Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/3137362e35382e38382e302f32342d3234203d3e203336323336.roa
File: 3137362e35382e38382e302f32342d3234203d3e203336323336.roa (raw, json)
Hash identifier: XLLnLIwg4f4JUvhyUyBWY7b7uM0nQtb+ULW5BGI9hIg=
Subject key identifier: F7:F7:4E:32:B3:5A:3A:FE:6B:D7:6E:AC:D7:4D:9C:15:A1:E7:38:65
Certificate issuer: /CN=eb2c7e62503b0634eb4ab53f88c06950ac76dcd1
Certificate serial: 2420E199CEC54E101E6CAED01917BBCC8E197CA2
Authority key identifier: EB:2C:7E:62:50:3B:06:34:EB:4A:B5:3F:88:C0:69:50:AC:76:DC:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/3137362e35382e38382e302f32342d3234203d3e203336323336.roa
Signing time: Mon 04 Aug 2025 23:14:00 +0000
ROA not before: Mon 04 Aug 2025 23:09:00 +0000
ROA not after: Mon 03 Aug 2026 23:14:00 +0000
asID: 36236
IP address blocks: 176.58.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.crl
rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.mft
rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 12:42:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:20:e1:99:ce:c5:4e:10:1e:6c:ae:d0:19:17:bb:cc:8e:19:7c:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb2c7e62503b0634eb4ab53f88c06950ac76dcd1
Validity
Not Before: Aug 4 23:09:00 2025 GMT
Not After : Aug 3 23:14:00 2026 GMT
Subject: CN=F7F74E32B35A3AFE6BD76EACD74D9C15A1E73865
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ce:90:87:b9:9a:0a:af:42:6d:10:6d:60:3b:
c0:18:7f:d9:63:b2:41:0c:45:d8:2f:8c:b1:4d:1f:
1e:21:82:e0:82:96:83:ee:8d:a2:cc:1c:4c:2a:f0:
72:7f:bd:b8:aa:42:a7:5c:ff:38:5d:a9:3a:67:a6:
1c:87:db:2d:40:33:33:58:e7:a2:73:3e:2b:c0:f6:
1e:d6:18:3a:4f:4d:b0:1f:b3:3d:22:ec:9e:33:60:
2b:f9:87:72:f0:62:9b:77:45:af:e4:cc:46:32:ae:
a9:5e:fe:27:36:13:f7:b1:88:7a:d5:e6:db:9e:63:
32:28:2e:ad:07:06:c7:8e:2f:cb:8c:32:86:12:34:
4f:83:5a:20:3b:d2:cb:22:98:cc:ac:67:d8:a2:55:
e0:e7:7f:20:1a:6c:b9:15:19:f6:fa:2e:13:b9:d6:
be:4b:26:bc:62:c9:b0:73:38:ac:c9:69:21:29:52:
0f:7e:c2:38:92:89:45:64:c3:87:33:be:7a:ef:1f:
06:ef:3b:95:a7:b8:3a:3b:16:ef:82:3a:9b:0a:52:
9c:9d:ac:b0:31:98:6b:d8:20:55:e6:87:a7:c8:d6:
54:d2:94:9f:2f:8a:0e:41:b4:50:51:25:32:6c:1e:
8e:3a:63:ec:6a:af:89:31:49:b2:44:19:d5:6a:d1:
39:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:F7:4E:32:B3:5A:3A:FE:6B:D7:6E:AC:D7:4D:9C:15:A1:E7:38:65
X509v3 Authority Key Identifier:
keyid:EB:2C:7E:62:50:3B:06:34:EB:4A:B5:3F:88:C0:69:50:AC:76:DC:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/3137362e35382e38382e302f32342d3234203d3e203336323336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.58.88.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:e6:62:be:33:29:91:08:ac:3a:31:65:91:11:dd:17:fd:11:
a1:02:6a:22:b6:0f:25:6b:99:e3:79:f2:47:ea:ee:b5:37:cb:
6e:bb:df:10:1a:44:33:fe:64:f0:8e:2f:70:93:9c:b7:52:3f:
11:5f:98:d5:02:2e:7f:11:47:07:03:6c:96:f9:58:6e:50:e8:
fc:98:20:bb:e9:4f:cb:18:07:6d:e1:ee:9e:df:75:42:dc:75:
4d:d2:76:de:30:49:35:e6:f0:94:92:42:b4:5f:56:3d:e5:43:
6d:5f:3a:e4:eb:a6:e1:a9:b9:12:eb:ad:86:3e:7c:73:85:d8:
ad:6a:c7:4c:74:6f:68:80:ac:b8:19:d8:77:29:7f:0c:60:a1:
a7:ad:2d:af:01:fb:93:cb:41:46:25:3d:e5:d1:60:5f:63:f3:
be:ce:62:e4:45:71:e4:9b:d4:22:4d:c0:db:5a:e3:de:ed:56:
aa:79:d6:6b:d8:bd:a0:2b:ef:2f:cb:96:75:b5:ae:ca:6e:ec:
5d:8a:dc:17:6c:d0:b0:f1:a1:91:a7:98:43:3b:16:56:0d:75:
c5:98:95:62:32:f8:11:ab:9b:85:59:d4:3d:be:76:59:d1:a7:
ca:5c:12:2c:f2:d6:d1:80:fa:f7:bf:80:cc:73:b1:7a:f8:86:
5f:10:d1:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:40:40 2025 by rpki-client