Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS7018.roa
File: AS7018.roa (raw, json)
Hash identifier: s/jma9O5BRbMZtgj2DTRj+z3jxNZfRHJ8q1OdPK7a+0=
Subject key identifier: A0:27:90:BB:7C:5F:2D:5A:16:78:A6:EC:75:21:B5:69:79:57:35:10
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 0CEDC56289715B4D49707939CF2B81AF1F36E888
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS7018.roa
Signing time: Sun 17 Mar 2024 22:27:36 +0000
ROA not before: Sun 17 Mar 2024 22:22:36 +0000
ROA not after: Sun 16 Mar 2025 22:27:36 +0000
asID: 7018
IP address blocks: 94.26.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:ed:c5:62:89:71:5b:4d:49:70:79:39:cf:2b:81:af:1f:36:e8:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Mar 17 22:22:36 2024 GMT
Not After : Mar 16 22:27:36 2025 GMT
Subject: CN=A02790BB7C5F2D5A1678A6EC7521B56979573510
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:30:0a:25:97:4d:ea:7f:f8:c0:cc:45:15:a8:
07:7f:6c:a1:43:4d:f7:c3:c3:85:d7:00:22:1d:c1:
97:2f:4c:1f:e0:ad:30:e6:53:1c:18:f8:3f:53:7d:
5c:47:25:ab:08:fc:8f:3b:64:8c:15:a8:0a:ca:32:
44:f9:6b:4b:7e:af:62:81:72:54:11:f5:eb:da:4d:
05:88:c0:ae:0f:8d:c8:31:3c:0f:99:4a:4f:b1:55:
6a:90:2b:8f:6c:96:49:b1:d4:1b:8f:8a:a9:c2:60:
3b:2c:fb:d5:39:e5:2b:9c:b4:fe:41:13:8c:7a:7e:
03:ba:b9:b9:b4:89:e4:04:47:bb:25:e0:3f:09:bd:
7d:62:db:77:ac:c4:61:53:35:0f:22:e8:8f:0d:f8:
a1:ad:51:68:fa:06:ea:8d:f8:27:87:81:77:18:86:
05:98:bd:81:f4:bf:cc:3f:80:39:02:05:e3:09:31:
43:59:60:57:54:80:e6:97:01:43:a9:e1:99:42:db:
ee:62:41:01:12:e3:7c:4d:7f:c5:6a:4b:fe:57:ab:
c5:e4:56:f1:4e:67:eb:38:0f:19:4f:b5:a2:24:01:
2f:c5:01:2b:b2:a4:95:50:4a:7f:77:ff:2e:be:ec:
13:64:b9:47:0d:26:39:44:af:bb:f0:ce:8a:13:4c:
f5:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:27:90:BB:7C:5F:2D:5A:16:78:A6:EC:75:21:B5:69:79:57:35:10
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS7018.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.26.25.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:fb:a0:69:85:af:04:4e:74:eb:7d:39:1e:5a:59:d0:fa:49:
43:19:ee:2e:7b:f0:55:a3:77:4f:bf:6e:eb:06:e2:d2:d4:70:
a5:a2:f0:45:01:b8:e5:ff:89:bd:40:43:5a:1f:19:e9:e8:39:
3b:5a:62:cf:6d:64:29:15:48:15:90:e7:69:47:c8:ce:8b:55:
25:fc:a4:12:ae:b2:68:03:01:1b:05:79:20:49:e2:56:87:f9:
47:df:df:14:ba:cf:38:32:e5:0b:05:55:fa:b3:b0:6c:81:49:
ad:8b:68:13:9a:6e:9e:80:76:f9:7c:4c:d3:fb:5d:8b:ab:c4:
3a:16:d1:a2:2a:3f:5f:e0:4b:90:ec:e1:2b:bf:80:87:6e:ed:
f8:5e:7d:38:c8:fa:d0:42:0e:a4:89:48:07:ca:39:ef:f0:ed:
b0:d8:d3:13:aa:76:fe:c1:db:57:f8:5e:86:1d:d2:1e:7c:69:
14:64:13:b5:7d:85:e8:71:73:cf:c2:0e:a9:30:6f:a2:25:a4:
78:53:33:55:66:2e:f2:cf:df:08:fc:a4:d4:f5:f0:10:30:bd:
db:df:f9:ee:4a:97:28:f3:2c:af:00:9f:89:19:fc:33:21:ad:
7c:05:ff:90:58:c4:ab:bc:b1:2a:39:8d:3a:8a:3c:2d:df:4c:
99:64:b2:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 20:12:34 2024 by rpki-client on console-ams.rpki-client.org