Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS399114.roa
File: AS399114.roa (raw, json)
Hash identifier: wd/t48DW9OJQ7Hkcyr1fyuyoj3+Elcnl7CqQNJdXh0o=
Subject key identifier: ED:6E:D8:58:A5:8F:85:44:7D:91:BB:6D:83:92:CA:1D:67:47:4F:05
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 0A74A80FE8AF9832B6491FCDD35BE8F7BE4203A6
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS399114.roa
Signing time: Tue 05 Nov 2024 03:40:04 +0000
ROA not before: Tue 05 Nov 2024 03:35:04 +0000
ROA not after: Tue 04 Nov 2025 03:40:04 +0000
asID: 399114
IP address blocks: 5.253.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 17:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:74:a8:0f:e8:af:98:32:b6:49:1f:cd:d3:5b:e8:f7:be:42:03:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Nov 5 03:35:04 2024 GMT
Not After : Nov 4 03:40:04 2025 GMT
Subject: CN=ED6ED858A58F85447D91BB6D8392CA1D67474F05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:66:cf:3a:48:c8:5c:36:b1:ca:c8:9d:79:4a:
af:65:76:08:19:9f:04:f7:9f:0d:df:d9:84:a4:60:
67:3d:dd:97:ea:ee:ef:1d:1f:e9:49:43:4e:23:a4:
f9:d9:58:33:13:21:bb:e3:a2:3a:05:cb:9f:8f:01:
96:42:d9:8b:18:77:3c:79:10:ee:ff:89:32:70:b3:
65:0e:64:b7:a8:25:74:62:49:a2:bd:f0:ed:56:ae:
f5:9d:1b:39:75:11:f0:cd:99:e1:20:b5:3c:18:9c:
3f:cc:2d:13:9c:7e:a1:9b:7f:45:24:28:cb:b2:93:
c3:75:f6:76:9c:f9:d9:65:e3:b6:3f:d5:8e:55:7f:
8f:32:a4:dc:fa:99:a8:74:4d:43:5b:c1:24:d5:06:
e2:ff:73:84:50:2d:c3:67:03:4b:ca:aa:cc:73:0b:
1e:f1:8a:21:56:a7:98:5d:c4:9b:08:ed:be:a8:1d:
48:75:6c:7f:74:39:8d:15:b9:94:99:73:7f:17:88:
bf:b4:b9:93:ac:f7:de:81:5f:42:ce:9c:f2:5c:d6:
ec:bc:71:df:69:f1:cc:bb:7b:15:d6:5d:6c:a5:5b:
9b:a6:fa:c4:7c:3c:21:12:db:0f:bb:ac:13:2c:1a:
4e:28:26:d4:72:43:04:ff:5c:9f:05:fd:8a:f9:08:
c3:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:6E:D8:58:A5:8F:85:44:7D:91:BB:6D:83:92:CA:1D:67:47:4F:05
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS399114.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.87.0/24
Signature Algorithm: sha256WithRSAEncryption
41:5e:47:3f:09:30:32:d6:d8:2f:c5:01:42:c2:52:86:48:b5:
b5:38:ba:a2:92:94:d0:18:68:cf:69:a1:b0:c4:96:9b:62:f6:
ec:d0:5b:21:55:21:60:93:22:51:0b:42:4a:66:b5:16:88:92:
56:ad:19:eb:d1:80:4f:f3:ed:40:95:39:67:2c:e4:c1:0c:e6:
49:d7:ae:57:db:3a:d9:ad:61:f5:e1:85:55:c6:26:f5:44:83:
31:8f:ff:c8:b5:a3:fe:e1:5a:90:c5:59:1c:79:33:0d:64:6a:
85:7c:79:3a:8d:b5:13:37:91:a0:97:0a:32:da:41:36:da:b6:
37:bc:c5:28:3d:3d:18:92:b2:73:f6:4d:1d:49:6e:c6:35:3a:
0d:46:9e:7f:57:c6:85:97:d2:b3:ca:32:8e:92:5f:58:eb:4c:
35:b1:da:d0:d2:40:ca:c0:a8:26:73:fb:c2:ff:c2:ff:39:c3:
fb:98:9e:a7:48:90:04:7d:fb:00:72:f0:0f:cf:ae:e9:a4:ad:
5c:e6:b4:de:21:39:df:13:9b:b5:58:e3:3b:72:9d:e8:52:b8:
e1:1f:ee:86:20:32:60:11:29:ca:da:9d:64:67:43:cd:df:ff:
96:d2:6c:33:83:82:ed:96:a7:6e:b1:8f:de:5a:92:2b:03:65:
7f:89:a4:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:03:24 2024 by rpki-client on console-fra.rpki-client.org