Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/3138352e3137382e3230312e302f32342d3234203d3e203336323336.roa
File: 3138352e3137382e3230312e302f32342d3234203d3e203336323336.roa (raw, json)
Hash identifier: BeRKlYj/Q8Fk4se/hw07RI7eHttma0/eth6+lVeUpJM=
Subject key identifier: B5:94:15:4E:1F:2B:DD:AC:87:D4:F5:5E:E3:E6:4F:80:06:4D:A8:A4
Certificate issuer: /CN=eb2c7e62503b0634eb4ab53f88c06950ac76dcd1
Certificate serial: 446C45E135F1F30CAF58777F430F203158F6BC57
Authority key identifier: EB:2C:7E:62:50:3B:06:34:EB:4A:B5:3F:88:C0:69:50:AC:76:DC:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/3138352e3137382e3230312e302f32342d3234203d3e203336323336.roa
Signing time: Thu 24 Jul 2025 20:13:49 +0000
ROA not before: Thu 24 Jul 2025 20:08:49 +0000
ROA not after: Thu 23 Jul 2026 20:13:49 +0000
asID: 36236
IP address blocks: 185.178.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.crl
rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.mft
rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:6c:45:e1:35:f1:f3:0c:af:58:77:7f:43:0f:20:31:58:f6:bc:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb2c7e62503b0634eb4ab53f88c06950ac76dcd1
Validity
Not Before: Jul 24 20:08:49 2025 GMT
Not After : Jul 23 20:13:49 2026 GMT
Subject: CN=B594154E1F2BDDAC87D4F55EE3E64F80064DA8A4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:90:a4:ae:eb:8a:0a:3e:c8:fe:69:4f:36:49:
2d:10:6c:25:93:96:96:84:cf:b8:09:e4:86:7c:a7:
03:f7:80:6b:c2:f2:15:9f:21:c2:ba:ff:f4:cb:2b:
f7:46:e1:c6:40:ac:d8:77:80:35:7c:83:28:a2:c7:
4e:3f:70:e1:46:fb:78:3f:cc:07:bd:66:65:24:27:
6c:7f:c3:62:41:4b:5e:12:ce:f3:64:43:a5:79:8e:
7c:4d:a3:e5:8a:45:75:79:6c:30:5b:79:fa:9b:ec:
ab:b5:80:90:fc:c6:5e:c8:a3:63:dc:f8:ae:d3:59:
49:d9:77:ec:d3:cd:ea:b3:4b:85:7e:11:9c:6a:bc:
c3:3b:19:f7:f0:6f:d7:9f:a5:3b:b8:81:3c:74:5b:
e2:fb:18:39:49:bd:7a:85:6d:05:a3:09:b5:db:ec:
20:9f:1d:51:63:47:54:36:aa:2e:e8:22:16:2a:f8:
26:2c:78:56:bb:d6:09:75:9f:7c:1e:85:0d:33:86:
f3:8c:7b:4e:de:f6:15:ec:2f:52:e2:9d:26:96:8e:
62:37:78:72:88:5b:fc:17:a6:5e:2c:20:55:09:e9:
0c:de:87:4f:81:53:ec:ea:2a:3e:74:69:20:32:69:
0d:9b:dd:15:0a:41:8d:08:0d:ea:44:e8:2a:dc:b0:
3a:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:94:15:4E:1F:2B:DD:AC:87:D4:F5:5E:E3:E6:4F:80:06:4D:A8:A4
X509v3 Authority Key Identifier:
keyid:EB:2C:7E:62:50:3B:06:34:EB:4A:B5:3F:88:C0:69:50:AC:76:DC:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/3138352e3137382e3230312e302f32342d3234203d3e203336323336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.178.201.0/24
Signature Algorithm: sha256WithRSAEncryption
86:a4:f6:5d:cf:b1:fa:47:c5:3f:61:3e:6f:05:65:9f:89:81:
9b:98:1a:7e:a9:6c:2b:cc:8e:eb:83:77:b0:50:3b:09:ac:b8:
a7:94:7d:9f:f8:48:f4:a4:bc:73:9f:db:e7:17:de:4d:49:b6:
3c:d9:39:34:55:89:3a:d8:2a:51:2e:84:d9:a2:2d:39:17:2f:
aa:de:fc:86:f1:34:f1:ee:33:10:e4:00:0f:97:fb:43:0b:e3:
1f:e3:f7:1d:e5:6e:d1:42:1e:ec:45:92:db:2e:49:29:97:8e:
4a:00:b7:c8:69:98:6d:f4:0a:bc:d9:c0:7b:a9:24:f3:8c:af:
ef:4e:05:c1:f5:ba:be:14:9e:7a:d6:bb:fa:19:ab:2a:65:a0:
e8:3a:44:06:32:75:7f:dd:9e:c4:b8:aa:e2:12:3a:17:49:92:
3d:78:cd:65:f3:21:0a:90:dc:30:af:3f:8c:90:a4:e2:86:4e:
f9:d2:87:46:89:cc:fc:ad:ce:06:92:3f:e8:68:87:76:bb:74:
dc:0c:8f:4e:fb:fa:47:52:5e:5a:64:c0:84:d1:65:55:f8:79:
c9:10:5b:52:dc:db:63:55:38:c7:ed:6d:20:b5:62:d0:9a:29:
86:b9:5e:67:ad:4d:62:05:45:20:8b:3e:b0:0a:dd:08:2e:f0:
bf:12:7a:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 19:29:38 2025 by rpki-client