Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS198016.roa
File: AS198016.roa (raw, json)
Hash identifier: o589lWJC46pu2uPxwK5NwBSdZitOJy+OsrGsjZBGGJE=
Subject key identifier: EF:32:2C:3C:A8:84:EA:16:7C:F9:88:5D:4E:7F:71:7C:34:3A:CF:99
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 2DC1744F0A6E132F9B0FB1B84E33CAA78E055D9D
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS198016.roa
Signing time: Thu 03 Jul 2025 15:51:49 +0000
ROA not before: Thu 03 Jul 2025 15:46:49 +0000
ROA not after: Thu 02 Jul 2026 15:51:49 +0000
asID: 198016
IP address blocks: 81.31.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 17:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:c1:74:4f:0a:6e:13:2f:9b:0f:b1:b8:4e:33:ca:a7:8e:05:5d:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Jul 3 15:46:49 2025 GMT
Not After : Jul 2 15:51:49 2026 GMT
Subject: CN=EF322C3CA884EA167CF9885D4E7F717C343ACF99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:a6:3e:f9:17:7d:91:c1:b3:2c:83:3e:7e:64:
ef:d9:dc:04:99:40:33:2a:0b:3d:cd:27:5f:65:a7:
bb:bb:8b:14:a2:05:89:c0:ec:00:cf:f8:0d:05:65:
dd:08:20:b3:f3:76:13:cb:fb:b1:c8:db:17:2d:46:
bb:1e:d3:22:c4:13:ad:c8:d6:57:9b:17:07:0d:4b:
48:a6:60:20:83:f2:62:1e:92:31:5b:83:22:5a:d0:
89:ae:e6:ba:c1:f4:38:ed:24:33:c7:d5:e2:c2:dc:
35:12:0c:1a:4c:10:4f:9a:6e:38:47:fe:00:8a:56:
25:c9:5a:b3:2c:15:61:c9:ec:56:74:55:ca:fc:e6:
92:40:c7:79:01:2e:aa:23:a1:fa:4e:50:bc:2a:95:
9c:f3:84:74:53:2c:d6:1c:a2:d8:48:a5:76:42:ce:
b5:1f:23:a3:a8:b7:75:9c:3c:17:a1:26:c9:9d:5f:
40:27:d2:f1:6f:56:76:a2:7b:8c:e2:36:e8:e9:76:
88:a9:f1:7d:1d:77:ed:76:db:7e:61:02:c1:1b:11:
79:a7:4a:59:c5:f6:a7:56:29:89:df:bb:92:6f:75:
f1:68:1b:c5:72:c1:6a:b2:f3:da:18:7c:69:72:2e:
40:8e:84:5b:1f:5c:5f:44:35:ce:00:4e:fb:96:cf:
e0:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:32:2C:3C:A8:84:EA:16:7C:F9:88:5D:4E:7F:71:7C:34:3A:CF:99
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS198016.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.31.214.0/24
Signature Algorithm: sha256WithRSAEncryption
45:fe:e7:38:1d:37:f3:c8:11:61:43:25:de:ca:a7:3a:72:0b:
b2:66:66:ae:1e:ad:8f:64:6e:b5:1e:c6:d6:f5:bf:fb:65:59:
4b:25:69:3a:c4:2e:76:d3:87:b1:e2:ef:7f:4d:12:da:65:36:
a1:f5:b4:b6:b5:bf:b8:87:81:a7:2d:67:13:a8:c1:b6:c2:e2:
86:4f:ec:90:77:b1:72:db:29:da:d2:12:77:28:8a:c8:2d:e1:
42:4f:a6:76:95:85:ec:45:15:b5:d6:4f:09:c8:4f:6e:4a:d6:
03:6c:ae:80:44:d6:62:fc:81:a9:b8:59:20:ce:f6:2e:f8:a6:
68:e7:48:3a:20:13:1e:d1:c2:ac:1c:16:37:32:f7:8e:6e:52:
37:c0:95:f1:d7:c4:32:11:a3:46:4e:c7:d0:bf:4b:a1:35:6f:
fe:1a:89:67:c2:aa:e5:06:79:e7:03:6d:3b:ac:f1:b3:ad:a5:
69:54:98:4b:fc:8f:79:54:10:a5:63:10:57:60:80:15:2e:bc:
97:b5:39:f8:8b:31:55:98:97:ff:8b:b0:e5:27:29:13:76:a3:
d5:ed:c0:9c:37:06:ab:cc:a6:4c:16:cd:57:fa:cf:56:a2:cd:
12:9e:b7:06:9b:62:12:be:81:87:5b:0f:a9:0c:04:f3:42:4b:
5e:67:e4:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 22:17:40 2025 by rpki-client