Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/11/3138352e3135352e37352e302f32342d3234203d3e20393435.roa
File: 3138352e3135352e37352e302f32342d3234203d3e20393435.roa (raw, json)
Hash identifier: WPn5J0ZJyOxbzpBehWL9SeR3ZFEYJFenOXb3iX/q+Zc=
Subject key identifier: 43:83:9D:C6:A9:FD:AD:15:71:2B:06:53:56:EC:D7:E5:02:D8:7C:96
Certificate issuer: /CN=d4700d8e6f022571a0b26fcd4c70c0408ea4ffc9
Certificate serial: 2DA9D2628D32600EA724DDD94C0BBD9FD0E75190
Authority key identifier: D4:70:0D:8E:6F:02:25:71:A0:B2:6F:CD:4C:70:C0:40:8E:A4:FF:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HANjm8CJXGgsm_NTHDAQI6k_8k.cer
Subject info access: rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/11/3138352e3135352e37352e302f32342d3234203d3e20393435.roa
Signing time: Mon 16 Jun 2025 21:51:16 +0000
ROA not before: Mon 16 Jun 2025 21:46:16 +0000
ROA not after: Mon 15 Jun 2026 21:51:16 +0000
asID: 945
IP address blocks: 185.155.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/11/D4700D8E6F022571A0B26FCD4C70C0408EA4FFC9.crl
rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/11/D4700D8E6F022571A0B26FCD4C70C0408EA4FFC9.mft
rsync://rpki.ripe.net/repository/DEFAULT/1HANjm8CJXGgsm_NTHDAQI6k_8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 07:42:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:a9:d2:62:8d:32:60:0e:a7:24:dd:d9:4c:0b:bd:9f:d0:e7:51:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4700d8e6f022571a0b26fcd4c70c0408ea4ffc9
Validity
Not Before: Jun 16 21:46:16 2025 GMT
Not After : Jun 15 21:51:16 2026 GMT
Subject: CN=43839DC6A9FDAD15712B065356ECD7E502D87C96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a6:52:52:a7:5a:00:b0:22:14:e1:70:96:a6:
77:7d:df:1c:b8:4b:a0:9f:2b:46:27:01:4d:dc:11:
19:70:f9:d6:b6:60:ea:07:ed:3a:c3:b2:ca:69:cb:
f0:0e:8d:fc:e0:1e:79:7c:cb:de:a3:ee:ac:cc:7d:
72:35:0b:37:ee:1e:4a:f7:4e:5a:23:4e:39:fc:8d:
b7:5f:b9:16:0e:1c:18:e6:bf:bd:f5:61:4f:9a:81:
31:69:79:0a:67:26:6f:90:83:0e:6b:4d:15:7a:23:
94:00:4f:ee:b9:f0:74:fc:60:79:06:d2:f9:82:c9:
8a:78:3c:14:a4:bf:44:0b:90:6d:89:87:e2:60:a8:
80:ce:d6:10:72:a5:e6:db:dd:84:0a:49:0c:c9:db:
0e:ef:b2:88:13:72:8d:0b:c4:ac:6c:a4:97:92:e6:
36:e6:54:ea:ba:68:05:17:af:b6:38:ae:62:a3:21:
b3:6f:9f:74:c6:81:83:cf:23:35:f0:d1:2c:9a:8f:
6d:66:05:4b:56:aa:44:59:d3:bb:2f:fc:29:18:eb:
75:6f:48:f2:b8:c0:78:4d:9b:6b:f0:11:9b:ab:54:
f2:87:8d:4c:a4:f0:2b:a6:3d:c1:6f:d3:14:08:e1:
40:b5:3a:03:d8:38:72:30:49:7a:86:20:67:ca:e2:
1a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:83:9D:C6:A9:FD:AD:15:71:2B:06:53:56:EC:D7:E5:02:D8:7C:96
X509v3 Authority Key Identifier:
keyid:D4:70:0D:8E:6F:02:25:71:A0:B2:6F:CD:4C:70:C0:40:8E:A4:FF:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/11/D4700D8E6F022571A0B26FCD4C70C0408EA4FFC9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HANjm8CJXGgsm_NTHDAQI6k_8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/11/3138352e3135352e37352e302f32342d3234203d3e20393435.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.155.75.0/24
Signature Algorithm: sha256WithRSAEncryption
51:08:8e:23:0a:4f:04:16:de:2e:3a:00:a3:1b:7d:35:38:75:
2c:be:f5:2f:c3:21:f9:a0:af:e9:db:e7:aa:3f:36:ce:e0:62:
6f:73:42:54:ed:4c:28:3b:68:33:99:7c:21:d4:95:a3:04:dd:
47:fd:d9:79:f5:e5:4b:03:cf:a1:22:56:da:f8:47:eb:4f:7a:
88:57:e4:89:9b:5f:f6:48:c2:30:e8:9a:dd:16:3f:97:aa:0d:
76:1d:64:bc:74:41:3c:ae:42:04:4e:51:40:02:17:0d:43:2f:
9d:92:85:92:80:78:0e:c8:15:32:fc:15:ac:ce:9f:74:21:40:
f5:d5:08:68:3f:9f:59:37:6d:2c:f5:24:a6:ca:6a:f4:ca:ff:
7b:3d:f0:68:59:df:5b:0f:24:11:c4:d6:bd:c3:6f:42:fb:d5:
9f:e2:c4:20:33:c1:c1:6c:39:83:70:5d:9d:78:d4:35:3f:d7:
d3:75:c1:64:d5:b3:5a:b6:2b:52:bc:48:78:a9:b9:63:4f:3e:
bf:bd:72:7b:9d:cd:68:96:9c:94:db:80:32:a7:13:2d:43:5a:
ed:5d:c0:35:55:23:a1:76:28:c5:b7:d7:9d:51:f8:0a:0b:ea:
50:9a:cd:c9:27:4d:be:3e:d6:95:58:33:60:f3:28:ad:ad:d3:
f7:3a:29:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 16:46:18 2025 by rpki-client