Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS214451.roa
File: AS214451.roa (raw, json)
Hash identifier: YSBH6X/N5vcnOY8XPu2E2lbPY6oVIDSEpTarPUT6yJc=
Subject key identifier: 25:5C:E6:04:79:51:61:7A:C7:14:CF:44:D6:D8:90:F3:8E:07:51:C8
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 2C308E873B660CAA2CEA7BA8A422B19DB3B47273
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS214451.roa
Signing time: Thu 10 Apr 2025 06:11:27 +0000
ROA not before: Thu 10 Apr 2025 06:06:27 +0000
ROA not after: Thu 09 Apr 2026 06:11:27 +0000
asID: 214451
IP address blocks: 195.184.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 07:09:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:30:8e:87:3b:66:0c:aa:2c:ea:7b:a8:a4:22:b1:9d:b3:b4:72:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Apr 10 06:06:27 2025 GMT
Not After : Apr 9 06:11:27 2026 GMT
Subject: CN=255CE6047951617AC714CF44D6D890F38E0751C8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6d:4d:57:8a:f4:d8:6d:f1:a7:98:cf:c4:91:
a7:38:0c:88:52:57:ca:3b:5c:83:42:1d:b9:14:0a:
61:9c:6c:c6:ea:60:a3:ac:b4:c7:d1:93:ba:67:17:
f5:b3:9a:33:98:0c:ff:79:ba:34:f5:9e:33:29:d5:
02:73:e5:78:d4:3b:08:4f:0d:38:71:d9:3e:d0:49:
71:8a:5c:05:56:79:d3:2c:48:28:f4:08:ad:7b:e7:
7c:23:f6:a4:38:21:e7:88:43:76:9a:ce:a3:ea:e2:
24:18:46:c8:37:da:1d:c2:c7:27:1b:7a:1f:7b:c7:
e0:eb:14:5f:82:cb:2b:93:7c:52:ab:70:82:90:5b:
1e:73:fa:08:5f:c5:eb:e6:92:34:08:4a:5d:55:e0:
fc:a9:94:ff:68:00:3e:69:e6:10:47:3f:aa:42:8e:
24:c4:17:be:e8:77:aa:35:c0:24:e9:06:6e:28:d2:
45:de:10:39:b0:d8:60:85:4a:90:f1:05:e7:57:75:
69:40:ef:55:56:75:1e:fa:a5:a9:99:9f:ae:38:0e:
8c:08:76:70:91:df:7a:ba:d8:4e:00:0d:8e:f1:e0:
ca:0c:63:74:04:3d:86:62:5d:0d:6b:cc:0f:f8:ce:
13:3d:5d:6c:a9:34:df:5c:d5:fe:51:2f:a5:18:34:
30:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:5C:E6:04:79:51:61:7A:C7:14:CF:44:D6:D8:90:F3:8E:07:51:C8
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS214451.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.184.247.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:22:dc:b6:74:af:51:cd:1e:83:58:28:55:52:98:c6:e1:45:
35:e2:97:4e:68:0e:3c:99:b2:fc:3b:8b:bb:e0:16:09:44:a7:
6b:9e:ac:b7:b5:fa:64:04:84:a0:58:21:a8:e3:80:a7:22:e5:
89:e6:0c:47:1d:74:a0:4e:26:ff:24:97:51:93:a8:7e:a7:ac:
13:d3:75:6d:8f:ea:44:df:e1:87:9b:57:fc:6d:38:8e:28:3a:
f0:5d:c6:02:c6:bd:59:c4:61:0d:75:97:59:ae:b1:2c:cf:e3:
b3:bb:d2:a5:92:c5:b1:c0:2c:54:0e:8e:be:c0:2e:7c:68:b4:
d2:fa:ea:d3:5c:31:7e:50:cc:71:99:24:18:bd:22:82:cd:c3:
44:b6:24:a9:21:3f:f9:08:6c:f7:45:55:39:4b:d9:d7:96:53:
22:66:a8:ee:1b:1f:e4:37:2f:84:54:6d:23:ac:f1:6c:cf:d7:
08:50:21:42:ba:d5:a9:16:64:25:06:88:19:d1:fa:68:90:3c:
45:71:10:70:52:fd:9c:4d:cd:e8:69:22:cb:b3:32:b0:ca:ab:
e6:16:bd:66:a9:41:c6:45:d2:c1:fb:62:fa:f9:c9:15:0b:6f:
79:88:e5:5e:d3:73:bf:0a:63:0f:81:97:93:a5:d4:d9:26:dd:
a6:61:3d:7f
-----BEGIN CERTIFICATE-----
MIIE5TCCA82gAwIBAgIULDCOhztmDKos6nuopCKxnbO0cnMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzk5NDM4ZjFiMTc2MmFlZWY4YTM1Y2Y0ZTZjYmFlOTc2
OTliZDAyMDAeFw0yNTA0MTAwNjA2MjdaFw0yNjA0MDkwNjExMjdaMDMxMTAvBgNV
BAMTKDI1NUNFNjA0Nzk1MTYxN0FDNzE0Q0Y0NEQ2RDg5MEYzOEUwNzUxQzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCybU1XivTYbfGnmM/Ekac4DIhS
V8o7XINCHbkUCmGcbMbqYKOstMfRk7pnF/WzmjOYDP95ujT1njMp1QJz5XjUOwhP
DThx2T7QSXGKXAVWedMsSCj0CK1753wj9qQ4IeeIQ3aazqPq4iQYRsg32h3Cxycb
eh97x+DrFF+CyyuTfFKrcIKQWx5z+ghfxevmkjQISl1V4PyplP9oAD5p5hBHP6pC
jiTEF77od6o1wCTpBm4o0kXeEDmw2GCFSpDxBedXdWlA71VWdR76pamZn644DowI
dnCR33q62E4ADY7x4MoMY3QEPYZiXQ1rzA/4zhM9XWypNN9c1f5RL6UYNDA7AgMB
AAGjggHvMIIB6zAdBgNVHQ4EFgQUJVzmBHlRYXrHFM9E1tiQ844HUcgwHwYDVR0j
BBgwFoAUeZQ48bF2Ku74o1z05suul2mb0CAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi83OTk0MzhGMUIx
NzYyQUVFRjhBMzVDRjRFNkNCQUU5NzY5OUJEMDIwLmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZVpRNDhiRjJLdTc0bzF6MDVzdXVsMm1iMENBLmNlcjBwBggrBgEF
BQcBCwRkMGIwYAYIKwYBBQUHMAuGVHJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv
cmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5ZC8yL0FT
MjE0NDUxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAw7j3MA0GCSqGSIb3DQEBCwUAA4IBAQCLIty2dK9R
zR6DWChVUpjG4UU14pdOaA48mbL8O4u74BYJRKdrnqy3tfpkBISgWCGo44CnIuWJ
5gxHHXSgTib/JJdRk6h+p6wT03Vtj+pE3+GHm1f8bTiOKDrwXcYCxr1ZxGENdZdZ
rrEsz+Ozu9KlksWxwCxUDo6+wC58aLTS+urTXDF+UMxxmSQYvSKCzcNEtiSpIT/5
CGz3RVU5S9nXllMiZqjuGx/kNy+EVG0jrPFsz9cIUCFCutWpFmQlBogZ0fpokDxF
cRBwUv2cTc3oaSLLszKwyqvmFr1mqUHGRdLB+2L6+ckVC295iOVe03O/CmMPgZeT
pdTZJt2mYT1/
-----END CERTIFICATE-----
Generated at Sat Apr 26 12:49:28 2025 by rpki-client