Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS210152.roa
File: AS210152.roa (raw, json)
Hash identifier: BECUXKZAZ2TCBlvUY7B4wYQMxvYA+zhE7nFV+T1A5vw=
Subject key identifier: EA:6C:4B:AD:B2:5A:62:BF:B3:F1:ED:12:F6:F3:61:83:1D:40:33:E8
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 2DA15117DDEF2B9455E816561B3026A4BD31E643
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS210152.roa
Signing time: Thu 03 Jul 2025 15:51:35 +0000
ROA not before: Thu 03 Jul 2025 15:46:35 +0000
ROA not after: Thu 02 Jul 2026 15:51:35 +0000
asID: 210152
IP address blocks: 185.147.35.0/24 maxlen: 24
2a06:a005:1290::/44 maxlen: 48
2a06:a005:17f0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 17:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:a1:51:17:dd:ef:2b:94:55:e8:16:56:1b:30:26:a4:bd:31:e6:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Jul 3 15:46:35 2025 GMT
Not After : Jul 2 15:51:35 2026 GMT
Subject: CN=EA6C4BADB25A62BFB3F1ED12F6F361831D4033E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:92:1e:d8:af:28:d4:f9:39:c6:6d:a6:d9:23:
3f:8c:8f:0f:f8:be:81:82:94:9d:87:7c:e5:e1:8a:
09:26:7b:b2:35:af:86:1a:63:94:03:fa:4a:2a:07:
24:24:07:4b:fc:44:32:3a:e3:69:44:fa:5f:b6:32:
89:f8:6c:ae:c0:47:56:83:54:aa:48:21:78:07:53:
88:b2:c5:76:82:ab:7e:c9:d9:35:08:b3:10:20:bf:
dc:f8:56:e4:62:2d:bd:42:46:b1:0e:bb:41:51:bd:
87:13:49:e8:41:21:86:28:68:99:9e:2a:a1:d2:99:
10:73:57:c2:92:c3:9f:09:ef:df:f3:9f:42:d2:1d:
c3:0a:fd:2d:0f:14:b5:71:d9:e9:5c:c4:03:77:3f:
34:40:e1:e6:c6:b6:eb:d6:37:5c:91:cf:cb:25:a3:
7b:15:e6:c4:c6:62:83:f4:bc:b7:fa:15:d8:89:22:
81:d4:3d:ea:df:1d:0f:91:25:16:22:e7:6f:9c:0f:
a4:88:46:4f:04:9e:1d:ac:ab:67:e7:29:38:f5:87:
85:53:95:64:58:16:5d:52:42:de:55:a9:36:b0:5b:
e5:54:63:8c:ce:26:30:81:d8:1f:25:2f:69:3a:f4:
ec:5d:5a:2f:bd:bf:f3:23:4f:97:f8:1a:b0:7e:55:
71:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:6C:4B:AD:B2:5A:62:BF:B3:F1:ED:12:F6:F3:61:83:1D:40:33:E8
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS210152.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.147.35.0/24
IPv6:
2a06:a005:1290::/44
2a06:a005:17f0::/44
Signature Algorithm: sha256WithRSAEncryption
02:45:1c:b8:a5:70:28:e7:6b:5e:a5:0f:33:77:04:50:c7:7b:
d4:fc:3f:43:ba:67:a8:d7:4e:a0:79:c6:d9:1f:3a:29:22:18:
51:e4:dc:d3:75:1d:50:bb:75:80:af:36:82:e5:5b:77:c9:f0:
e2:8a:ed:83:15:4a:c2:0d:73:22:71:a7:62:3c:c7:9d:9c:f7:
6e:a7:b9:f9:7e:b8:0e:63:1d:17:96:ad:f9:4b:25:7d:b8:63:
24:3f:67:99:e3:14:71:5d:9a:4e:0c:3c:37:3b:49:41:9f:2d:
af:fd:0b:b8:9e:27:7d:47:88:70:e8:39:a2:41:38:40:f0:79:
be:28:ac:6f:e6:f3:0a:f4:45:5b:a4:ef:51:fa:9d:ef:45:38:
65:3d:3e:1b:03:bf:83:26:bf:80:f0:60:c9:dc:37:bc:ab:a0:
60:4a:54:8d:9b:7d:56:92:93:bb:ec:c0:66:2d:c4:4a:fa:61:
1a:4d:77:31:12:cf:c5:b0:66:7c:e4:bc:6f:07:6d:24:55:6b:
48:3f:a4:ea:19:b6:43:c0:a0:2d:49:0b:60:b7:69:05:bc:e2:
a6:1f:59:cd:dc:50:05:e2:97:cf:11:cd:d8:ca:fa:c9:61:cb:
f4:2c:08:37:ae:d9:b1:a7:2c:00:5b:0e:4f:e1:63:5a:35:1c:
68:94:0e:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 22:22:55 2025 by rpki-client