Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/3138352e33342e302e302f32342d3234203d3e203336323336.roa
File: 3138352e33342e302e302f32342d3234203d3e203336323336.roa (raw, json)
Hash identifier: zDlbaKE5vyd6zw+jpBPdg2Uq8ViE2g6Z+1zAOFzveQo=
Subject key identifier: 5A:84:73:F6:3B:C6:2C:FC:08:6C:B5:60:55:0F:73:87:17:C6:1D:C2
Certificate issuer: /CN=eb2c7e62503b0634eb4ab53f88c06950ac76dcd1
Certificate serial: 5271DADA7C9CD48CF0DA92FD8BD13E2865F700CF
Authority key identifier: EB:2C:7E:62:50:3B:06:34:EB:4A:B5:3F:88:C0:69:50:AC:76:DC:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/3138352e33342e302e302f32342d3234203d3e203336323336.roa
Signing time: Thu 01 May 2025 19:45:37 +0000
ROA not before: Thu 01 May 2025 19:40:37 +0000
ROA not after: Thu 30 Apr 2026 19:45:37 +0000
asID: 36236
IP address blocks: 185.34.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.crl
rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.mft
rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 15:56:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:71:da:da:7c:9c:d4:8c:f0:da:92:fd:8b:d1:3e:28:65:f7:00:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb2c7e62503b0634eb4ab53f88c06950ac76dcd1
Validity
Not Before: May 1 19:40:37 2025 GMT
Not After : Apr 30 19:45:37 2026 GMT
Subject: CN=5A8473F63BC62CFC086CB560550F738717C61DC2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ef:8a:33:68:ba:9e:5e:5f:8e:ff:d8:48:48:
80:9c:52:6e:bc:af:3c:a6:6e:b7:69:b6:d0:b8:53:
a1:2a:fa:61:f5:fd:92:b5:e9:62:59:90:9e:02:c6:
3c:40:b3:f7:42:ff:e8:18:b7:bf:09:3c:88:bb:30:
f3:1b:57:2e:e3:ef:ea:70:e2:34:24:b8:11:c7:6e:
af:8f:98:69:ca:24:14:e7:13:46:7b:1b:96:fe:8f:
dd:81:23:2b:57:1c:c3:c2:98:c6:c0:73:3d:e0:4a:
9a:ae:97:67:26:33:3e:95:f1:56:70:73:e8:84:26:
00:f7:10:25:f5:dc:1c:72:b8:73:02:ed:1b:09:e3:
98:c6:e6:26:83:02:2e:b5:49:31:79:ac:82:f7:f3:
01:fc:48:e3:03:26:08:6e:6b:24:8e:4c:91:e5:7d:
a8:61:64:65:c8:a9:43:3d:9f:42:73:c4:14:6e:7e:
4a:8f:9b:23:25:b0:a4:47:db:81:27:6a:d7:7f:01:
93:62:91:1b:2a:76:06:c3:9a:b0:ef:90:79:dd:26:
2a:8d:50:8b:7f:42:42:3a:b2:b2:b8:a6:0e:3a:cd:
e9:94:8e:4d:3c:e3:6e:86:8b:85:06:f6:8c:db:0c:
48:b4:4e:ad:02:a5:2d:14:fd:38:aa:94:f8:f3:f6:
45:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:84:73:F6:3B:C6:2C:FC:08:6C:B5:60:55:0F:73:87:17:C6:1D:C2
X509v3 Authority Key Identifier:
keyid:EB:2C:7E:62:50:3B:06:34:EB:4A:B5:3F:88:C0:69:50:AC:76:DC:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/3138352e33342e302e302f32342d3234203d3e203336323336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.34.0.0/24
Signature Algorithm: sha256WithRSAEncryption
76:6e:97:f6:af:9c:34:8a:3a:07:9e:1b:34:a9:b3:ff:66:00:
13:02:88:52:30:91:fb:65:f2:56:d3:27:f0:04:ce:ee:46:bd:
99:13:25:fc:ac:e8:36:22:e6:bb:47:d1:20:ce:11:b1:be:e4:
01:18:ca:41:83:61:2c:d9:58:e5:36:7e:89:6f:d8:89:f2:20:
2b:02:6f:da:7e:d6:dd:d1:57:96:47:f3:75:22:dc:2f:5a:6b:
12:63:c3:3f:9e:e7:43:7e:4a:b6:be:c1:97:e2:5c:3f:82:11:
3b:26:c0:94:52:b3:28:8c:aa:89:10:b6:e8:96:f2:b0:f8:a6:
8f:90:8d:38:db:60:61:98:d9:79:c5:09:28:ff:40:bb:40:86:
a0:de:a0:10:d6:fc:71:2c:1a:39:cf:21:c0:2e:6b:32:bb:64:
14:93:68:b5:21:f6:b9:cd:07:d0:d1:2e:d7:d5:99:4d:33:60:
be:9a:c7:02:32:44:4c:aa:e2:c0:3c:31:91:82:aa:c9:1d:c8:
8a:1d:b0:a5:1b:d4:31:23:be:16:c7:f6:e3:1a:da:4c:37:68:
61:7a:40:65:36:5c:80:ba:04:c5:bf:30:27:51:c3:35:e5:ba:
79:10:2f:b5:8e:a7:bd:1b:5e:d4:2a:03:e9:65:f9:00:95:1b:
37:02:62:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 00:48:16 2025 by rpki-client