Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS136510.roa
File: AS136510.roa (raw, json)
Hash identifier: 7Isb9h0atJGJKiTx6oLnm4TdUuv8JA9g5jrq6FvFxgA=
Subject key identifier: 40:E6:17:6C:22:C0:36:B7:F9:E5:CD:FD:41:7D:3E:80:23:D9:2D:C0
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 0836DCE705FB977696B932909B260D8BDF140CB1
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS136510.roa
Signing time: Thu 03 Jul 2025 15:52:35 +0000
ROA not before: Thu 03 Jul 2025 15:47:35 +0000
ROA not after: Thu 02 Jul 2026 15:52:35 +0000
asID: 136510
IP address blocks: 83.142.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 17:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:36:dc:e7:05:fb:97:76:96:b9:32:90:9b:26:0d:8b:df:14:0c:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Jul 3 15:47:35 2025 GMT
Not After : Jul 2 15:52:35 2026 GMT
Subject: CN=40E6176C22C036B7F9E5CDFD417D3E8023D92DC0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:89:6f:f8:8f:2c:e8:9a:84:c9:68:32:7a:a9:
74:d8:18:5a:f9:13:e6:94:cf:cb:a6:14:b1:8a:a9:
46:3a:bf:0d:8f:d4:f3:6c:6d:d3:93:e0:18:a2:92:
58:a7:7c:40:0d:50:4a:89:08:2d:5b:2e:5b:37:73:
3c:dc:0e:9a:9a:59:ee:2a:14:bf:cf:01:45:c1:ca:
1e:f1:af:16:d7:84:28:13:b8:7c:f9:bb:92:8e:cf:
bb:b0:ca:7a:85:74:33:09:59:1e:48:8d:44:43:a3:
0a:a5:26:92:39:5a:68:57:22:08:65:92:f7:fc:4d:
2e:bd:54:b0:b4:84:8d:54:3b:4e:49:57:7c:ae:2c:
2c:7d:31:66:4b:ce:c6:68:7b:4b:cf:4d:7f:0f:bc:
71:d7:d6:68:82:b3:0a:4b:b4:3c:7e:fc:a7:c9:b9:
92:99:96:cb:4d:cd:ce:80:3e:67:26:69:fb:d7:df:
fc:f8:b2:0d:5f:32:b7:62:b1:f0:4a:09:cd:81:84:
ab:01:c3:b4:33:33:2d:3c:dc:c7:37:cd:f3:09:f5:
87:79:bb:98:e9:46:92:49:31:ad:40:15:8b:8a:7e:
62:be:ed:a6:11:4f:b4:8e:83:b2:cb:37:6c:8f:c7:
bb:03:29:19:83:47:93:5e:8a:6d:ff:d4:e5:91:8c:
5e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:E6:17:6C:22:C0:36:B7:F9:E5:CD:FD:41:7D:3E:80:23:D9:2D:C0
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS136510.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.142.30.0/24
Signature Algorithm: sha256WithRSAEncryption
28:97:25:23:0c:9b:29:d4:5f:89:67:b8:f6:d9:8c:96:4f:91:
fe:f5:3b:ef:61:20:f0:38:b1:d8:4c:c1:4c:1b:73:7a:4c:fc:
6e:0d:79:b9:a5:cc:ea:18:2c:a0:77:1d:6b:ce:a0:1f:60:48:
bf:15:dc:8d:65:9a:42:37:02:c5:02:45:06:0e:4a:6e:30:b1:
b1:33:e6:05:b5:31:54:b4:b9:90:46:9a:da:4b:46:bf:49:9a:
9e:fa:91:25:69:1f:6f:72:97:81:a7:41:a5:4f:ff:b9:b2:f1:
5a:0a:65:6c:bf:26:60:72:7c:02:ef:73:ad:ec:4e:36:c2:c2:
e9:68:e1:a0:c0:a0:87:32:fb:5b:ee:ba:4b:0e:5a:a9:13:26:
fc:4c:fe:93:62:a6:d9:61:5a:f7:c9:63:3e:91:15:df:bf:af:
de:8f:0e:57:a7:1a:e6:02:ca:35:7d:ec:72:21:60:d9:71:8d:
50:26:66:22:8a:c8:90:a5:d7:b0:d3:08:08:0e:1e:bb:f5:5f:
2e:2d:72:74:60:e5:f0:f2:af:df:f2:d9:86:ec:23:21:d5:30:
75:e0:1f:bd:d4:ad:44:92:cf:1b:ef:6d:ee:f4:ec:0b:4a:73:
7f:df:1b:da:4f:52:c2:04:d7:d4:b7:e0:1c:1e:8d:80:19:2e:
67:8d:74:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 22:01:40 2025 by rpki-client