:1f:fe:5d:f8:7c:8c:e4:
b4:62:95:1c:c0:d5:da:43:8d:15:c2:be:6d:f4:4f:ae:dd:cd:
13:36:63:62:5a:40:0c:70:e2:1b:39:91:f5:f9:c5:fa:01:f8:
ee:c9:fc:cd:71:1a:94:1a:5e:f1:19:f4:74:97:dc:58:7e:a8:
21:c3:59:a0:b2:65:09:6e:08:0e:5b:4d:d1:00:a1:95:ab:87:
c3:83:8b:89:8b:7c:81:b0:db:71:02:24:8e:a9:94:e6:08:2e:
9b:25:8f:65:3d:15:d7:6a:d0:d4:4b:59:df:15:fb:ec:50:50:
0b:44:92:e3:64:96:e7:47:2d:cf:e3:66:25:cd:31:6d:e1:59:
d9:2b:87:8f:9b:6b:e3:64:85:c7:50:54:5f:76:1d:12:7c:6b:
c5:e6:65:89:67:a4:8b:50:2f:3f:47:7c:0e:86:06:16:78:8c:
88:b7:43:99:38:b0:a1:98:ce:30:70:f1:38:ea:88:76:b5:38:
5d:fe:c8:67:67:8e:c6:9a:10:eb:01:91:3c:80:4a:68:2f:44:
7a:48:18:03:e0:af:93:7c:bd:5b:61:eb:32:6e:fc:e7:a6:bb:
fb:9b:8b:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:01:56 2024 by rpki-client on console-ams.rpki-client.org