Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/3137362e35382e39322e302f32342d3234203d3e203336323336.roa
File: 3137362e35382e39322e302f32342d3234203d3e203336323336.roa (raw, json)
Hash identifier: CAsExNWbYohtw18vjHjopTq3HSZ5RVHlBhTIRC+Giw0=
Subject key identifier: 79:22:7E:43:44:5E:36:04:0D:F6:23:09:AF:FD:12:99:FB:51:15:CD
Certificate issuer: /CN=eb2c7e62503b0634eb4ab53f88c06950ac76dcd1
Certificate serial: 4D4B6E1D9927343C1DFE247FE41DECF8F52C4196
Authority key identifier: EB:2C:7E:62:50:3B:06:34:EB:4A:B5:3F:88:C0:69:50:AC:76:DC:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/3137362e35382e39322e302f32342d3234203d3e203336323336.roa
Signing time: Mon 04 Aug 2025 23:14:00 +0000
ROA not before: Mon 04 Aug 2025 23:09:00 +0000
ROA not after: Mon 03 Aug 2026 23:14:00 +0000
asID: 36236
IP address blocks: 176.58.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.crl
rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.mft
rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 12:42:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:4b:6e:1d:99:27:34:3c:1d:fe:24:7f:e4:1d:ec:f8:f5:2c:41:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb2c7e62503b0634eb4ab53f88c06950ac76dcd1
Validity
Not Before: Aug 4 23:09:00 2025 GMT
Not After : Aug 3 23:14:00 2026 GMT
Subject: CN=79227E43445E36040DF62309AFFD1299FB5115CD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:31:e5:e5:62:84:54:31:80:bd:e7:3d:35:b2:
86:54:75:32:d4:5f:80:4f:a3:d0:0a:8a:9f:11:df:
2f:48:06:0a:29:3d:88:5b:75:32:2d:ad:23:c3:8e:
64:42:97:c0:1c:88:21:d5:88:fb:49:e3:84:b7:94:
b4:05:1f:a8:b5:58:03:3c:89:90:98:b7:57:35:bd:
41:eb:e5:aa:fd:e4:3e:41:92:d3:2e:22:c7:52:a6:
62:ff:72:0d:b1:4b:d6:13:24:96:c9:70:2e:36:0d:
4b:71:73:26:f5:22:35:67:de:23:97:30:08:b4:80:
e1:be:b9:b7:e9:42:27:fa:41:7e:73:f8:5e:fd:d2:
fb:4c:0c:83:64:d7:ce:5c:dc:f1:04:f4:6b:d9:64:
b6:8f:31:e0:31:93:81:e3:c1:17:bf:a9:3f:c0:d9:
03:6c:9a:54:87:6a:a6:f7:7d:de:46:0c:b4:66:e1:
69:74:06:e6:48:dd:a2:1c:c7:4e:c8:26:81:ce:5d:
78:4e:6e:f8:ec:35:e6:0e:98:6c:e6:d4:9c:ac:eb:
b0:ea:da:15:1b:78:01:2e:7f:e2:dd:e2:ba:78:da:
f9:f6:cd:1f:09:3a:41:75:03:21:fb:55:fe:f3:85:
97:10:4b:3b:b4:00:71:cc:73:81:fa:70:a2:54:56:
ed:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:22:7E:43:44:5E:36:04:0D:F6:23:09:AF:FD:12:99:FB:51:15:CD
X509v3 Authority Key Identifier:
keyid:EB:2C:7E:62:50:3B:06:34:EB:4A:B5:3F:88:C0:69:50:AC:76:DC:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/3137362e35382e39322e302f32342d3234203d3e203336323336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.58.92.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:23:6e:f9:e2:f0:c6:a4:7c:e1:13:88:15:1f:75:c5:f9:a3:
0a:bf:6f:0e:55:e9:b0:44:15:50:cf:a2:a4:95:69:79:bf:a4:
84:8a:5c:8e:40:3a:15:38:bd:cc:70:bb:fc:a2:34:2b:7a:2f:
98:68:ef:14:d8:cf:d1:7b:d7:2f:f7:31:c9:4c:ec:c4:43:f3:
69:ef:dd:f5:78:23:e6:d3:53:05:03:ab:f7:d2:0d:e1:16:5e:
dc:5d:7f:67:5d:70:6e:2d:79:05:64:66:90:8c:2b:39:75:db:
41:6a:d3:0d:97:f4:3e:61:2b:f7:da:25:12:bb:ba:8a:8a:3a:
e6:2b:51:0f:42:4b:63:9e:cd:56:05:9d:ac:c7:a1:ae:2b:e2:
6a:2e:b5:3d:ec:6c:e5:b8:e9:6d:ba:90:ba:6b:ed:5f:5c:de:
81:fb:63:28:81:3f:5c:75:a5:d6:c6:ce:02:e3:fb:6a:e8:69:
e5:42:d0:43:65:2e:e9:46:49:07:d8:82:58:cc:c4:b5:f5:c7:
17:92:a0:c0:b1:8b:08:b3:39:8b:d2:f6:c5:77:75:e9:ef:c4:
1b:ff:81:89:80:df:9c:67:d6:f2:38:d6:03:eb:8c:3e:a4:18:
9f:8a:bf:2e:e6:d7:25:80:dc:e9:a2:4c:0e:ef:0b:91:e2:5f:
7f:42:c8:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 05:14:15 2025 by rpki-client