Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS18041.roa
File: AS18041.roa (raw, json)
Hash identifier: j9T+N515Ls1Pi9BNhe/x8L/nsRnfzZp916nRktIhxFs=
Subject key identifier: 16:79:A5:30:71:9F:01:6E:BE:DF:D3:48:3E:9F:75:4C:5E:E5:19:20
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 419BBB0E445FCF659A81562D6B89FA1C5767442D
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS18041.roa
Signing time: Thu 03 Jul 2025 15:52:04 +0000
ROA not before: Thu 03 Jul 2025 15:47:04 +0000
ROA not after: Thu 02 Jul 2026 15:52:04 +0000
asID: 18041
IP address blocks: 2a06:a005:500::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 17:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:9b:bb:0e:44:5f:cf:65:9a:81:56:2d:6b:89:fa:1c:57:67:44:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Jul 3 15:47:04 2025 GMT
Not After : Jul 2 15:52:04 2026 GMT
Subject: CN=1679A530719F016EBEDFD3483E9F754C5EE51920
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:5f:cb:f3:6d:b8:41:20:33:84:a0:2f:9c:cf:
14:f4:09:22:23:76:4c:8a:97:b4:70:80:8e:ac:a5:
5e:61:73:97:29:17:0a:64:cb:7a:3f:47:11:73:1c:
21:7b:82:c4:1e:ff:ed:28:32:95:53:77:ce:98:b7:
ec:57:f9:c8:e9:d9:b3:4d:dd:ba:be:7f:6c:6a:db:
83:9b:3f:47:d9:a7:f4:59:11:e2:00:fe:a5:58:a8:
35:ac:f4:b3:f8:bb:f8:ff:0b:5a:d1:45:3a:79:bf:
e6:a1:81:e9:5b:ac:2a:2d:b3:30:f7:6b:62:f4:8e:
44:f4:74:1a:fd:3b:70:4a:c8:f1:23:36:a8:45:84:
5e:d4:dd:89:71:11:52:7a:40:99:b2:f0:65:48:73:
e7:18:65:8f:39:c2:9d:70:71:1f:fb:9c:b7:b0:aa:
d1:c4:72:12:10:d4:0d:71:df:8e:cc:34:1f:84:56:
59:58:84:bb:ae:d4:c4:3f:cb:31:29:77:52:d1:c4:
93:3d:c8:ab:61:c9:8e:81:f0:52:e8:3e:6a:11:db:
87:03:31:39:72:91:6a:a1:e5:e2:72:77:e8:a3:89:
e0:cd:dc:81:e0:45:36:3c:d5:ae:82:72:c6:8f:74:
ed:2b:dc:95:8a:ba:67:b0:d4:ce:e5:ed:b1:e5:ff:
76:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:79:A5:30:71:9F:01:6E:BE:DF:D3:48:3E:9F:75:4C:5E:E5:19:20
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS18041.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:500::/44
Signature Algorithm: sha256WithRSAEncryption
4d:07:7d:06:73:5b:3a:ed:29:c4:ea:cf:d9:59:b9:0e:fa:55:
4d:07:ca:d0:ea:ce:3e:4e:2f:68:ac:a4:48:91:f1:82:3d:24:
94:96:60:1f:a7:b1:56:7b:0f:aa:2d:e2:8e:c5:35:a1:20:c0:
1b:de:a2:60:5c:60:7b:ef:de:1a:44:f5:5c:88:0e:48:30:e5:
85:70:79:c1:21:48:7f:9c:d2:06:61:15:52:c8:3e:32:89:f0:
48:81:bb:a9:22:af:a1:d9:98:2b:ec:16:84:04:6c:de:eb:77:
03:63:19:a6:71:c5:e9:e1:27:9e:c2:89:dd:c8:e2:c8:67:bb:
70:a8:8f:6d:5f:aa:02:49:83:ca:fd:c3:8b:d9:32:5d:79:11:
20:c7:fd:a9:4b:ac:1b:7f:4a:4c:f9:72:e0:6d:4a:72:b1:44:
a4:c6:a7:f7:fb:10:72:19:02:00:b5:36:f0:c9:cd:08:d8:bf:
43:a9:79:57:3e:ea:a3:9e:d9:82:b6:1b:b3:b8:01:61:8f:d5:
6c:ba:af:3d:b2:6f:04:f5:d3:c1:08:e2:ac:17:9c:54:5d:83:
7e:ec:f5:54:f3:51:c3:80:f3:2a:be:05:0e:3b:ef:4b:2b:55:
45:50:ec:02:b7:00:a4:30:30:53:1f:42:61:de:0c:84:83:f0:
17:5e:14:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 22:06:54 2025 by rpki-client