Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS136557.roa
File: AS136557.roa (raw, json)
Hash identifier: QzezkyI0YN9AplGoQcMB1+OoOx0ujHXGBld/44N2wmE=
Subject key identifier: 69:5C:68:9F:73:EE:17:CE:50:6B:67:66:FD:01:6F:62:C2:91:B3:43
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 4D08A68FE0DB492FA286BFFFC8566BDD0EAC91E7
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS136557.roa
Signing time: Fri 09 May 2025 03:14:33 +0000
ROA not before: Fri 09 May 2025 03:09:33 +0000
ROA not after: Fri 08 May 2026 03:14:33 +0000
asID: 136557
IP address blocks: 206.245.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Jun 2025 08:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:08:a6:8f:e0:db:49:2f:a2:86:bf:ff:c8:56:6b:dd:0e:ac:91:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: May 9 03:09:33 2025 GMT
Not After : May 8 03:14:33 2026 GMT
Subject: CN=695C689F73EE17CE506B6766FD016F62C291B343
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:11:89:15:cd:24:80:7a:11:a1:34:86:1f:d3:
d2:6c:f5:8b:b9:5e:36:21:33:74:cb:d2:2c:c6:5f:
40:6c:17:0d:f8:e6:89:55:08:45:16:52:76:f3:34:
9c:9a:c5:26:3a:ad:de:54:a5:b4:14:39:c2:56:ec:
46:9f:23:b5:6d:d8:f4:3f:d6:e0:a4:ac:f8:cc:87:
48:a5:c0:ee:5c:82:d9:dc:1d:90:da:6a:75:33:b3:
20:07:9e:95:cb:be:9c:4d:ee:dd:fb:8d:83:2f:76:
d6:77:c6:9d:ec:8e:ea:0e:d9:37:8e:7e:9b:ac:ee:
ec:99:c2:18:6c:06:dc:40:94:d7:43:78:88:58:69:
b2:da:4f:3e:d8:5f:68:1c:ea:8d:17:09:65:04:69:
b3:74:a2:7a:0a:78:b7:50:7b:71:10:46:d9:83:41:
06:b7:21:79:19:22:0c:34:f7:56:42:6f:17:b6:38:
f4:bc:02:7d:00:4e:12:9e:53:cf:0c:60:5b:f5:fa:
93:df:2d:8b:5e:52:9d:ce:1b:86:71:4c:2e:bb:98:
6c:e2:1e:ec:df:10:ee:ca:bf:1e:60:c1:e6:61:96:
3e:8d:68:15:6d:79:5a:ca:0d:ae:be:85:52:5e:ae:
a2:e0:02:7a:b5:85:63:99:af:96:ec:f9:2b:c7:00:
73:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:5C:68:9F:73:EE:17:CE:50:6B:67:66:FD:01:6F:62:C2:91:B3:43
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS136557.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
206.245.167.0/24
Signature Algorithm: sha256WithRSAEncryption
00:06:13:e4:75:9d:5d:17:c4:25:0b:e0:74:78:ea:74:08:0b:
50:e4:6f:57:e0:47:8c:ea:5a:ba:aa:4a:7b:6a:8b:45:62:56:
89:ff:91:f7:79:50:fe:3c:fc:d7:27:96:eb:df:ee:86:7b:ec:
a8:28:35:24:15:8f:f3:af:00:90:78:c1:21:fd:bb:d8:74:b5:
6f:bd:85:a2:99:3e:77:c5:e7:cf:cb:24:4e:6b:38:61:a5:93:
c3:2f:ba:6a:48:23:f4:f6:c3:a0:a0:db:f1:6b:8e:c7:8e:cb:
e0:27:da:18:63:f8:b2:3b:d1:f3:a5:57:55:fe:90:8b:69:08:
6e:79:cc:10:0a:b1:d2:ff:6d:a5:e0:fa:a4:a4:bc:d0:6c:be:
a9:62:c2:d9:dc:a3:2f:70:8e:79:23:5a:cc:3a:c3:70:ab:4b:
ba:47:70:0a:11:4c:4d:43:93:9d:91:3b:4a:34:0d:3c:ff:9c:
90:be:eb:3e:4c:cb:39:3c:ef:aa:aa:a2:de:ae:fe:57:b7:32:
6e:85:e5:a3:3d:86:62:38:0e:4d:ec:59:48:55:82:03:b5:75:
63:19:6f:bb:b2:47:83:9c:fa:b5:67:3e:d3:26:a3:9f:d0:01:
e1:ce:55:67:79:22:f4:e8:32:c2:27:19:b9:42:c1:f6:c3:96:
b8:74:02:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 12:22:01 2025 by rpki-client