Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS931.roa
File: AS931.roa (raw, json)
Hash identifier: 066CLCiJLMaWh+Qq7e2FWSIlJ63f4H8D+ZELUWfrMKw=
Subject key identifier: BD:4C:B3:B4:89:6E:11:33:37:2E:6C:90:F1:69:04:43:21:4F:08:4C
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 20EC643EA1E7A0193BDB0E50AD23191B499AB546
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS931.roa
Signing time: Thu 03 Jul 2025 15:52:01 +0000
ROA not before: Thu 03 Jul 2025 15:47:01 +0000
ROA not after: Thu 02 Jul 2026 15:52:01 +0000
asID: 931
IP address blocks: 185.147.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 17:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:ec:64:3e:a1:e7:a0:19:3b:db:0e:50:ad:23:19:1b:49:9a:b5:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Jul 3 15:47:01 2025 GMT
Not After : Jul 2 15:52:01 2026 GMT
Subject: CN=BD4CB3B4896E1133372E6C90F1690443214F084C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f1:53:54:eb:0a:52:78:c5:67:ab:89:b3:f5:
ec:dc:c8:8d:e2:df:47:2c:e0:32:f9:2e:05:3b:22:
d8:01:88:cb:de:50:a6:e3:05:de:b6:89:89:0c:f5:
cc:4c:ef:68:c8:ad:4b:ce:fe:d8:71:cf:23:d0:5b:
41:7c:b8:6e:9a:d5:df:44:bc:a3:72:2f:d0:b7:ea:
c9:b8:b5:4d:cb:73:d5:f3:02:88:c2:af:93:44:c7:
67:fc:23:1c:a7:c7:73:63:b7:02:27:a4:c6:66:be:
3d:b1:05:35:7a:27:dc:a1:9f:86:7c:86:04:cf:2b:
eb:28:bf:d7:fc:c4:e6:95:83:b5:4c:c1:41:c2:63:
b0:a9:ce:27:4d:24:36:e5:42:b1:65:8b:d0:6c:2f:
51:dd:dc:ba:18:86:26:50:4c:29:65:06:af:b9:3a:
e2:1c:46:18:6c:48:3e:a2:ac:76:b1:84:22:96:25:
d5:f6:fa:96:57:9d:7a:e6:a4:b4:77:fc:f3:e5:4a:
53:b8:aa:d1:c7:fd:52:e8:f2:73:9a:dc:e8:55:4d:
b9:f7:83:9c:c3:e3:b1:94:57:83:08:63:86:76:62:
58:a2:e1:4e:24:b8:40:b0:fb:78:05:4d:c8:ec:33:
fc:6b:34:ce:e8:f3:a3:3e:97:c4:5a:a8:dd:ca:bf:
9e:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:4C:B3:B4:89:6E:11:33:37:2E:6C:90:F1:69:04:43:21:4F:08:4C
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.147.34.0/24
Signature Algorithm: sha256WithRSAEncryption
69:c8:9e:6a:d1:48:63:7e:fe:7a:51:d4:97:99:83:f2:91:50:
66:f7:1b:ba:3a:b6:5e:76:c0:ad:1b:45:0a:ba:55:e4:70:cc:
81:9a:70:30:3a:81:37:bb:82:27:0b:cc:b2:ec:ce:d3:ca:1c:
cc:da:97:99:b4:73:36:fe:3c:1b:3e:d7:0e:ba:93:47:4c:53:
bb:30:cb:4d:b4:66:14:d8:bc:f3:b7:7c:0d:bf:0a:14:dd:da:
e3:69:23:77:03:36:5c:0b:56:d9:75:c2:c2:36:a6:22:a9:f0:
e8:8f:01:bd:ab:85:92:8f:c7:f3:93:4f:65:91:51:a1:b9:e3:
4c:df:a4:cf:e7:12:bb:c7:ee:ae:27:2f:d8:64:16:64:04:89:
da:2f:30:b6:68:5b:6c:1c:65:7b:c4:97:9b:77:73:92:f7:76:
c5:f1:b4:7e:c3:7e:1e:8d:ca:52:c8:6d:4d:19:74:a1:bf:8d:
3e:54:e5:5a:fd:4a:e2:02:dd:a5:3a:0b:7f:4f:35:0f:31:c4:
c0:31:38:19:ad:89:5d:b5:ca:2f:e0:ab:46:23:81:b4:cd:c3:
2e:b1:cf:87:c2:c9:95:b1:53:68:3a:63:0e:b4:eb:c0:f4:c0:
68:79:8c:66:b2:1c:be:8d:a6:bb:ab:07:e1:6b:47:84:4c:6d:
09:f3:f2:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 21:57:39 2025 by rpki-client