Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/3138352e33342e332e302f32342d3234203d3e203336323336.roa
File: 3138352e33342e332e302f32342d3234203d3e203336323336.roa (raw, json)
Hash identifier: jwsaNlRkMCT9WV4qw52Abcc2w2tZCotf+rXdynOvAwk=
Subject key identifier: 4B:9E:35:E1:A6:8D:ED:D0:85:52:AD:AA:51:0D:12:C0:D2:A6:A1:2F
Certificate issuer: /CN=eb2c7e62503b0634eb4ab53f88c06950ac76dcd1
Certificate serial: 21AD86184524F3B7558CDA193A02EFE549462377
Authority key identifier: EB:2C:7E:62:50:3B:06:34:EB:4A:B5:3F:88:C0:69:50:AC:76:DC:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/3138352e33342e332e302f32342d3234203d3e203336323336.roa
Signing time: Thu 24 Jul 2025 19:13:48 +0000
ROA not before: Thu 24 Jul 2025 19:08:48 +0000
ROA not after: Thu 23 Jul 2026 19:13:48 +0000
asID: 36236
IP address blocks: 185.34.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.crl
rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.mft
rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 12:42:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:ad:86:18:45:24:f3:b7:55:8c:da:19:3a:02:ef:e5:49:46:23:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb2c7e62503b0634eb4ab53f88c06950ac76dcd1
Validity
Not Before: Jul 24 19:08:48 2025 GMT
Not After : Jul 23 19:13:48 2026 GMT
Subject: CN=4B9E35E1A68DEDD08552ADAA510D12C0D2A6A12F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:7e:ec:a7:44:d7:86:38:cc:95:7e:28:93:9e:
dd:4a:78:46:a0:c6:e8:0e:b6:8a:5a:85:29:ab:ca:
ed:f5:9a:45:7d:6c:2f:e1:70:bc:c9:03:69:1e:36:
ab:fa:95:17:ac:89:30:1f:0e:f8:b0:b2:0c:c9:9e:
39:85:a8:1c:2c:10:7b:64:5f:4c:88:0b:d8:cb:7f:
e4:b7:50:77:5d:f7:86:ed:02:07:3c:dd:23:52:42:
97:fa:39:2e:92:b0:49:c7:33:c5:46:36:b8:b2:2a:
3f:67:23:fa:4d:ec:29:1d:96:0d:f5:5b:c4:8c:77:
55:cf:b7:88:21:bd:88:25:81:c9:c9:62:a6:b1:30:
e4:64:af:26:dc:34:3c:ef:f4:81:4b:02:71:c3:cc:
c9:76:c4:fb:18:26:99:0e:f5:bb:ca:b5:ac:61:86:
1a:24:c1:58:39:7e:80:0f:ce:26:4a:d3:ed:fd:09:
f7:d0:4a:71:66:95:60:18:4a:3c:ad:ff:df:da:4c:
69:1e:4b:d9:e3:4d:5c:e3:c8:de:58:22:06:d8:5d:
ef:85:58:58:d4:10:43:24:0c:5f:10:55:91:6f:d3:
2d:85:10:d5:03:fd:13:5c:e6:3b:0d:45:d8:73:0f:
c8:2e:36:f8:fd:8b:2b:cd:ea:5f:62:42:cd:7a:8d:
d0:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:9E:35:E1:A6:8D:ED:D0:85:52:AD:AA:51:0D:12:C0:D2:A6:A1:2F
X509v3 Authority Key Identifier:
keyid:EB:2C:7E:62:50:3B:06:34:EB:4A:B5:3F:88:C0:69:50:AC:76:DC:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/3138352e33342e332e302f32342d3234203d3e203336323336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.34.3.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:e9:fe:1f:e9:fa:7f:58:d7:8c:dd:f7:71:e3:a1:37:a3:ad:
a2:9e:04:f8:b2:09:66:f4:18:ad:7a:05:9e:af:2f:9b:99:a9:
23:ee:2f:5f:ff:82:c2:13:b3:2c:dd:37:71:a3:28:ec:41:1c:
43:eb:0a:83:15:72:2d:d7:ab:17:45:04:14:ad:2c:19:fd:d4:
24:1e:57:92:f5:da:86:99:e2:dd:1d:3e:35:a0:36:85:8c:e9:
21:bc:7f:f1:50:cf:c4:f2:29:44:59:df:19:45:54:92:ec:65:
fa:23:08:d9:a6:38:3c:b3:5d:c4:57:8f:ed:c6:04:96:44:00:
04:80:08:da:1c:89:78:5f:df:0d:c7:d2:4d:f3:70:f5:a5:5d:
bd:14:d3:6f:2b:97:92:a0:96:42:40:a1:93:11:20:b9:07:e7:
0e:ad:23:60:67:ba:5d:e1:7d:b3:c5:c7:9f:b9:f2:ff:86:bd:
f8:fb:bd:20:b9:76:79:1e:61:fd:f2:57:5b:b4:92:f6:b8:97:
02:6c:dc:30:3e:ec:ed:36:80:1c:93:0f:48:cf:5d:a0:93:15:
cf:30:6b:f4:bb:1c:97:e2:a8:78:7d:5f:e8:f3:c9:0d:a6:16:
10:a1:d2:aa:c0:1b:fa:3b:b2:fe:1b:01:6f:35:c4:4b:63:7c:
8c:92:bc:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:24:37 2025 by rpki-client