Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS136510.roa
File: AS136510.roa (raw, json)
Hash identifier: If+4GwGoH+FbR3LJ36sffP1Ntq/0oDjI1mLVecfo7ok=
Subject key identifier: 8F:A2:E6:BB:E3:F4:76:98:9F:BC:1F:39:AC:AC:11:98:A3:40:71:80
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 79D8D330A811B41CB6781B412CCA69431E429E89
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS136510.roa
Signing time: Tue 06 May 2025 20:31:51 +0000
ROA not before: Tue 06 May 2025 20:26:51 +0000
ROA not after: Tue 05 May 2026 20:31:51 +0000
asID: 136510
IP address blocks: 83.142.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Jun 2025 08:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:d8:d3:30:a8:11:b4:1c:b6:78:1b:41:2c:ca:69:43:1e:42:9e:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: May 6 20:26:51 2025 GMT
Not After : May 5 20:31:51 2026 GMT
Subject: CN=8FA2E6BBE3F476989FBC1F39ACAC1198A3407180
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:7c:f8:48:53:dc:3b:e4:7b:6e:31:3f:79:e5:
37:a6:f4:16:c8:9b:50:3f:f4:82:91:86:f4:a5:53:
99:ad:ef:7a:a1:93:94:b9:18:fd:ab:34:61:4a:f8:
f5:69:b2:1f:72:de:d0:b3:f1:0c:85:1a:bd:fb:70:
fe:00:6d:e9:4f:b4:7b:e8:be:3c:26:48:6b:da:a2:
51:e9:5c:c0:19:c5:46:53:40:3d:1b:1f:c8:7b:09:
18:1d:00:ae:45:c2:2c:42:f7:bc:70:bc:9e:0c:2c:
e2:3d:9c:41:17:39:34:f0:72:7b:7d:0a:05:e3:14:
b3:62:74:6a:00:0f:31:9e:4b:0e:32:dc:9a:2b:d3:
2c:d8:63:d7:f8:4d:47:38:fd:c8:cd:ab:b4:4f:73:
8c:7c:db:38:d2:11:75:e8:50:84:a8:b9:8a:9c:5e:
f0:46:9d:28:9d:bc:e6:12:d6:d5:d7:f1:16:58:e1:
47:c7:3d:48:45:69:43:76:2e:40:c4:88:85:18:21:
50:fb:ec:bc:0a:7b:f2:49:87:3e:74:48:46:86:83:
d1:a7:01:02:35:25:29:f5:c4:59:34:2d:92:2b:96:
ac:85:21:1b:f3:db:4a:f8:99:af:8a:fd:53:4b:cc:
d2:2c:6e:51:d1:04:93:ed:ac:b4:6f:4e:fe:b1:04:
61:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:A2:E6:BB:E3:F4:76:98:9F:BC:1F:39:AC:AC:11:98:A3:40:71:80
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS136510.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.142.30.0/24
Signature Algorithm: sha256WithRSAEncryption
65:4b:7b:8f:81:8c:22:37:99:8d:3c:c3:90:03:5d:1b:3a:23:
41:75:a3:64:ff:e7:66:8c:61:9a:a6:65:56:b2:90:20:13:0d:
8f:48:f6:cf:8f:d8:b5:c8:d8:f5:33:a2:3b:47:18:df:61:1a:
01:96:84:b5:f0:a3:f7:5b:92:48:71:88:1b:73:b3:6f:06:b4:
37:37:4f:ef:b6:77:f8:6f:95:f3:56:79:af:5f:25:9e:fa:5a:
30:d4:ea:9b:67:d8:b2:3f:3f:31:c9:d0:84:04:3a:a3:87:62:
7e:b1:49:04:bb:e2:b5:c1:f3:ad:7d:dd:88:fe:fb:ec:12:7b:
ad:cf:24:92:3d:62:96:f6:b2:d5:0f:e1:ac:8e:19:9b:a3:60:
3f:69:a4:ef:64:78:d9:f2:1e:4e:85:cb:a8:6c:73:ca:09:44:
98:8d:69:98:52:0d:02:0c:91:30:62:f4:c8:20:a9:7d:b8:ce:
58:ec:4a:e5:9f:fa:bb:02:26:b7:15:f9:f5:1f:96:3a:97:c0:
07:40:07:80:df:f0:95:28:24:73:d4:1c:4e:80:33:71:65:80:
34:80:1e:ec:50:fa:e5:75:b7:5d:69:75:e5:d6:b5:59:8f:4f:
9c:2c:70:82:ed:b2:8e:40:02:70:23:7f:58:be:42:1e:b3:7d:
32:98:8b:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 12:13:47 2025 by rpki-client