Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS206292.roa
File: AS206292.roa (raw, json)
Hash identifier: FTuqX6blGbMyQm5BFLzhQXTOesr0EuoriR0c+AjEaeo=
Subject key identifier: DC:99:C1:EC:D8:00:C8:10:28:6D:2D:7D:DC:A1:42:3C:22:D4:58:FB
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 10FFBF09FD15E73CACC5A1E58402102ECE8AD2CC
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS206292.roa
Signing time: Thu 03 Jul 2025 15:52:28 +0000
ROA not before: Thu 03 Jul 2025 15:47:28 +0000
ROA not after: Thu 02 Jul 2026 15:52:28 +0000
asID: 206292
IP address blocks: 81.31.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 17:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:ff:bf:09:fd:15:e7:3c:ac:c5:a1:e5:84:02:10:2e:ce:8a:d2:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Jul 3 15:47:28 2025 GMT
Not After : Jul 2 15:52:28 2026 GMT
Subject: CN=DC99C1ECD800C810286D2D7DDCA1423C22D458FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a9:cc:4c:eb:99:8c:28:81:e0:f5:ec:4c:9a:
3f:33:b1:0b:7e:fd:03:2a:7d:56:15:6c:09:8c:b4:
d3:0c:6a:7a:ba:60:ec:d7:94:96:ab:0b:7e:dc:8d:
09:2e:ce:fe:62:c5:9c:fa:82:04:24:f4:dc:a5:67:
db:2d:ab:70:a4:94:e6:99:a4:9a:fd:35:7f:a8:ca:
8f:9e:c6:fe:ae:2c:37:c5:44:4e:87:91:2c:cb:9c:
a2:4f:39:41:7d:18:41:fd:b2:77:b5:01:fe:9b:75:
63:3d:c4:d0:c2:b6:43:64:ca:61:f2:e6:04:6d:51:
0c:39:a6:84:39:8a:15:07:8e:d6:84:e6:09:26:ee:
ac:b9:0c:21:6c:c0:7f:ec:99:b4:11:ae:1c:86:c4:
35:ea:d1:88:44:05:19:df:9e:9c:2c:89:3a:82:f0:
5c:59:ba:3b:a6:10:e7:d3:ff:61:2a:c7:41:ba:e2:
47:47:6c:a8:89:e4:55:52:87:1d:21:5b:a1:57:1a:
89:83:32:28:8c:38:b0:93:a5:23:56:eb:b0:fa:7f:
a7:b3:67:cb:cc:c1:3c:7c:66:27:54:f0:58:ee:c6:
ed:90:1e:4a:ab:21:5a:45:21:eb:bf:97:34:1c:73:
3c:9e:84:9c:33:e9:aa:69:a3:f1:6e:8d:8d:60:86:
3d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:99:C1:EC:D8:00:C8:10:28:6D:2D:7D:DC:A1:42:3C:22:D4:58:FB
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS206292.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.31.215.0/24
Signature Algorithm: sha256WithRSAEncryption
20:7e:1d:03:ad:96:2d:6f:96:68:5a:03:80:43:4c:2f:5f:43:
58:1c:f0:0f:a6:92:f7:e8:e0:a5:c3:4b:b6:d9:c3:16:7a:95:
11:48:14:e3:fd:30:d8:75:5a:9b:ef:fe:a8:de:fb:18:60:02:
05:fc:e6:af:59:07:3c:6c:0e:5b:1f:f4:87:dd:88:b4:5c:64:
eb:b6:77:39:b1:0d:7c:72:91:ee:b5:b4:db:c6:02:da:d3:51:
fb:dc:a0:62:1f:f7:96:0d:a6:fb:d3:be:1e:b2:e3:76:33:3a:
ea:3d:6c:29:16:34:da:3b:ae:74:3b:26:71:e4:32:75:d4:c8:
7b:c2:ed:fd:ad:93:03:8e:30:5b:4e:80:c4:b7:92:01:6f:32:
9c:73:67:d5:fd:53:31:1c:00:70:bc:3c:0e:76:8b:bb:08:86:
65:45:05:48:4a:5a:86:bc:b5:29:5d:f5:1c:68:ed:2b:55:91:
44:80:96:db:0d:97:b6:1c:85:2f:98:a8:43:15:e0:35:7a:4d:
ea:e8:9c:71:3a:d7:cc:cf:8b:1a:4f:4c:7c:80:9f:cc:42:33:
51:d9:94:5e:e6:9d:87:ab:70:84:ce:08:c9:5e:0e:26:43:86:
dd:ad:92:28:a3:09:40:3c:c4:40:78:f2:52:67:cf:cc:12:b4:
88:53:d8:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 22:12:55 2025 by rpki-client