Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3137332e3234372e3233372e302f32342d3234203d3e203137313339.roa
File: 3137332e3234372e3233372e302f32342d3234203d3e203137313339.roa (raw, json)
Hash identifier: E4cHZJIzRgcjcQHSEKla0MVzqokPVvB53BZh9G1HvOo=
Subject key identifier: C0:CF:50:94:1B:80:2D:87:08:47:69:5E:A4:68:80:A7:1C:23:50:B7
Certificate issuer: /CN=fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e
Certificate serial: 778A8DDD311791A8FEE0B4D52170D24676B973AF
Authority key identifier: 0A:17:B4:0A:79:DF:FF:44:FA:FA:3D:40:F6:E4:D0:0D:83:51:4B:B3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3137332e3234372e3233372e302f32342d3234203d3e203137313339.roa
Signing time: Thu 23 May 2024 11:08:12 +0000
ROA not before: Thu 23 May 2024 11:03:12 +0000
ROA not after: Thu 22 May 2025 11:08:12 +0000
asID: 17139
IP address blocks: 173.247.237.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:8a:8d:dd:31:17:91:a8:fe:e0:b4:d5:21:70:d2:46:76:b9:73:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e
Validity
Not Before: May 23 11:03:12 2024 GMT
Not After : May 22 11:08:12 2025 GMT
Subject: CN=C0CF50941B802D870847695EA46880A71C2350B7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:ea:2b:7f:08:d6:24:ee:71:53:e9:4c:67:e3:
2b:73:1b:d5:28:74:28:37:81:e1:a1:60:c4:3a:50:
29:c3:af:3e:b5:27:4f:1e:70:bd:2c:25:d1:9e:fa:
86:04:b3:86:94:5e:1b:b5:81:98:c0:ca:65:dd:52:
aa:dd:95:dd:80:dc:fe:41:70:12:d0:5a:ac:6b:40:
98:b5:40:86:4e:c4:ae:63:3d:d4:fc:90:59:c3:5e:
c1:60:e4:6d:07:f6:59:be:11:a7:31:3a:cd:ae:ff:
a9:77:e8:90:4e:50:85:2e:eb:25:ef:08:43:01:85:
b4:4d:33:01:e7:d6:8e:8d:12:bd:d0:e2:21:13:99:
6e:db:d4:17:99:29:f1:a3:91:15:7b:8a:14:bc:c3:
bc:7e:12:5a:e5:a0:67:51:f2:a5:49:67:5e:6e:92:
1b:14:7d:24:9e:67:d5:0b:fe:02:41:2b:49:25:ca:
bd:85:5c:0a:6c:ab:1d:de:28:2f:2a:26:00:d4:27:
56:b4:1e:39:42:91:01:72:db:2a:a2:1a:9b:9f:d0:
49:98:46:14:5f:8e:de:39:aa:5c:cf:62:2a:02:06:
84:6b:05:11:75:50:a6:02:83:5f:a9:6b:6d:a4:70:
51:67:56:51:d0:40:53:08:5f:2d:c9:b9:d0:12:ca:
15:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:CF:50:94:1B:80:2D:87:08:47:69:5E:A4:68:80:A7:1C:23:50:B7
X509v3 Authority Key Identifier:
keyid:0A:17:B4:0A:79:DF:FF:44:FA:FA:3D:40:F6:E4:D0:0D:83:51:4B:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/0A17B40A79DFFF44FAFA3D40F6E4D00D83514BB3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3137332e3234372e3233372e302f32342d3234203d3e203137313339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
173.247.237.0/24
Signature Algorithm: sha256WithRSAEncryption
48:d5:55:a7:5e:c8:52:fe:26:f1:5a:35:c8:2b:9c:1d:42:85:
df:d2:90:70:5a:6b:85:5f:21:68:5c:7e:2d:31:e2:0a:78:1d:
6a:49:06:9b:3e:d5:28:9e:d2:b5:23:ec:b9:45:75:95:39:44:
62:9c:bc:72:87:8b:d4:3c:5a:06:20:82:33:47:0c:e1:09:22:
9f:50:49:14:df:01:8c:4a:b7:8b:53:6f:5d:12:a5:aa:9a:87:
37:dc:f0:a7:f4:5e:82:de:d2:35:77:8c:03:1f:4c:37:6b:d6:
66:3c:e7:4c:47:21:71:97:36:02:f5:86:2a:c9:14:a5:af:d8:
78:07:5c:5c:49:f8:55:11:94:84:f8:78:bc:78:b6:df:ed:a0:
4d:65:d4:22:81:61:f4:de:39:cb:d6:b8:76:0c:90:a5:60:eb:
86:f2:a5:e3:cc:ef:cc:ee:03:ce:97:26:a6:1c:42:89:01:be:
4a:dd:2d:54:82:dc:67:f1:05:f5:62:d9:c7:40:1d:30:cd:6e:
05:99:d7:af:af:1a:80:40:02:6b:79:cf:87:61:86:17:92:f0:
0b:06:21:25:f8:3a:27:f8:89:d2:bf:dd:24:bb:d5:80:3f:6d:
fc:4e:ea:45:87:e5:7b:bb:4b:f9:f3:c6:10:cf:a2:61:51:d9:
ca:61:0b:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 22 08:53:09 2024 by rpki-client on console-ams.rpki-client.org