Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/8/3139342e3131362e3232372e302f32342d3234203d3e20393435.roa
File: 3139342e3131362e3232372e302f32342d3234203d3e20393435.roa (raw, json)
Hash identifier: 3eQZ44Pjo8cN9Cs0Xw8H3Y6cml550cmkzovicoDIItA=
Subject key identifier: 70:D6:4A:82:B0:26:49:F2:5F:15:F8:51:8C:EC:10:BB:2A:44:6F:18
Certificate issuer: /CN=e3dcc9700181940fb31c01ea795ecfbc31492afa
Certificate serial: 7DCFEC4935246CB0508F6AFB6D2597BB123A8E37
Authority key identifier: E3:DC:C9:70:01:81:94:0F:B3:1C:01:EA:79:5E:CF:BC:31:49:2A:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49zJcAGBlA-zHAHqeV7PvDFJKvo.cer
Subject info access: rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/8/3139342e3131362e3232372e302f32342d3234203d3e20393435.roa
Signing time: Fri 16 May 2025 10:01:09 +0000
ROA not before: Fri 16 May 2025 09:56:09 +0000
ROA not after: Fri 15 May 2026 10:01:09 +0000
asID: 945
IP address blocks: 194.116.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/8/E3DCC9700181940FB31C01EA795ECFBC31492AFA.crl
rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/8/E3DCC9700181940FB31C01EA795ECFBC31492AFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/49zJcAGBlA-zHAHqeV7PvDFJKvo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 18:31:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:cf:ec:49:35:24:6c:b0:50:8f:6a:fb:6d:25:97:bb:12:3a:8e:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3dcc9700181940fb31c01ea795ecfbc31492afa
Validity
Not Before: May 16 09:56:09 2025 GMT
Not After : May 15 10:01:09 2026 GMT
Subject: CN=70D64A82B02649F25F15F8518CEC10BB2A446F18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:6e:4a:43:dc:e4:f6:5c:a5:a8:cc:26:82:46:
78:14:bd:7b:e1:3f:c8:2e:06:e6:7c:60:c5:f4:71:
a5:5e:ac:43:42:7a:03:1c:55:d8:7f:3c:a3:a5:94:
2e:84:dc:ce:67:00:06:72:03:e4:63:08:e9:05:77:
7b:76:de:ff:9b:18:7b:5c:91:21:f5:2d:d3:cc:89:
37:c8:80:bd:a4:cf:39:9f:c8:7d:f4:fb:25:8f:27:
4f:45:e0:7f:24:89:29:c7:35:06:31:bd:c6:9a:ff:
12:09:15:31:b2:cc:4f:24:4d:72:94:02:cb:2b:97:
11:37:c0:11:72:48:68:13:3a:64:5c:20:b7:d9:54:
6a:ae:50:66:94:f2:33:9e:60:c3:5b:a7:ec:7a:20:
af:6d:fa:3e:c8:3c:ae:40:d9:93:f8:bb:64:a9:34:
fc:a6:ba:0b:9d:c8:45:7a:a5:cd:48:90:f2:5d:8d:
74:f5:26:39:06:00:ea:b9:6f:e6:c8:fc:89:2b:16:
73:63:f0:50:30:5f:2a:6e:8d:68:8e:ae:9c:1a:6a:
b9:71:03:2b:80:77:20:31:e9:13:f2:1f:f1:fd:96:
1b:a2:b1:ef:36:98:46:e4:ee:7a:96:32:1c:67:25:
c4:f1:e8:51:03:05:c5:9b:e1:41:3f:06:74:14:1c:
a9:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:D6:4A:82:B0:26:49:F2:5F:15:F8:51:8C:EC:10:BB:2A:44:6F:18
X509v3 Authority Key Identifier:
