Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS216050.roa
File: AS216050.roa (raw, json)
Hash identifier: kHBLORuI4/YOtg8iqKkCY1VW0BHjefRPvHNrxruT0bc=
Subject key identifier: 3F:1C:F5:3B:10:14:06:BB:6D:7B:06:AC:71:2D:DD:F7:88:71:6B:FB
Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial: 29A25C42A43D22B0DA89F326808CF458858C4F82
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS216050.roa
Signing time: Mon 15 Jul 2024 07:52:38 +0000
ROA not before: Mon 15 Jul 2024 07:47:38 +0000
ROA not after: Mon 14 Jul 2025 07:52:38 +0000
asID: 216050
IP address blocks: 104.234.34.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:a2:5c:42:a4:3d:22:b0:da:89:f3:26:80:8c:f4:58:85:8c:4f:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Validity
Not Before: Jul 15 07:47:38 2024 GMT
Not After : Jul 14 07:52:38 2025 GMT
Subject: CN=3F1CF53B101406BB6D7B06AC712DDDF788716BFB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:6e:2a:64:e7:e7:ab:14:3e:65:e1:f0:e2:46:
82:ae:a1:0e:71:cc:9b:07:53:08:45:5e:b6:77:ef:
00:c7:c1:aa:70:c5:8c:f3:87:b6:b5:b8:d5:89:c6:
45:dc:b1:e8:4b:8a:31:7a:ca:24:9b:e0:e9:33:eb:
60:5b:d2:0d:05:d6:09:93:ce:8e:f4:c7:7a:f4:22:
68:75:ef:dc:89:f0:12:1c:62:8b:e9:34:ad:c3:83:
6e:ff:b2:fa:cf:38:88:48:bb:65:38:cc:15:76:84:
a0:4e:b0:1c:83:18:9c:b4:4f:56:64:62:21:e8:e0:
28:e9:d5:e8:af:58:34:1d:f1:b6:5b:ea:af:2f:86:
93:a6:cc:95:08:0c:aa:02:7e:a9:6a:88:b8:d8:51:
c7:cb:3d:79:d7:29:e7:70:f6:93:e4:54:6a:c6:a7:
ec:b5:81:ea:c8:ac:e9:66:e2:46:d7:52:89:6f:06:
05:1d:71:a8:42:4a:43:58:09:be:cf:bc:3a:2f:67:
54:c4:3d:bd:64:6f:73:da:27:d5:d3:e9:84:e5:33:
43:e4:5c:57:80:3c:44:23:2a:61:7a:dc:ca:b5:43:
dd:a5:0d:cf:1a:78:57:ee:3e:c1:7c:94:2e:a8:bd:
c5:a6:0d:2d:58:5d:f4:d0:42:2c:cf:55:c2:ca:cd:
86:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:1C:F5:3B:10:14:06:BB:6D:7B:06:AC:71:2D:DD:F7:88:71:6B:FB
X509v3 Authority Key Identifier:
keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS216050.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.234.34.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:5d:f9:4d:41:13:bc:9b:8f:04:6b:5d:88:68:bc:90:52:54:
8c:1a:58:10:fa:55:c9:0e:e9:23:5c:c6:ff:cd:81:25:31:da:
ed:2a:c4:03:cb:1c:12:c3:6d:f7:9a:75:d9:86:5a:67:83:24:
3e:f4:b2:b3:bd:4b:25:d1:95:69:4b:5d:86:82:d8:66:e9:88:
f6:5a:65:dc:e9:56:8a:35:b9:45:09:55:c8:32:a0:da:48:2b:
ae:8b:c3:d3:53:c9:98:3f:ec:a2:3f:d1:eb:b2:ff:c8:6d:d7:
b5:83:52:4e:79:90:81:0b:40:dd:f1:99:66:f5:80:39:0b:31:
3c:5d:3f:f7:45:f5:41:e5:56:7c:d0:1c:18:fc:8f:5e:6f:a3:
df:7f:fc:5f:72:b2:24:b9:5a:23:0d:69:50:56:b1:82:41:85:
0c:af:e4:58:cc:f8:2b:42:d7:91:94:dd:ae:7f:d5:ab:27:d1:
ef:e9:85:83:45:7d:53:12:46:52:60:58:d6:3e:89:4b:37:96:
b8:a8:4b:ec:8c:f2:0e:d2:ba:a4:c4:03:6e:84:07:10:ed:ac:
ac:d5:d0:2c:12:0e:58:5f:59:f1:68:97:98:ad:f0:dd:f1:4e:
48:e8:2e:b6:8a:a2:95:84:30:cc:28:51:86:99:df:01:a9:5b:
5a:a4:bb:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:09 2025 by rpki-client on console.sobornost.net