Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS133555.roa
File: AS133555.roa (raw, json)
Hash identifier: ztQFEiCDlSZs2U0rhT6jXyBccNA1Swvv3G9CTxnOGsg=
Subject key identifier: B5:E4:D0:F7:BD:35:04:46:45:C7:A9:D4:45:08:A1:E4:F0:A9:74:1B
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 6343EB4DA908ED7126A2D3A759913703FB12D7A9
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS133555.roa
Signing time: Thu 03 Jul 2025 15:52:19 +0000
ROA not before: Thu 03 Jul 2025 15:47:19 +0000
ROA not after: Thu 02 Jul 2026 15:52:19 +0000
asID: 133555
IP address blocks: 2a06:a005:260::/44 maxlen: 48
2a06:a005:270::/44 maxlen: 48
2a06:a005:280::/44 maxlen: 48
2a06:a005:290::/44 maxlen: 48
2a06:a005:2a0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 17:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:43:eb:4d:a9:08:ed:71:26:a2:d3:a7:59:91:37:03:fb:12:d7:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Jul 3 15:47:19 2025 GMT
Not After : Jul 2 15:52:19 2026 GMT
Subject: CN=B5E4D0F7BD35044645C7A9D44508A1E4F0A9741B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:29:2a:fb:28:f3:52:52:3d:a6:f6:3f:ca:a2:
a5:ed:ba:5d:33:38:8b:c2:a9:40:93:88:1b:b8:3f:
45:4d:24:81:09:13:7c:78:32:ca:e0:73:85:d0:7b:
23:8a:35:ab:4f:b3:8f:f5:6a:47:e7:5e:d2:12:54:
e6:23:b0:bf:f9:db:78:21:8a:e3:4a:1e:62:53:9c:
8d:c8:5a:51:ea:b4:21:3b:01:ac:33:56:84:37:17:
ad:a5:8c:84:a6:34:97:24:13:1e:05:42:15:f5:0f:
cb:9b:c8:d6:1a:88:1f:84:c7:23:29:ca:db:42:cc:
53:3d:ee:a4:ac:20:2b:19:5d:2a:04:bb:f8:8c:2f:
b6:f3:cf:b7:41:56:21:a2:a8:a3:4c:65:1d:68:a8:
97:0f:e9:9e:5f:70:2a:7b:7c:a0:be:d9:c4:82:01:
28:88:e3:7e:00:69:1d:f9:dd:d3:29:7f:c1:2c:72:
47:57:7a:42:8a:5d:6e:e4:37:96:e5:8b:99:36:83:
8c:ac:16:90:30:32:3a:f6:f4:4c:7a:e1:b9:34:c5:
10:e1:df:32:45:45:29:88:c8:a3:fd:fe:36:10:0e:
bb:31:51:05:b3:1a:cb:a4:22:41:7f:4d:1d:73:8a:
29:de:b9:d2:55:7b:0b:91:8e:22:96:89:ff:db:24:
69:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:E4:D0:F7:BD:35:04:46:45:C7:A9:D4:45:08:A1:E4:F0:A9:74:1B
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS133555.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:260::-2a06:a005:2af:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
4d:1a:99:c8:f7:e7:49:fc:d6:bb:a3:94:ec:3a:8e:54:f9:03:
4a:75:79:22:75:58:ca:82:88:5a:2d:c5:19:71:31:fe:c9:3a:
65:ce:5b:3b:eb:57:91:26:e3:2c:95:5f:46:75:84:c8:d2:b9:
de:f8:8a:89:21:ca:d3:14:02:a4:31:c5:c2:b9:cb:ab:1d:c5:
d2:12:20:d7:a0:f9:70:0f:5d:91:62:9d:3e:16:1a:94:21:ab:
a4:67:c3:55:32:87:76:d7:92:c5:a7:b2:75:e2:7b:1f:b6:dc:
bb:4a:3c:5c:2c:9f:e7:b5:a5:3c:10:a2:9c:52:dc:02:13:d4:
cf:37:66:cc:d4:a2:86:19:9c:24:54:bc:4a:ea:71:01:aa:38:
6f:5e:e6:3b:69:f3:bc:6d:6b:3e:d9:22:8b:1a:8d:f2:8e:e4:
36:9b:05:a9:26:56:92:3e:36:d5:cf:3a:5a:99:6e:81:b1:59:
ed:c2:8f:bf:ad:2e:3d:18:04:5d:02:6c:d7:6e:73:db:32:c2:
ee:2b:a5:16:e2:11:34:bb:7c:c7:79:c8:46:0a:8c:ea:1e:94:
a7:d4:a2:28:5c:4c:f4:fa:00:f4:31:db:12:19:5d:73:9f:0b:
9d:87:0a:1c:84:86:cd:bb:d2:dc:bf:37:9f:71:0a:bd:be:7d:
3c:44:53:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 21:58:59 2025 by rpki-client