Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/AS395292.roa
File: AS395292.roa (raw, json)
Hash identifier: +pNF1xd3WWwNmwoUD0liwy5XDxv4ASpOqbItz8hq96Y=
Subject key identifier: 7A:B8:D3:9A:24:AA:15:68:69:68:3E:E5:D5:54:60:57:45:FC:FC:90
Certificate issuer: /CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
Certificate serial: 2C597EB945FEFF915D7C74E76EF0680EFB21F6A8
Authority key identifier: F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/AS395292.roa
Signing time: Wed 19 Feb 2025 05:08:49 +0000
ROA not before: Wed 19 Feb 2025 05:03:49 +0000
ROA not after: Wed 18 Feb 2026 05:08:49 +0000
asID: 395292
IP address blocks: 47.176.242.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:59:7e:b9:45:fe:ff:91:5d:7c:74:e7:6e:f0:68:0e:fb:21:f6:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
Validity
Not Before: Feb 19 05:03:49 2025 GMT
Not After : Feb 18 05:08:49 2026 GMT
Subject: CN=7AB8D39A24AA156869683EE5D554605745FCFC90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:b9:78:88:ea:41:ab:18:61:4b:48:9d:c5:73:
21:d1:6f:3c:7a:1c:d7:74:85:1f:cd:fc:87:bf:5a:
18:bd:1d:85:28:c5:bf:9b:c9:ac:e7:70:b2:6c:5c:
89:10:da:46:70:8f:fb:b3:52:4e:76:4c:90:99:fc:
64:bc:0f:74:64:8b:8a:4f:b0:b0:32:27:0d:e8:85:
1b:8d:46:a5:97:d8:09:5d:f3:e9:b0:5d:a7:44:a4:
11:a7:1d:2e:4d:ff:a9:06:3d:62:24:b4:1c:7c:08:
24:9b:7e:9c:ee:19:6e:5c:82:5b:42:19:74:49:6c:
c9:37:8c:05:81:22:c7:2e:9c:f6:1f:88:5a:ab:28:
37:12:ed:bb:dc:a5:6b:97:ae:eb:62:f6:78:aa:87:
52:a7:db:26:35:35:bb:1e:bd:f9:9b:eb:cf:23:f1:
38:57:11:17:7b:d0:fa:dd:6a:9f:ba:ab:bb:1c:f8:
6f:95:3e:34:84:50:d3:4e:d9:82:24:12:30:e5:2e:
fb:41:78:46:35:e6:16:26:a6:ef:b1:a0:cc:cb:55:
86:b5:16:10:33:f1:13:1d:3e:89:53:95:b0:ac:a2:
05:e7:99:6e:a9:f4:b1:34:02:7d:f7:ee:ee:9b:ec:
84:a3:55:d5:bc:33:98:95:f8:c1:c1:fd:71:14:a2:
ba:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:B8:D3:9A:24:AA:15:68:69:68:3E:E5:D5:54:60:57:45:FC:FC:90
X509v3 Authority Key Identifier:
keyid:F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/AS395292.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
47.176.242.0/24
Signature Algorithm: sha256WithRSAEncryption
22:18:54:55:79:f2:1d:37:03:b8:48:ae:89:44:3d:3c:d6:8f:
05:85:d6:eb:fd:84:9a:19:06:3f:47:d7:bc:d9:4c:ca:cf:0c:
75:da:05:41:da:95:0f:42:ea:49:ac:e3:cc:58:92:44:63:b2:
f2:4c:14:2a:8c:cf:0c:5d:c3:14:ff:6b:68:5e:d5:01:6c:c5:
e9:d6:7a:f5:9c:29:5a:a8:cf:96:35:e6:b9:b1:6a:1c:15:9e:
a6:f1:8c:a0:73:22:6c:80:90:56:c0:0a:a6:fa:18:fc:7d:20:
7c:d3:b6:49:87:71:9c:e5:0c:a1:db:48:c5:34:dd:b4:3a:c7:
24:79:b1:87:ec:f0:a8:a2:ca:64:99:54:94:13:a8:31:27:37:
a7:18:bb:b2:0e:7f:fe:c0:68:ea:99:99:82:69:95:65:10:f8:
c3:47:d5:da:19:45:4a:68:73:4f:c9:a3:ba:5e:7f:78:1b:8e:
b8:de:f1:bd:64:e4:e9:ee:26:8c:91:11:bf:77:06:b6:dd:d7:
52:99:a4:73:2c:f0:9d:59:38:8a:bb:b2:0c:5b:1a:db:57:e1:
2c:c0:3e:94:82:e9:19:88:b6:1f:7d:4e:b1:49:b5:85:2f:61:
9f:1d:28:4d:82:55:9a:dd:cf:af:06:2d:55:cd:47:21:8e:3a:
fa:bb:cd:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 23:32:35 2025 by rpki-client on console.sobornost.net