Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/326130303a646438303a33623a3a2f34382d3438203d3e203336323336.roa
File: 326130303a646438303a33623a3a2f34382d3438203d3e203336323336.roa (raw, json)
Hash identifier: HItUIPUgsDooRBW8MAPxC3qe++f7TNF8mvIygmbRYu0=
Subject key identifier: A1:E7:69:CD:05:EA:52:EC:93:D1:36:EE:0B:3B:B5:5C:2E:37:FC:28
Certificate issuer: /CN=eb2c7e62503b0634eb4ab53f88c06950ac76dcd1
Certificate serial: 41A511EA15101CFB62FEDA4BE29EE0FADD2F0CF3
Authority key identifier: EB:2C:7E:62:50:3B:06:34:EB:4A:B5:3F:88:C0:69:50:AC:76:DC:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/326130303a646438303a33623a3a2f34382d3438203d3e203336323336.roa
Signing time: Mon 04 Aug 2025 20:13:53 +0000
ROA not before: Mon 04 Aug 2025 20:08:53 +0000
ROA not after: Mon 03 Aug 2026 20:13:53 +0000
asID: 36236
IP address blocks: 2a00:dd80:3b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.crl
rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.mft
rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 12:42:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:a5:11:ea:15:10:1c:fb:62:fe:da:4b:e2:9e:e0:fa:dd:2f:0c:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb2c7e62503b0634eb4ab53f88c06950ac76dcd1
Validity
Not Before: Aug 4 20:08:53 2025 GMT
Not After : Aug 3 20:13:53 2026 GMT
Subject: CN=A1E769CD05EA52EC93D136EE0B3BB55C2E37FC28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:fc:20:ac:26:09:0d:08:36:38:f7:8c:f4:80:
6a:ae:38:39:d6:5c:7f:59:ec:97:79:a7:98:d6:50:
e0:15:55:a2:aa:c9:96:ed:64:f2:0b:d2:9b:89:4d:
75:8e:59:db:39:c1:e3:c1:fb:78:65:14:2b:7d:d9:
12:36:c6:f7:fa:90:89:e9:55:6a:cf:c7:30:38:f8:
87:63:44:74:27:68:bc:30:10:38:3a:87:b8:0b:51:
3b:52:ab:57:d4:bf:73:b8:ef:de:ae:44:3b:0f:d5:
ec:e1:86:8e:c1:ad:4c:77:cc:3f:d9:11:1c:8b:d8:
a5:a1:0b:55:31:1c:50:70:b4:4c:30:36:92:d8:dc:
85:db:b9:d3:ea:ca:69:9c:c5:bc:ae:7d:51:88:a6:
c4:b0:a0:74:57:ee:89:9f:4d:95:55:45:5e:ba:a9:
9c:bd:03:4d:c2:5b:0a:96:16:74:84:58:4a:41:2c:
33:5e:11:20:88:2b:20:ae:ba:8f:b7:13:37:13:21:
8c:4a:ad:6f:f0:80:b3:66:74:f6:5b:3c:c1:f6:52:
80:19:e3:6e:ad:e8:35:f0:9a:ee:48:23:9a:cb:07:
42:18:b2:3a:c5:fe:31:c2:ad:68:c3:96:7f:af:0b:
04:28:93:7d:36:b2:68:21:a8:b3:46:34:5a:d3:ef:
57:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:E7:69:CD:05:EA:52:EC:93:D1:36:EE:0B:3B:B5:5C:2E:37:FC:28
X509v3 Authority Key Identifier:
keyid:EB:2C:7E:62:50:3B:06:34:EB:4A:B5:3F:88:C0:69:50:AC:76:DC:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/326130303a646438303a33623a3a2f34382d3438203d3e203336323336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:dd80:3b::/48
Signature Algorithm: sha256WithRSAEncryption
1c:72:44:74:04:ea:b0:0d:9d:ca:2b:ed:69:77:88:ef:49:4d:
1c:5a:6b:90:70:9b:d6:56:1e:09:9d:db:26:fd:de:96:f1:5d:
5a:c6:14:79:89:fd:2f:54:dd:65:59:22:9d:6c:97:4c:b5:f3:
99:b2:62:69:1c:b1:ee:20:ba:1c:4e:2f:64:3b:f2:45:2e:8f:
e3:5c:c5:7e:db:2f:6d:42:13:17:fe:c4:5e:cf:47:7e:a1:83:
53:72:7f:55:f1:28:f9:65:64:38:b6:a1:f2:cc:7f:54:8f:6f:
e5:9b:75:d7:0d:ff:68:85:e3:72:a0:de:3e:12:0a:53:0d:d6:
8e:65:da:33:c8:76:fc:cb:8a:56:c2:ca:56:1e:b4:0b:d2:0e:
e4:9d:48:6c:66:8a:d6:81:e9:06:e1:e1:53:6e:5b:6d:4d:ae:
4a:6c:ec:d6:bd:57:47:85:e9:56:a3:57:3b:5d:b0:f3:3c:65:
d3:d8:94:a2:f4:12:47:ce:96:d0:bb:c5:bd:e2:af:46:52:02:
10:2f:63:7c:bb:3f:e4:07:99:a1:82:66:08:44:02:1c:f3:4a:
ec:c3:d9:cc:b0:df:fe:83:d0:e9:84:10:f1:c2:dc:96:fc:d9:
fe:19:a1:97:aa:56:02:86:9f:82:15:cc:29:9e:b3:ca:b8:21:
e0:65:1c:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:33:25 2025 by rpki-client