![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS207466.roa
File: AS207466.roa (raw, json)
Hash identifier: y7gdb9xaGuD2jWCO/busaY21gb2CYfq32o4+GvdcTU0=
Subject key identifier: 8C:72:4B:CC:8F:0E:81:73:B5:1B:B1:18:EE:7C:88:44:C5:70:A3:21
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 4762C0BA1A35A67CE61BDB0A89A3CE486EC8A62C
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS207466.roa
Signing time: Sat 04 Jan 2025 10:40:12 +0000
ROA not before: Sat 04 Jan 2025 10:35:12 +0000
ROA not after: Sat 03 Jan 2026 10:40:12 +0000
asID: 207466
IP address blocks: 2a06:a001:a080::/44 maxlen: 48
2a06:a005:15d2::/48 maxlen: 48
2a06:a005:15d3::/48 maxlen: 48
2a06:a005:187a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 11:21:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:62:c0:ba:1a:35:a6:7c:e6:1b:db:0a:89:a3:ce:48:6e:c8:a6:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Jan 4 10:35:12 2025 GMT
Not After : Jan 3 10:40:12 2026 GMT
Subject: CN=8C724BCC8F0E8173B51BB118EE7C8844C570A321
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:66:67:86:b8:45:fc:78:59:19:63:80:d3:ee:
c2:d4:a2:51:48:72:db:89:8c:8f:8d:43:ce:41:a0:
48:91:b3:e0:8b:97:43:10:31:7a:2b:45:16:cf:4d:
2a:c9:5e:49:5b:d3:5b:50:bd:ae:c1:c2:87:bb:8f:
56:a6:18:06:8f:f5:63:27:30:60:85:fc:66:6b:9d:
0b:ca:8c:3c:f2:49:56:09:c2:80:2f:f0:70:2e:f3:
04:33:94:fc:0d:e3:71:4a:53:07:f0:89:97:df:47:
2a:a2:a2:95:97:5e:dc:56:42:42:ba:9d:44:d6:2b:
e3:ff:77:53:45:9e:a9:85:42:3c:0b:a5:c7:92:90:
58:a2:ea:2e:5f:3c:3e:5a:a0:d2:16:44:4b:9b:96:
e1:9b:a1:55:bc:0e:04:60:6c:9b:ed:45:5f:86:04:
79:0a:a6:4a:26:a0:7e:bd:bb:e3:ef:cb:3f:21:d0:
29:c3:56:45:f6:bf:a1:44:03:8f:46:4c:16:4a:74:
a9:1b:17:e2:96:73:05:45:be:c2:52:75:3b:42:48:
5a:10:cd:cb:31:40:ce:62:23:f8:4f:7c:2a:00:d6:
b6:4b:d4:60:ed:da:c1:2d:b5:58:d3:73:7a:6c:64:
4b:e0:9d:14:dc:f3:c4:70:6e:c0:9a:85:cc:c2:02:
0e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:72:4B:CC:8F:0E:81:73:B5:1B:B1:18:EE:7C:88:44:C5:70:A3:21
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS207466.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a001:a080::/44
2a06:a005:15d2::/47
2a06:a005:187a::/48
Signature Algorithm: sha256WithRSAEncryption
ae:25:ae:53:34:d1:7f:c6:f5:c8:58:2d:47:cd:aa:d2:9c:d1:
3b:e2:c2:d4:95:bf:b0:01:2c:68:93:9b:fe:60:03:aa:e3:b7:
f2:bd:f1:ef:9c:a2:6a:51:fc:86:a3:90:71:8f:45:cc:f7:d5:
89:bb:dc:86:ee:c5:18:60:be:03:b5:9f:85:8b:0f:50:72:e7:
a2:38:b8:b4:92:b1:21:73:94:a0:cc:30:24:e9:75:d2:14:b2:
7a:3b:54:6e:43:6d:bf:d7:05:d9:38:99:03:2f:3d:77:c5:21:
57:c2:8c:97:51:0a:f3:a4:d5:74:5e:bb:e6:0e:d9:e5:9a:7b:
a9:9f:b8:08:16:a7:2d:ae:9d:8a:ab:6c:8c:1a:54:48:07:91:
ea:4b:8e:68:39:6a:64:3e:1b:79:d9:7c:d5:9b:03:6f:2c:68:
0b:cf:e8:6a:45:88:2c:f4:dd:6e:0b:22:81:82:93:56:39:1a:
20:78:42:82:a7:da:d4:49:b8:a4:ba:b4:3c:e2:e1:c6:33:78:
f5:15:72:15:5d:7e:43:3d:0d:a6:fe:8e:a6:ce:30:65:a5:9c:
45:35:4c:3e:d4:12:a4:33:f2:d3:7b:8d:da:9d:12:d2:49:be:
ff:27:3e:ec:d2:bb:e7:8b:06:e3:54:65:3a:db:72:01:6a:bd:
88:3c:1f:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:15:42 2025 by rpki-client