Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/3134342e34382e38302e302f32322d3234203d3e203631313338.roa
File: 3134342e34382e38302e302f32322d3234203d3e203631313338.roa (raw, json)
Hash identifier: 0BfwHEb1tkPDLDzW76eLvCoynk+Xqu/G/oOfr35v1HQ=
Subject key identifier: DD:49:7A:A7:48:B5:98:C2:22:3C:9F:20:41:EA:EF:3E:DE:E9:11:43
Certificate issuer: /CN=A91115900000/serialNumber=5953AC0A64BF9656B442D3C32313435ECB495F68
Certificate serial: 5D02AB877A5898AE77CBE82BCFBA22C6F00CED38
Authority key identifier: 59:53:AC:0A:64:BF:96:56:B4:42:D3:C3:23:13:43:5E:CB:49:5F:68
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVOsCmS_lla0QtPDIxNDXstJX2g.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/3134342e34382e38302e302f32322d3234203d3e203631313338.roa
Signing time: Tue 03 Jan 2023 02:07:02 +0000
ROA not before: Tue 03 Jan 2023 02:02:02 +0000
ROA not after: Tue 02 Jan 2024 02:07:02 +0000
asID: 61138
IP address blocks: 144.48.80.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:02:ab:87:7a:58:98:ae:77:cb:e8:2b:cf:ba:22:c6:f0:0c:ed:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91115900000/serialNumber=5953AC0A64BF9656B442D3C32313435ECB495F68
Validity
Not Before: Jan 3 02:02:02 2023 GMT
Not After : Jan 2 02:07:02 2024 GMT
Subject: CN=DD497AA748B598C2223C9F2041EAEF3EDEE91143
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:33:7d:7a:b7:50:3f:2d:0a:4a:b9:42:38:d9:
cd:6a:55:eb:61:7a:fa:6b:b8:b3:81:57:15:54:35:
f1:45:8f:de:11:68:34:ab:ee:45:2f:32:52:d2:d4:
be:d9:2a:85:c2:ce:34:fb:5d:7d:ce:d5:63:d7:e6:
e0:c1:45:07:51:39:81:c4:e3:46:ed:5c:e2:9c:f2:
c6:72:a3:53:a3:25:f5:ef:6c:36:f0:d9:f2:87:91:
eb:b5:bd:35:38:25:29:74:32:3a:80:61:fe:69:f5:
e3:4f:c3:11:67:b5:66:7e:80:88:8a:61:fd:22:0e:
c8:a4:0a:f0:34:94:94:16:c2:93:88:8c:e0:69:10:
c0:d4:0f:34:9e:b7:56:9f:60:92:5c:b8:2b:54:10:
a4:49:43:12:ba:65:0d:6f:aa:e4:aa:9e:1f:7d:d1:
2c:58:de:7a:8c:15:38:ce:ba:85:ae:94:81:88:93:
d3:59:6c:d9:6f:ff:52:e5:95:91:02:4d:96:e3:22:
b5:8c:5f:a9:67:d0:0d:c8:0d:20:da:a8:fa:0f:82:
84:7a:5e:4a:e4:02:b6:b8:c2:bc:71:65:75:06:36:
1a:c2:73:4e:39:88:26:26:01:fb:a9:ce:80:81:10:
34:eb:be:da:95:f3:e4:65:3d:01:97:86:be:77:c1:
f7:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:49:7A:A7:48:B5:98:C2:22:3C:9F:20:41:EA:EF:3E:DE:E9:11:43
X509v3 Authority Key Identifier:
keyid:59:53:AC:0A:64:BF:96:56:B4:42:D3:C3:23:13:43:5E:CB:49:5F:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/5953AC0A64BF9656B442D3C32313435ECB495F68.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVOsCmS_lla0QtPDIxNDXstJX2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/3134342e34382e38302e302f32322d3234203d3e203631313338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.48.80.0/22
Signature Algorithm: sha256WithRSAEncryption
2c:bb:85:39:e4:24:1b:ce:d9:0c:7b:0e:bb:29:b7:5d:fd:4d:
19:d6:37:be:fe:a8:bf:09:6e:2d:d5:7a:f3:81:24:17:e7:98:
49:88:6b:a6:72:97:76:df:18:8f:30:65:42:24:00:ef:5a:04:
9a:1f:1a:f2:88:a9:13:8e:69:15:56:a9:29:74:86:c3:97:da:
cf:e0:90:0f:d9:c6:8e:14:b4:29:9a:58:6d:4f:26:41:cd:62:
06:01:27:14:c9:bf:4f:b9:dc:a4:e6:bb:0b:10:53:bf:8f:71:
f3:24:a4:65:d5:4e:85:e1:d6:97:2b:59:b4:5b:57:1e:05:b0:
5f:08:89:9f:e9:ac:ce:e3:c6:cf:96:b4:63:aa:a8:24:72:81:
3f:b5:cc:0f:74:33:94:fa:1c:c8:4a:5f:53:ef:bb:91:91:42:
20:16:a8:25:16:1a:64:e6:1c:75:a8:e6:8b:be:24:52:d3:0e:
42:36:d5:ad:0b:5e:ef:de:54:20:ad:ae:1f:ec:60:3f:3b:70:
99:e7:c6:4d:e4:76:8d:d7:3f:e4:35:c3:c0:e1:ac:84:a4:54:
96:30:2a:cd:f2:a6:af:6f:39:d3:6a:64:90:94:80:ce:c9:1d:
9f:38:0e:12:c5:71:53:55:b3:be:d5:8c:bd:0c:f4:40:63:88:
8e:b9:4c:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 18 19:56:59 2023 by rpki-client on console-fra.rpki-client.org