Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS201341.roa
File: AS201341.roa (raw, json)
Hash identifier: 4afzGXhijmS7b2FgX5CTjlCMpvTdoau7vtDu39rIuAI=
Subject key identifier: 04:74:E4:39:53:44:A4:F1:A8:4C:17:5B:93:0F:05:02:8C:64:5B:A3
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 47F79CC9EA99B8BE0AD6AF2BF087FD123F789E6C
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS201341.roa
Signing time: Thu 03 Jul 2025 15:52:40 +0000
ROA not before: Thu 03 Jul 2025 15:47:40 +0000
ROA not after: Thu 02 Jul 2026 15:52:40 +0000
asID: 201341
IP address blocks: 185.121.160.0/24 maxlen: 24
185.121.161.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 17:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:f7:9c:c9:ea:99:b8:be:0a:d6:af:2b:f0:87:fd:12:3f:78:9e:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Jul 3 15:47:40 2025 GMT
Not After : Jul 2 15:52:40 2026 GMT
Subject: CN=0474E4395344A4F1A84C175B930F05028C645BA3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:53:a8:42:9e:66:4f:a4:b5:df:bb:b1:f6:79:
d1:64:ea:56:36:22:c2:3d:96:6a:e3:bf:87:ad:51:
b7:01:6b:f5:b6:34:e9:b4:6a:e7:e0:bd:f4:e3:1c:
9c:37:65:ab:b3:7d:5a:7b:11:c6:e2:86:c1:39:9f:
16:d8:7a:76:c5:9c:de:5d:83:66:22:8b:c3:db:d2:
66:98:c9:77:a4:5f:a2:56:0b:43:d7:bf:57:bf:0d:
37:54:7d:dc:c2:de:27:80:a8:32:78:06:e9:84:5c:
95:6e:17:6a:2c:04:9a:85:38:7c:e4:f7:93:b4:f7:
31:81:f5:70:a3:ca:6e:a6:f7:c4:d8:08:b4:1b:f9:
31:39:86:c3:18:d4:c1:72:e2:95:bb:66:f1:61:89:
94:10:4a:2b:36:2a:e3:4a:10:c8:c6:e6:26:d8:39:
dd:ac:e3:51:35:95:58:46:a7:15:28:2b:9e:90:44:
a9:ee:5f:1f:9d:42:4b:90:01:ee:bc:40:f9:2f:dc:
01:12:b3:54:af:0c:e7:8e:f8:cb:a0:d4:f5:21:08:
d4:55:f3:bd:03:a3:21:e4:5f:dd:c0:ea:d3:fe:31:
b2:0d:7e:ca:2e:30:8a:33:9f:91:c8:f3:54:93:72:
d4:cf:e1:ab:eb:14:c7:ec:1c:99:e5:92:94:a2:7b:
3e:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:74:E4:39:53:44:A4:F1:A8:4C:17:5B:93:0F:05:02:8C:64:5B:A3
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS201341.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.121.160.0/23
Signature Algorithm: sha256WithRSAEncryption
b7:6a:43:79:4a:ca:e3:95:ed:a3:cf:69:11:f1:37:d1:52:9a:
f3:8e:42:ac:70:e9:c3:b1:49:68:1f:d6:40:6d:5a:08:f2:c3:
67:66:af:25:ec:c1:15:2d:fb:b8:cd:80:b5:f4:e2:40:66:7a:
15:8a:98:4c:83:03:9b:5e:4a:1c:2b:56:d8:73:d9:6e:78:15:
b5:d6:6f:10:86:cb:e8:30:86:81:24:48:1d:cf:56:4d:25:57:
05:46:ec:ab:c0:66:a7:e4:87:5c:4b:d6:7a:30:0d:41:3c:d2:
2b:61:6a:e3:86:16:8f:fa:87:5e:32:f0:91:f1:61:b5:95:67:
ed:a7:b9:5c:a0:f5:db:06:62:8a:b6:d0:02:76:14:fa:f9:98:
e6:f2:26:ab:22:b5:78:6b:7a:7a:e7:cf:d6:bd:9c:e9:75:58:
6c:03:a4:4b:4a:f2:3e:c3:8b:91:43:94:b4:1d:30:a8:b4:66:
01:31:a2:4b:cd:2d:7b:3b:1d:11:8a:84:75:62:ec:74:a7:24:
39:f0:eb:4d:9e:4e:79:f4:e8:18:cc:5d:6a:b7:8e:19:db:7e:
b2:08:d9:95:a5:1c:8c:37:26:40:18:9a:40:2c:02:18:1b:ed:
8f:ac:cc:77:aa:24:7f:e9:c5:14:2e:93:09:e3:2b:42:d9:9e:
6e:43:e3:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 22:07:35 2025 by rpki-client