Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS931.roa
File: AS931.roa (raw, json)
Hash identifier: GokESi3end5B97CrthRhEv6Fq8G2MsIq2dMbP8r89SI=
Subject key identifier: 28:DE:23:93:AC:05:44:9D:16:65:E3:53:0B:6F:BD:7F:E6:7C:CD:77
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 29A38E959161CBEEC4FDB2A500932F4D8186217E
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS931.roa
Signing time: Tue 19 Nov 2024 23:29:31 +0000
ROA not before: Tue 19 Nov 2024 23:24:31 +0000
ROA not after: Tue 18 Nov 2025 23:29:31 +0000
asID: 931
IP address blocks: 185.147.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:a3:8e:95:91:61:cb:ee:c4:fd:b2:a5:00:93:2f:4d:81:86:21:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Nov 19 23:24:31 2024 GMT
Not After : Nov 18 23:29:31 2025 GMT
Subject: CN=28DE2393AC05449D1665E3530B6FBD7FE67CCD77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:50:3f:da:fd:cd:28:5a:0c:04:fb:3e:ba:b6:
97:dc:3d:23:dd:02:76:c4:6d:72:7d:f8:2c:54:2d:
36:ca:49:aa:d6:f0:95:b2:8e:20:4c:cb:7e:1f:c6:
74:53:0e:b1:be:cb:aa:9b:ef:78:12:e5:7a:48:b9:
88:a6:55:af:ce:95:da:66:14:43:e3:62:19:47:bc:
96:e4:d0:29:cc:47:fe:25:89:6b:57:44:9a:ad:ff:
23:18:4c:bd:ce:5f:04:d9:22:f4:fa:d1:79:7f:56:
6e:83:a8:71:87:1d:ee:a7:36:e9:91:21:87:68:0b:
49:f6:b3:9a:3a:a8:2f:82:10:82:74:5d:7b:9b:16:
75:48:23:3f:47:f8:34:44:6c:80:a1:ea:89:ac:d7:
d1:0e:bc:7a:1f:f8:cf:b0:52:ee:48:2f:9f:ed:71:
e4:9d:13:dc:72:d6:aa:5d:ff:bf:7a:f5:53:60:61:
4e:79:64:fd:31:0a:2f:50:fc:ca:f0:e1:68:15:88:
85:2c:ac:a9:36:9e:ee:86:3c:da:04:0b:93:a5:11:
1d:56:46:84:a3:6b:11:67:a2:c7:c8:43:11:bb:71:
6a:4e:50:f5:3d:b6:e9:41:53:2b:6f:1f:7d:d9:da:
9e:ec:d8:27:84:7c:6e:f8:b2:70:25:1b:4e:a8:fa:
93:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:DE:23:93:AC:05:44:9D:16:65:E3:53:0B:6F:BD:7F:E6:7C:CD:77
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.147.34.0/24
Signature Algorithm: sha256WithRSAEncryption
d0:a5:ab:e5:38:18:31:2e:04:be:f4:48:ae:ba:0b:73:43:29:
d0:35:81:52:fd:8a:e2:67:d4:0d:1d:e1:ca:f5:47:0b:60:7e:
b0:0c:7f:e1:69:a4:f6:8e:de:91:a9:7e:93:21:a1:41:9a:15:
a8:4d:ba:d4:17:39:03:47:56:01:c0:e4:53:dd:28:ff:3c:ac:
81:5f:b0:8b:68:7a:34:90:e7:2e:ce:85:43:92:17:b8:2b:05:
cb:23:2c:b4:74:d8:40:80:28:b5:2a:b2:54:d9:7f:5a:99:a9:
98:5f:4a:ce:ef:89:ac:9d:52:c7:b9:56:ff:49:70:95:27:a5:
70:e1:2f:7d:2e:0e:1e:7a:65:fb:fa:b9:24:d8:ee:7f:ae:7a:
5d:c6:b6:b5:2f:a0:0e:25:53:9c:39:ac:01:e6:37:47:bd:a5:
36:4f:6f:b4:2b:58:c7:f6:5d:37:55:89:b3:21:d1:8f:38:ca:
64:57:44:0a:41:db:7b:b0:67:9a:13:48:bb:34:49:14:a3:4a:
cf:a8:95:a5:56:58:ae:70:f1:ac:d4:9f:e1:06:db:bc:1e:57:
1a:06:46:ee:cf:06:78:3f:87:87:60:1b:57:73:fc:63:e8:29:
b6:04:c0:23:fa:06:3a:b8:8f:cb:ac:c6:87:5e:de:2a:76:ff:
ad:3a:d2:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 19:48:08 2024 by rpki-client on console-fra.rpki-client.org