Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/2/326130343a646338303a3a2f32392d3438203d3e20313937353337.roa
File: 326130343a646338303a3a2f32392d3438203d3e20313937353337.roa (raw, json)
Hash identifier: nBfJgos2zfzyALiaXlFvRvGKVpCZLf9hpeeX+QFHO6Q=
Subject key identifier: 57:49:34:E8:D1:C3:07:68:08:05:AA:05:A7:ED:12:D2:75:17:91:80
Certificate issuer: /CN=c1dc25c780e7a24817139d980a28a9781fa6a493
Certificate serial: 482D7D26311424F7549726639C30A2D864FDB216
Authority key identifier: C1:DC:25:C7:80:E7:A2:48:17:13:9D:98:0A:28:A9:78:1F:A6:A4:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wdwlx4DnokgXE52YCiipeB-mpJM.cer
Subject info access: rsync://rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/2/326130343a646338303a3a2f32392d3438203d3e20313937353337.roa
Signing time: Wed 14 May 2025 16:06:12 +0000
ROA not before: Wed 14 May 2025 16:01:12 +0000
ROA not after: Wed 13 May 2026 16:06:12 +0000
asID: 197537
IP address blocks: 2a04:dc80::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/2/C1DC25C780E7A24817139D980A28A9781FA6A493.crl
rsync://rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/2/C1DC25C780E7A24817139D980A28A9781FA6A493.mft
rsync://rpki.ripe.net/repository/DEFAULT/wdwlx4DnokgXE52YCiipeB-mpJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 20:36:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:2d:7d:26:31:14:24:f7:54:97:26:63:9c:30:a2:d8:64:fd:b2:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1dc25c780e7a24817139d980a28a9781fa6a493
Validity
Not Before: May 14 16:01:12 2025 GMT
Not After : May 13 16:06:12 2026 GMT
Subject: CN=574934E8D1C307680805AA05A7ED12D275179180
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:de:f8:63:56:75:3f:e9:c4:81:0f:89:e0:79:
f3:03:26:96:e0:09:ff:d6:f2:0f:fa:af:39:92:8e:
7b:44:d9:26:cd:8f:ae:d0:c8:b8:b6:59:c3:29:59:
d0:af:2d:12:07:ec:38:97:bd:1d:6e:de:1b:6d:14:
3b:f1:5a:d4:9e:b0:98:8b:dd:9f:9b:14:9d:9a:6a:
fb:f8:76:8e:ba:cd:5a:f0:45:48:6e:b7:cf:70:27:
fe:af:31:7e:9c:12:be:97:88:e6:21:01:55:18:df:
bf:cb:50:92:c1:4d:b8:b0:b5:85:19:9a:40:7c:32:
7e:4c:28:bc:95:a4:32:d8:bb:46:09:e4:9b:e0:ab:
1b:0d:f9:44:86:9c:55:10:ef:9a:03:6f:70:54:de:
b5:3f:fd:02:e3:17:49:5a:55:88:6b:2a:03:7f:d5:
c1:b6:3f:6a:2c:61:b8:c4:5b:9f:92:20:18:bb:1f:
46:1d:bd:f8:4b:df:27:ed:7f:67:20:38:d6:21:3f:
48:d9:71:98:6e:97:5f:0b:ca:3a:e6:9c:a5:cc:36:
95:2e:b3:77:f3:b8:01:f6:64:e5:68:aa:34:cb:54:
b5:03:66:b0:dd:3c:19:91:44:c2:e0:8b:aa:a4:d0:
f7:fe:93:2a:ae:dc:bc:a1:23:42:5f:23:bc:c7:d7:
f3:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:49:34:E8:D1:C3:07:68:08:05:AA:05:A7:ED:12:D2:75:17:91:80
X509v3 Authority Key Identifier:
keyid:C1:DC:25:C7:80:E7:A2:48:17:13:9D:98:0A:28:A9:78:1F:A6:A4:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/2/C1DC25C780E7A24817139D980A28A9781FA6A493.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wdwlx4DnokgXE52YCiipeB-mpJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/2/326130343a646338303a3a2f32392d3438203d3e20313937353337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:dc80::/29
Signature Algorithm: sha256WithRSAEncryption
71:e6:6e:aa:42:2f:4b:be:2c:1a:cb:35:31:21:11:e0:37:97:
74:b8:b4:5e:ec:d5:47:b6:00:86:bd:b4:09:56:97:db:00:94:
da:6a:6e:a5:48:61:b4:d1:18:27:ec:ac:bb:96:74:05:e1:da:
7c:b3:00:55:11:8e:2e:bf:ed:ea:5c:1c:0a:f8:bc:15:ec:e9:
f7:e4:36:4e:c7:58:77:d1:5c:08:ef:23:a4:f8:e3:7b:e4:0b:
1a:7b:9a:28:88:9f:73:c3:49:7d:21:19:35:10:40:e3:8e:24:
9d:94:00:0d:ef:92:05:0d:b2:d9:83:5e:c5:6c:0b:c9:a5:f3:
4d:6e:68:10:ba:6f:a2:4e:b4:34:ae:8c:d3:5f:9a:65:62:08:
f2:7b:d8:12:45:3c:4a:41:09:36:5c:b8:cd:9f:b4:cc:d1:88:
aa:0d:82:8d:05:57:49:b7:c4:21:f9:66:f5:68:68:3c:ae:6f:
1c:5a:3e:65:d3:aa:bd:fe:bf:92:c7:a3:95:68:f3:31:fc:b8:
0d:0e:e1:b4:b1:97:f5:ed:8c:c1:1a:1d:59:54:33:51:7a:75:
d6:6c:b8:75:f2:b9:e8:a7:a5:6b:1e:f9:85:db:cf:7b:36:55:
8f:87:bc:c3:26:51:91:91:bf:e2:f7:07:95:d7:80:8b:b2:68:
b9:87:d1:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 10:46:08 2025 by rpki-client