Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS201979.roa
File: AS201979.roa (raw, json)
Hash identifier: CimnhoKGJwJYA9gZZP52IxTOFybIFdUAI02/ddu/Mws=
Subject key identifier: C7:15:9B:0F:7E:6B:9C:A9:51:80:24:B6:A1:03:29:29:A3:33:D0:04
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 5CC15891BA8E2760B4D51AC6A073ABEB167876BE
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS201979.roa
Signing time: Thu 03 Jul 2025 15:52:22 +0000
ROA not before: Thu 03 Jul 2025 15:47:22 +0000
ROA not after: Thu 02 Jul 2026 15:52:22 +0000
asID: 201979
IP address blocks: 2a06:a005:d43::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 17:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:c1:58:91:ba:8e:27:60:b4:d5:1a:c6:a0:73:ab:eb:16:78:76:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Jul 3 15:47:22 2025 GMT
Not After : Jul 2 15:52:22 2026 GMT
Subject: CN=C7159B0F7E6B9CA9518024B6A1032929A333D004
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:a6:5b:78:82:bc:3e:ef:62:e1:79:f4:9f:a8:
96:8a:ef:7d:91:83:f7:71:5b:3f:47:8a:cc:0f:83:
8b:41:29:f7:37:21:22:7e:e7:7a:a7:cb:76:59:15:
1f:e0:02:0a:57:4e:80:fa:29:cb:11:c6:19:ad:a1:
f9:bd:89:8d:95:1c:5b:a0:6a:6c:bb:b8:16:59:b2:
c5:9b:4e:5c:c8:cc:4f:6e:da:be:24:91:95:7e:f1:
5b:ac:1c:b8:dd:4b:74:6f:0e:4f:82:4e:9b:4c:91:
c9:3b:36:7a:51:a6:c7:a1:29:09:56:b7:15:82:ce:
11:d4:c0:05:4d:62:75:7e:2f:d0:82:33:64:85:9b:
e8:36:61:0e:02:9e:1a:76:b0:c5:b4:7a:ea:a4:f9:
a9:91:4c:a5:c5:c4:e4:be:a3:72:79:10:8a:48:bc:
d2:d0:a7:fd:53:d3:fa:e4:93:b7:8f:6d:c6:2b:61:
b5:85:1a:03:87:e1:78:f0:a0:58:5b:37:2c:76:b1:
01:bb:f9:3a:48:da:be:28:2f:9f:ea:b0:c8:7d:d7:
09:e2:98:2e:67:25:74:5f:6f:e1:b2:67:17:46:d7:
63:db:25:62:c0:86:d5:1a:a5:e4:82:ef:7e:68:f1:
a7:30:ae:d0:5c:33:bb:05:b0:18:fd:b0:e5:82:85:
8b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:15:9B:0F:7E:6B:9C:A9:51:80:24:B6:A1:03:29:29:A3:33:D0:04
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS201979.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:d43::/48
Signature Algorithm: sha256WithRSAEncryption
96:9b:50:77:9f:9d:07:f7:e6:6c:92:e9:21:da:ff:17:7a:05:
ee:b4:a8:a9:97:0a:11:a5:a2:83:d3:db:7c:9f:29:7a:f5:1f:
c7:fb:0c:ff:f6:58:55:bd:08:04:ec:40:50:78:43:3c:47:05:
0d:82:78:94:ea:9e:20:a0:15:e9:91:03:23:6c:a4:b1:61:38:
2e:4c:0b:c1:2b:b0:f2:9d:2c:59:a4:d9:38:3f:97:29:17:42:
dc:e6:13:e1:fc:1a:07:31:f1:90:42:99:28:6a:de:2a:5e:82:
cf:eb:3e:ca:39:e7:38:27:90:d6:68:c7:76:b7:93:80:17:56:
5c:18:21:1a:c7:d8:de:1f:b5:18:f0:60:fb:ed:d0:f7:54:4f:
5e:33:8f:f2:36:a5:c5:96:8f:7b:85:aa:65:98:10:bf:e7:80:
18:1c:42:8e:0c:0e:4e:d8:1e:3a:5e:8e:91:20:46:f8:06:2f:
d9:53:3e:42:f0:55:62:de:69:29:34:e8:36:d7:a5:32:ee:aa:
42:ae:0a:14:2b:93:bc:9f:67:e7:47:00:2f:e9:8c:35:c8:61:
3c:8f:a5:31:e0:c0:8a:79:0c:93:46:07:40:a8:b4:73:4a:a3:
62:e0:70:52:4c:82:77:da:7d:fb:f5:bb:2d:07:0f:f8:71:cb:
66:ea:2d:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 21:58:59 2025 by rpki-client