Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/3134342e34382e38332e302f32342d3234203d3e20313338393935.roa
File: 3134342e34382e38332e302f32342d3234203d3e20313338393935.roa (raw, json)
Hash identifier: V1Y7rK+dnCWZbq/RbDOnVyqRuccMSoUsVj2t88P6jvk=
Subject key identifier: 1A:AF:8B:A8:1E:86:5E:2A:B6:98:A8:5B:42:BD:38:8C:F4:7F:72:4D
Certificate issuer: /CN=A91115900000/serialNumber=5953AC0A64BF9656B442D3C32313435ECB495F68
Certificate serial: 4692402C8FA119C790171B79EF47AFA11D0C35FF
Authority key identifier: 59:53:AC:0A:64:BF:96:56:B4:42:D3:C3:23:13:43:5E:CB:49:5F:68
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVOsCmS_lla0QtPDIxNDXstJX2g.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/3134342e34382e38332e302f32342d3234203d3e20313338393935.roa
Signing time: Tue 03 Jan 2023 02:07:02 +0000
ROA not before: Tue 03 Jan 2023 02:02:02 +0000
ROA not after: Tue 02 Jan 2024 02:07:02 +0000
asID: 138995
IP address blocks: 144.48.83.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:92:40:2c:8f:a1:19:c7:90:17:1b:79:ef:47:af:a1:1d:0c:35:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91115900000/serialNumber=5953AC0A64BF9656B442D3C32313435ECB495F68
Validity
Not Before: Jan 3 02:02:02 2023 GMT
Not After : Jan 2 02:07:02 2024 GMT
Subject: CN=1AAF8BA81E865E2AB698A85B42BD388CF47F724D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e0:62:05:9d:7e:46:7a:e8:1f:92:8d:06:e6:
9e:a4:bf:e6:77:42:68:2b:b3:b0:85:1b:0a:bc:b6:
68:9c:eb:d8:54:c8:7b:06:4a:0f:ce:77:ad:5e:05:
76:63:8b:f2:ec:7a:24:17:05:b6:0f:66:fc:bf:79:
f2:97:e6:15:02:61:20:4d:f4:35:71:e5:4f:55:3c:
07:31:30:0a:e2:17:2a:2c:67:f5:4f:ae:91:5c:e9:
ec:4b:cb:dd:a0:db:03:a0:17:45:16:66:62:4a:ed:
9f:0a:a3:4c:95:32:0a:a7:ed:66:8a:a6:35:36:a8:
8d:9a:fd:f3:ea:d4:3b:3b:32:47:69:ff:e2:66:a4:
b1:ff:f3:5f:1a:38:9e:e0:de:17:af:e3:16:f6:21:
d5:e2:dd:9e:a0:08:e4:72:8d:27:d3:25:17:33:fd:
8e:93:20:e1:2e:b8:cb:ed:23:c3:27:6e:62:b1:41:
48:46:bd:33:21:95:05:3e:55:fb:59:46:f0:ae:db:
28:ee:72:58:07:89:bc:d2:4a:a3:49:c5:49:ea:88:
82:e1:f2:81:dc:e6:65:bc:3d:5a:13:35:bc:29:3a:
51:12:09:07:df:5c:a3:c9:02:00:8c:b5:b4:54:7b:
60:0e:5c:b1:4a:18:a4:26:90:5f:cf:06:82:d7:4b:
b2:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:AF:8B:A8:1E:86:5E:2A:B6:98:A8:5B:42:BD:38:8C:F4:7F:72:4D
X509v3 Authority Key Identifier:
keyid:59:53:AC:0A:64:BF:96:56:B4:42:D3:C3:23:13:43:5E:CB:49:5F:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/5953AC0A64BF9656B442D3C32313435ECB495F68.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVOsCmS_lla0QtPDIxNDXstJX2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/3134342e34382e38332e302f32342d3234203d3e20313338393935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.48.83.0/24
Signature Algorithm: sha256WithRSAEncryption
50:cd:c5:7f:a8:24:38:12:af:cf:01:a3:37:1e:e7:2e:8d:69:
c5:fd:06:f0:13:64:de:cd:62:d9:98:a2:18:83:9b:aa:9d:79:
8f:ae:31:61:5f:a3:18:12:f4:a6:be:6e:09:2c:be:27:0b:f1:
c9:8d:c0:fc:68:75:ef:c5:60:2c:9a:e7:90:7c:49:1f:01:37:
15:58:8d:ff:12:36:64:98:f1:99:c3:6d:15:5e:b1:cd:12:02:
9f:b7:3a:5e:ec:98:d3:1c:3c:b0:2e:81:08:d4:be:83:25:cc:
c4:50:1d:9b:99:93:ab:00:79:b2:25:7c:0c:7d:35:7e:cf:09:
cc:e3:d5:d5:08:15:2e:f4:13:69:08:53:a3:f4:31:fb:05:58:
45:aa:47:a6:23:45:f9:40:e3:65:6c:c2:98:64:38:84:e6:59:
e0:d8:80:12:69:30:d4:19:17:af:9a:68:48:cc:1e:ef:d9:da:
9e:9a:76:c6:ed:17:dd:ee:ed:06:b2:a4:1d:98:39:2d:f3:b7:
82:52:7f:e8:d8:54:65:c1:f3:bc:cd:33:e3:21:1b:f3:a9:9e:
e3:ad:d9:90:66:39:23:29:3a:82:31:94:2b:82:51:bb:d9:22:
4b:13:7c:6e:6e:a8:1c:1f:cc:bc:d8:d9:24:93:85:ca:3a:13:
20:bf:df:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:09 2024 by rpki-client on console-fra.rpki-client.org