Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS13335.roa
File: AS13335.roa (raw, json)
Hash identifier: AyHpU2cTxw1LAjyr9HBi9O7m8ID6jxZbeHgUd1OFSeI=
Subject key identifier: 61:D5:5F:3A:C1:DC:69:2D:0D:C3:F3:FF:D5:FC:99:57:11:32:B5:5E
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 441097CEE9A123D45D62966D2BFC4EC74851733A
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS13335.roa
Signing time: Thu 03 Jul 2025 15:51:24 +0000
ROA not before: Thu 03 Jul 2025 15:46:24 +0000
ROA not after: Thu 02 Jul 2026 15:51:24 +0000
asID: 13335
IP address blocks: 81.31.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 17:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:10:97:ce:e9:a1:23:d4:5d:62:96:6d:2b:fc:4e:c7:48:51:73:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Jul 3 15:46:24 2025 GMT
Not After : Jul 2 15:51:24 2026 GMT
Subject: CN=61D55F3AC1DC692D0DC3F3FFD5FC99571132B55E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f0:e0:4c:bd:60:69:d5:ac:4d:c9:59:f2:26:
f3:e1:aa:3c:41:55:16:75:55:c8:45:f6:2f:98:75:
da:0c:9a:37:5a:62:a3:da:78:eb:83:99:b5:bd:4c:
97:12:77:9b:d2:62:f4:05:84:9c:d1:7e:13:92:3a:
cd:f6:c5:89:6f:09:a6:b9:d3:3d:8f:f9:8f:bf:dd:
da:97:b9:33:c3:22:36:00:81:fe:1a:1f:11:2c:b9:
bc:66:55:82:84:bb:69:bc:25:3f:0d:d8:cc:f8:e3:
ca:fb:08:3b:e7:51:d8:b9:72:65:a5:a1:2d:ed:75:
6f:58:23:af:3c:a6:16:a3:bc:f0:19:51:8d:17:54:
fd:6c:55:b1:d8:74:65:45:66:09:eb:31:83:ff:d9:
8b:6f:55:21:c8:41:e3:94:b4:da:f1:d3:cc:55:46:
d1:4b:8b:26:c6:5e:b4:3a:e0:52:e7:ed:f2:4b:01:
11:e3:7c:21:a1:77:df:06:fd:96:4d:a1:fa:e3:aa:
aa:09:d7:03:5b:39:85:2a:a4:e0:1b:52:c1:7d:74:
90:aa:e2:07:77:6d:9c:12:eb:0b:33:02:ab:be:fe:
b9:69:c0:a3:da:cf:bb:d4:a1:b0:ea:e1:1b:6e:d5:
c8:43:21:12:c2:e3:3f:eb:f6:94:d0:95:92:6a:b3:
78:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:D5:5F:3A:C1:DC:69:2D:0D:C3:F3:FF:D5:FC:99:57:11:32:B5:5E
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS13335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.31.212.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:87:3b:c2:e3:3f:6d:8f:04:bd:14:3a:0c:e1:95:7a:9e:df:
fb:4f:39:bd:dc:c6:08:12:a3:fe:74:48:c9:7d:58:e7:50:3e:
d1:9f:ce:5d:4b:cb:48:e8:13:96:9a:e8:c5:75:df:fe:0b:59:
ca:28:9c:c1:16:e2:28:de:42:9c:04:0a:4c:d6:c1:64:ca:2d:
13:cd:3b:e2:4b:39:d1:46:34:99:e9:1d:28:9d:d2:49:fa:f9:
e6:5d:15:4d:40:06:e3:40:67:fe:16:90:04:42:15:37:6b:7b:
7c:d3:6a:01:1d:af:27:ba:89:d1:f8:e1:d8:30:1b:67:95:67:
25:c7:a3:ab:5f:4f:1e:08:d3:76:96:14:4d:42:01:f5:c3:31:
40:c6:68:71:ae:38:12:b4:1d:f8:92:c4:1e:4a:89:e2:79:64:
71:7c:27:bd:9b:5d:b9:62:82:fb:a0:56:de:05:a1:63:5b:4f:
3a:98:03:4d:bb:f5:f7:c7:cf:19:6f:12:6b:a0:f7:c4:0a:8b:
62:26:d3:fa:03:0e:c0:5e:65:04:b9:15:bd:d6:47:be:3a:2f:
1c:1f:b3:5e:33:ae:31:d3:10:57:1b:8d:ce:e7:fd:67:b5:45:
88:0a:a7:e6:41:8c:dc:54:68:32:25:08:c7:66:03:5c:ce:5b:
ce:7c:1d:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 21:58:59 2025 by rpki-client