Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/3138352e34302e3233342e302f32342d3234203d3e203336323336.roa
File: 3138352e34302e3233342e302f32342d3234203d3e203336323336.roa (raw, json)
Hash identifier: dUam2TsSVGrS+zw/7JfSb871BS0cL+u8ENoA9blgLr8=
Subject key identifier: F9:41:28:16:2A:68:1F:77:62:80:86:E4:4F:66:B9:C7:B0:4A:55:E5
Certificate issuer: /CN=eb2c7e62503b0634eb4ab53f88c06950ac76dcd1
Certificate serial: 75FD422298700A1625AE727FF6A8A3D377349CAB
Authority key identifier: EB:2C:7E:62:50:3B:06:34:EB:4A:B5:3F:88:C0:69:50:AC:76:DC:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/3138352e34302e3233342e302f32342d3234203d3e203336323336.roa
Signing time: Mon 04 Aug 2025 22:13:58 +0000
ROA not before: Mon 04 Aug 2025 22:08:58 +0000
ROA not after: Mon 03 Aug 2026 22:13:58 +0000
asID: 36236
IP address blocks: 185.40.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.crl
rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.mft
rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 01:08:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:fd:42:22:98:70:0a:16:25:ae:72:7f:f6:a8:a3:d3:77:34:9c:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb2c7e62503b0634eb4ab53f88c06950ac76dcd1
Validity
Not Before: Aug 4 22:08:58 2025 GMT
Not After : Aug 3 22:13:58 2026 GMT
Subject: CN=F94128162A681F77628086E44F66B9C7B04A55E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d9:6a:77:9c:0e:8c:0b:61:bb:d2:95:46:98:
6d:eb:cd:72:23:bd:32:cc:48:56:78:6c:5b:11:b1:
db:e2:85:b8:5f:c0:1b:da:2e:08:08:56:3a:15:52:
81:ce:c8:18:82:90:58:ae:79:71:80:28:6a:e4:6a:
27:4f:e6:9e:d4:d0:0f:23:d3:de:48:6d:8f:34:f6:
59:bb:8d:8b:6a:51:0e:1e:45:ee:61:df:ad:d0:ff:
4d:cb:21:bd:6a:2b:e4:f1:e8:05:41:08:20:58:4b:
3b:c3:36:e8:8e:b8:8b:ea:b1:38:33:6b:22:fb:cb:
be:8c:67:85:f0:3f:43:84:bc:c7:99:35:6e:02:66:
3a:11:12:07:65:c4:c3:24:11:4d:45:8c:44:ad:31:
e2:92:10:85:7c:df:e7:f0:c0:bb:3a:1a:0f:49:0d:
99:54:7e:45:83:04:39:b8:ea:21:5f:45:61:43:d6:
b9:c3:ae:7c:b7:4f:0a:b9:bf:f0:59:b7:65:b1:a6:
51:5e:e4:75:bd:41:2b:a2:e8:4e:5b:89:c5:56:24:
74:3d:63:12:bc:e7:d8:e5:01:88:aa:4f:a7:99:87:
b9:42:49:6d:03:b0:d3:d3:a8:b0:61:cc:81:c8:f7:
ef:a5:ba:a3:0e:3c:6e:af:03:98:46:a0:ae:0b:e9:
6e:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:41:28:16:2A:68:1F:77:62:80:86:E4:4F:66:B9:C7:B0:4A:55:E5
X509v3 Authority Key Identifier:
keyid:EB:2C:7E:62:50:3B:06:34:EB:4A:B5:3F:88:C0:69:50:AC:76:DC:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/3138352e34302e3233342e302f32342d3234203d3e203336323336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.40.234.0/24
Signature Algorithm: sha256WithRSAEncryption
51:16:f2:62:4b:30:68:22:80:0e:10:bf:4d:dc:1a:0c:d6:99:
42:95:8b:0d:f5:41:47:bc:e6:b5:22:0a:eb:75:f5:f0:9a:7e:
88:1b:50:91:8c:b9:e3:8d:fc:58:5b:cf:1f:e3:c9:40:e3:a4:
73:e6:e3:a3:96:6d:27:49:c1:51:10:a8:c6:ec:55:ef:83:90:
7d:a1:5a:47:9f:64:3f:1c:97:3b:f3:4f:11:92:25:c2:6e:8d:
56:3a:d2:04:f2:e5:90:90:06:5f:9e:d4:27:45:7c:2c:7e:04:
0c:50:06:c3:15:c2:18:4c:10:09:2e:b0:0c:b4:4b:f3:a4:6d:
23:63:24:52:00:a0:1c:0b:09:13:46:97:9a:c3:5f:ee:58:ae:
b5:b4:04:c4:f3:1f:5c:58:09:4d:87:d8:8d:74:d2:42:01:52:
c2:ed:be:a3:03:9d:27:c9:72:5c:86:66:3f:07:10:75:5b:31:
22:2a:c6:f0:67:45:f1:b4:23:b6:fa:dc:22:79:47:0e:61:aa:
3c:47:4e:24:de:fa:3e:cb:c9:95:95:cc:10:79:3f:78:e7:4f:
9f:38:58:21:ba:68:88:34:46:72:37:26:1e:89:89:50:41:e0:
6c:29:a9:d2:0d:9a:f7:b6:71:81:6d:8d:13:d7:9d:bf:8a:2c:
53:61:83:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 10:14:20 2025 by rpki-client