Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS150249.roa
File: AS150249.roa (raw, json)
Hash identifier: YPMW9Oy6+04iJw+jeeaC0/Cj2LhXqPD/6rlF/GagwvI=
Subject key identifier: 68:6D:EF:03:E7:3B:33:0D:FC:B3:D8:DC:EF:42:8B:F1:45:AB:0C:33
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 2201341711E2A7511111E819FFFB216CBF8D7603
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS150249.roa
Signing time: Thu 03 Jul 2025 15:51:53 +0000
ROA not before: Thu 03 Jul 2025 15:46:53 +0000
ROA not after: Thu 02 Jul 2026 15:51:53 +0000
asID: 150249
IP address blocks: 2a06:9f44::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 17:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:01:34:17:11:e2:a7:51:11:11:e8:19:ff:fb:21:6c:bf:8d:76:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Jul 3 15:46:53 2025 GMT
Not After : Jul 2 15:51:53 2026 GMT
Subject: CN=686DEF03E73B330DFCB3D8DCEF428BF145AB0C33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:9f:3f:51:f9:5b:6d:dd:2b:1c:80:9b:07:4f:
12:1a:e6:c0:d9:7f:de:90:d3:21:35:9b:df:38:1d:
a5:b0:6c:4d:8f:ee:62:a6:f1:cb:ca:43:b8:72:ce:
b7:a4:4a:16:21:d2:02:06:b2:ec:17:4e:19:be:b5:
b6:6d:32:f2:5f:76:ef:64:89:33:a3:f5:21:91:ec:
48:2c:f9:3b:31:df:99:d4:a0:bf:23:1a:eb:ff:bb:
e3:92:bb:7d:df:0b:00:d3:69:ae:78:18:aa:d1:23:
67:15:80:1d:a2:ba:5d:cc:c6:dc:d6:7c:aa:aa:7a:
48:a3:c8:60:f0:41:cf:3f:9f:9f:67:2c:04:23:f2:
2a:35:4c:47:33:05:fd:dd:20:78:a0:d6:5b:a9:f9:
46:2e:9e:55:87:07:5c:48:fa:ce:7d:d7:e1:10:bf:
fe:7e:d3:2b:a6:ea:34:31:90:b1:31:af:c1:bd:a1:
5b:91:33:b1:01:37:32:30:d6:56:3c:fa:99:7e:ed:
da:f6:58:18:8a:df:8c:0e:19:16:de:23:56:f1:14:
36:83:ed:f3:a0:0a:c2:7a:04:17:e6:47:ed:bd:b2:
97:3e:e1:1c:aa:7d:5a:db:fb:d5:1b:c7:3a:8e:2e:
19:7c:00:23:35:cc:5f:45:7d:1f:f3:ad:ff:f4:ea:
b1:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:6D:EF:03:E7:3B:33:0D:FC:B3:D8:DC:EF:42:8B:F1:45:AB:0C:33
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS150249.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9f44::/32
Signature Algorithm: sha256WithRSAEncryption
ba:ee:32:28:be:19:af:28:10:f3:43:f8:7d:4b:1e:a2:3e:c5:
4a:2b:fa:cd:fe:7d:bc:d2:ef:3b:e1:83:fb:0e:b1:52:da:92:
93:5c:6b:a0:55:32:0a:37:1a:5b:71:9d:48:ef:2c:c2:14:b6:
be:ec:e7:72:db:b9:b8:83:12:d2:a0:fd:3a:c5:f1:79:b5:94:
f6:54:dd:95:41:85:9f:c3:27:f1:a7:fe:9e:1b:0d:5c:83:30:
7b:a9:1f:98:32:93:eb:33:89:29:e8:38:55:81:62:d2:da:4a:
53:37:fa:b7:44:29:c9:0a:fa:d5:d9:3e:36:52:96:1a:6c:62:
6e:88:a2:24:97:16:0f:b8:92:31:59:37:77:d6:75:d2:1a:ce:
af:13:0f:4b:16:fc:06:cb:38:d5:a2:7a:38:fb:5d:ad:20:c2:
df:dd:6e:a7:4e:43:f8:68:12:fc:ba:c5:16:bc:45:06:e4:f8:
ab:a2:f7:63:0a:c6:47:ce:09:4e:23:27:fc:c3:c0:74:df:36:
67:4b:66:db:56:b8:ae:cd:76:a6:aa:98:70:9c:14:33:64:eb:
75:47:d7:18:15:b0:23:81:31:e0:bc:fb:a4:da:cc:e9:d3:3e:
ea:c5:12:73:da:4a:de:d9:5d:62:0b:0a:69:75:2d:cd:97:69:
2f:fa:76:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 22:15:49 2025 by rpki-client