Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS54148.roa
File: AS54148.roa (raw, json)
Hash identifier: N3MfUh8RJlMi3j7ZrIusLan0Csb8CAzWfB/5YV/eQZo=
Subject key identifier: 23:5E:CC:D5:2B:DF:55:B7:CA:E5:AC:03:53:6B:2C:44:BF:B1:3B:F8
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 318EC028430CF9A5DF6525A3B6698360402790A2
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS54148.roa
Signing time: Tue 06 May 2025 04:31:47 +0000
ROA not before: Tue 06 May 2025 04:26:47 +0000
ROA not after: Tue 05 May 2026 04:31:47 +0000
asID: 54148
IP address blocks: 2a06:a005:2720::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:8e:c0:28:43:0c:f9:a5:df:65:25:a3:b6:69:83:60:40:27:90:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: May 6 04:26:47 2025 GMT
Not After : May 5 04:31:47 2026 GMT
Subject: CN=235ECCD52BDF55B7CAE5AC03536B2C44BFB13BF8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:40:9a:9e:3b:4d:3b:29:33:24:c6:0b:f8:e4:
2d:46:d4:b1:b8:bd:9a:9c:23:8b:71:2b:7d:57:d9:
9d:75:b9:92:62:ad:f8:66:bd:a9:46:92:64:54:26:
5b:1a:fc:8f:61:58:7a:21:e1:f3:d7:07:fb:b3:65:
6b:3b:f6:51:36:73:4a:18:0c:9e:c6:75:e9:21:0c:
6a:aa:f4:50:b4:70:17:bb:1f:a7:92:5b:00:ec:bf:
ed:12:cf:87:14:89:10:9c:b2:26:6d:17:8c:57:0a:
50:8e:97:ac:ff:06:2f:78:73:bc:68:e0:07:b1:b4:
5d:93:6b:11:be:67:b7:54:52:8a:a0:20:01:75:16:
67:ed:2c:72:eb:70:03:b4:e0:c3:f2:60:92:cc:55:
a4:d2:03:69:b7:21:5a:82:09:1a:80:92:e4:bb:83:
b6:8b:f3:c1:35:92:ba:1b:6c:38:e3:60:03:e0:4e:
04:4e:9c:73:79:bb:f6:15:cd:2a:01:4d:ed:51:71:
43:d4:56:8b:ac:b8:49:84:1e:dc:f5:0a:7e:96:d3:
18:92:a0:db:4a:8c:c2:d0:80:20:14:27:3f:e0:70:
16:cb:26:39:ff:94:99:ee:96:af:1b:e4:4b:5c:22:
eb:45:81:ee:da:64:30:35:21:63:a6:49:47:c4:ad:
a3:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:5E:CC:D5:2B:DF:55:B7:CA:E5:AC:03:53:6B:2C:44:BF:B1:3B:F8
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS54148.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:2720::/44
Signature Algorithm: sha256WithRSAEncryption
3e:19:2b:ac:21:09:cc:63:28:5f:16:8b:81:be:2a:98:69:5e:
16:f3:fc:1d:e8:84:60:26:99:0e:25:b6:bf:b3:42:4b:4c:09:
77:78:cf:94:0a:c3:fd:8d:b6:74:1c:64:36:18:55:3c:29:de:
16:4f:01:63:d4:91:83:52:03:9b:c9:0d:01:b1:28:c9:fe:ff:
5f:ff:46:5f:09:4a:52:1d:92:e5:e7:0b:cd:56:17:b0:d7:8b:
e2:8c:20:8e:8d:95:36:a0:c8:53:f0:60:8a:59:e1:8a:f7:b2:
18:23:44:9f:94:4a:7e:d6:95:04:2b:b7:fb:fe:07:ec:01:df:
ec:6b:58:bc:e1:b5:d2:e9:d6:5b:e6:47:f5:bf:e3:90:00:b4:
f4:2b:d0:6c:ee:a5:4c:8b:a5:2e:ab:f3:ce:47:73:b7:49:bb:
b1:ea:9c:21:e5:cc:4a:1b:df:0f:10:33:fc:e8:a5:26:c4:a9:
ae:a3:c2:94:3e:12:28:92:79:f0:e9:80:ef:3e:2f:31:84:7e:
43:0f:0c:ca:d0:fa:0c:47:17:45:27:8d:61:b4:df:95:98:1c:
07:0b:68:63:f5:e7:f5:ff:63:0b:22:aa:0f:ad:f7:fd:5f:9a:
fa:df:91:88:2b:f6:5e:54:29:d4:21:0b:72:df:3c:24:5f:63:
12:54:57:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 19:25:37 2025 by rpki-client