keyid:E3:DC:C9:70:01:81:94:0F:B3:1C:01:EA:79:5E:CF:BC:31:49:2A:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/8/E3DCC9700181940FB31C01EA795ECFBC31492AFA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49zJcAGBlA-zHAHqeV7PvDFJKvo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/8/3139342e3131362e3232372e302f32342d3234203d3e20393435.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.116.227.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:0a:30:6d:3d:ff:d3:d9:b4:55:ef:17:ed:68:d3:66:73:25:
1d:85:1b:32:c2:96:4a:27:49:21:d7:cf:66:97:45:46:23:f0:
01:d4:55:e5:c9:b3:94:87:df:d5:00:5a:cc:66:c4:2d:f8:36:
06:d6:00:d7:6d:71:30:dd:f4:8c:78:29:ee:e2:ee:73:07:71:
99:62:15:00:f3:c6:83:de:f1:52:49:02:85:61:95:9f:97:b3:
3c:ae:30:34:fb:eb:6e:59:44:08:c7:7c:81:a7:2c:73:8d:27:
b0:93:b7:51:aa:d2:37:89:76:9f:08:f3:35:29:11:24:cb:84:
b4:64:23:47:cd:df:91:30:7b:6e:1f:59:27:87:9d:fd:65:0c:
8c:d2:57:87:ab:8e:e2:2c:ec:be:cb:0a:30:32:64:5b:0c:d2:
b2:7d:5d:80:26:8e:3d:23:5a:80:70:13:f0:20:b1:ac:c2:f8:
a6:86:09:dc:dd:51:6d:ef:8b:73:f0:e3:66:45:b0:89:ad:a4:
51:bb:22:23:0e:38:16:0e:9e:ca:0f:f1:c2:a9:89:ae:11:b9:
17:d8:8c:12:e2:1d:fe:83:3a:43:5f:e9:65:fd:22:67:86:ab:
53:40:f5:3e:9e:83:87:3a:bb:28:7b:9e:8e:7b:c1:55:b1:ca:
d6:41:99:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgIUfc/sSTUkbLBQj2r7bSWXuxI6jjcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZTNkY2M5NzAwMTgxOTQwZmIzMWMwMWVhNzk1ZWNmYmMz
MTQ5MmFmYTAeFw0yNTA1MTYwOTU2MDlaFw0yNjA1MTUxMDAxMDlaMDMxMTAvBgNV
BAMTKDcwRDY0QTgyQjAyNjQ5RjI1RjE1Rjg1MThDRUMxMEJCMkE0NDZGMTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfbkpD3OT2XKWozCaCRngUvXvh
P8guBuZ8YMX0caVerENCegMcVdh/PKOllC6E3M5nAAZyA+RjCOkFd3t23v+bGHtc
kSH1LdPMiTfIgL2kzzmfyH30+yWPJ09F4H8kiSnHNQYxvcaa/xIJFTGyzE8kTXKU
AssrlxE3wBFySGgTOmRcILfZVGquUGaU8jOeYMNbp+x6IK9t+j7IPK5A2ZP4u2Sp
NPymugudyEV6pc1IkPJdjXT1JjkGAOq5b+bI/IkrFnNj8FAwXypujWiOrpwaarlx
AyuAdyAx6RPyH/H9lhuise82mEbk7nqWMhxnJcTx6FEDBcWb4UE/BnQUHKnlAgMB
AAGjggIgMIICHDAdBgNVHQ4EFgQUcNZKgrAmSfJfFfhRjOwQuypEbxgwHwYDVR0j
BBgwFoAU49zJcAGBlA+zHAHqeV7PvDFJKvowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvNmFiOTZlN2E2MTMwNDk4YWE5ODEzZDdlZTViYmVkMzEvOC9FM0RDQzk3MDAx
ODE5NDBGQjMxQzAxRUE3OTVFQ0ZCQzMxNDkyQUZBLmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNDl6SmNBR0JsQS16SEFIcWVWN1B2REZKS3ZvLmNlcjCBoAYIKwYB
BQUHAQsEgZMwgZAwgY0GCCsGAQUFBzALhoGAcnN5bmM6Ly9ycGtpLXJwcy5hcmlu
Lm5ldC9yZXBvc2l0b3J5LzZhYjk2ZTdhNjEzMDQ5OGFhOTgxM2Q3ZWU1YmJlZDMx
LzgvMzEzOTM0MmUzMTMxMzYyZTMyMzIzNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2Uy
MDM5MzQzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcB
BwEB/wQQMA4wDAQCAAEwBgMEAMJ04zANBgkqhkiG9w0BAQsFAAOCAQEAPQowbT3/
09m0Ve8X7WjTZnMlHYUbMsKWSidJIdfPZpdFRiPwAdRV5cmzlIff1QBazGbELfg2
BtYA121xMN30jHgp7uLucwdxmWIVAPPGg97xUkkChWGVn5ezPK4wNPvrbllECMd8
gacsc40nsJO3UarSN4l2nwjzNSkRJMuEtGQjR83fkTB7bh9ZJ4ed/WUMjNJXh6uO
4izsvssKMDJkWwzSsn1dgCaOPSNagHAT8CCxrML4poYJ3N1Rbe+Lc/DjZkWwia2k
UbsiIw44Fg6eyg/xwqmJrhG5F9iMEuId/oM6Q1/pZf0iZ4arU0D1Pp6Dhzq7KHue
jnvBVbHK1kGZJA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 12:01:24 2025 by rpki-client