Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS150623.roa
File: AS150623.roa (raw, json)
Hash identifier: hwVbYo2yfPt/hbg08kBkrDFgfx8MYRrO6wr6BrpBiLU=
Subject key identifier: 9F:9B:01:4B:5D:E3:DC:68:B2:BE:41:47:0F:39:4A:38:8B:DD:F2:7C
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 4609F8F245ABAC46E4B45F701BBD2B34CDBA18A4
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS150623.roa
Signing time: Wed 29 Jan 2025 18:43:11 +0000
ROA not before: Wed 29 Jan 2025 18:38:11 +0000
ROA not after: Wed 28 Jan 2026 18:43:11 +0000
asID: 150623
IP address blocks: 81.31.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 09:24:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:09:f8:f2:45:ab:ac:46:e4:b4:5f:70:1b:bd:2b:34:cd:ba:18:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Jan 29 18:38:11 2025 GMT
Not After : Jan 28 18:43:11 2026 GMT
Subject: CN=9F9B014B5DE3DC68B2BE41470F394A388BDDF27C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:45:cf:f9:f8:be:08:c5:bb:3e:3d:e9:46:5d:
ff:c1:55:04:1a:3d:5b:62:91:ce:1a:f2:d5:80:f3:
21:9d:03:3f:d9:39:df:68:5c:22:70:23:c7:18:39:
d4:c0:cd:ee:63:dc:eb:15:71:ea:e7:e9:87:41:ab:
5e:76:50:11:c5:d7:83:f3:c8:3d:4d:c1:37:ae:f7:
c8:3e:a1:58:28:be:cd:70:8c:46:cd:bf:32:97:fd:
04:ca:fd:88:9e:6e:13:2c:71:d5:f5:25:6f:3c:c0:
f3:8b:1c:a6:7d:4c:b2:e7:0f:d3:50:ce:91:f6:b6:
5e:f5:e2:ad:05:9c:70:e4:d6:4b:57:93:4b:88:27:
08:cd:fa:cf:ca:a5:54:a1:13:06:a8:62:76:c2:6d:
b1:5d:00:a2:b1:30:c9:e2:91:c0:85:b7:00:28:5b:
dc:12:3b:6a:2e:ce:62:b4:31:ea:06:de:01:14:45:
e6:36:fa:2e:5b:b1:e5:53:d4:1e:cf:ce:77:f3:0f:
0f:50:a6:c0:7b:52:b4:72:09:8f:27:12:5a:9d:1d:
f6:34:c1:7f:ca:4d:8e:7c:1d:21:56:7e:fc:fc:36:
52:ab:a8:b6:43:e8:61:c0:ed:a1:10:f2:5d:5a:9a:
0b:2a:f3:d1:e1:70:b2:34:98:87:27:d8:5e:0f:df:
49:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:9B:01:4B:5D:E3:DC:68:B2:BE:41:47:0F:39:4A:38:8B:DD:F2:7C
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS150623.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.31.208.0/24
Signature Algorithm: sha256WithRSAEncryption
95:9a:91:ed:81:96:3e:45:13:38:9f:9f:5b:50:26:7b:57:34:
ed:65:79:8d:72:c1:90:92:a1:54:d4:24:1a:38:15:15:03:cf:
09:71:b0:5e:e4:9d:2a:3e:49:d0:05:d7:94:d4:5b:c8:f8:d7:
26:c9:e2:0e:1b:d6:43:cd:c7:f4:c7:c1:2c:bd:12:12:80:58:
4e:6b:2f:90:f5:64:03:a4:4c:d9:a7:ce:90:9b:fb:2d:16:72:
11:1e:e2:a4:5a:30:fc:fb:ed:8f:e6:70:04:45:90:37:87:3c:
a1:f2:93:d6:30:4b:07:95:c7:2d:39:fe:4a:e7:22:cc:1e:1c:
c3:f3:55:80:82:60:85:9e:d4:ac:f7:cb:50:01:71:bd:54:60:
6e:cf:8c:00:45:4b:11:75:9c:8f:85:4a:2b:5f:76:98:64:05:
29:a0:cf:7c:eb:01:d5:3e:e6:94:fb:b3:4b:cd:72:94:20:73:
65:1b:b3:45:16:5c:84:02:52:4c:f1:c7:80:b8:23:b4:4e:31:
69:d9:53:34:de:b0:0f:5e:35:72:0a:e6:47:c3:8d:16:3a:32:
b2:4a:83:ec:0b:88:0a:29:60:53:1a:65:34:ae:3c:63:70:2d:
f9:87:c1:92:10:b4:99:1a:a8:41:f6:38:8b:15:3f:fa:95:8b:
fd:97:2a:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:39:23 2025 by rpki-client