Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS206569.roa
File: AS206569.roa (raw, json)
Hash identifier: Xxr82NAGL1B0nJxJjnbpxqqm/2stXOiIh0U9pKiyiAE=
Subject key identifier: 4C:22:80:D4:9D:F8:BA:A5:36:34:BC:56:54:B1:9B:32:2A:A3:01:E6
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 4573A0435CFAB6EF14DE34892180FEC46AD53647
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS206569.roa
Signing time: Thu 03 Jul 2025 15:52:07 +0000
ROA not before: Thu 03 Jul 2025 15:47:07 +0000
ROA not after: Thu 02 Jul 2026 15:52:07 +0000
asID: 206569
IP address blocks: 2a06:a005:2000::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 17:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:73:a0:43:5c:fa:b6:ef:14:de:34:89:21:80:fe:c4:6a:d5:36:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Jul 3 15:47:07 2025 GMT
Not After : Jul 2 15:52:07 2026 GMT
Subject: CN=4C2280D49DF8BAA53634BC5654B19B322AA301E6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:d3:47:60:ad:eb:96:76:d0:8d:e4:42:44:2d:
ff:97:29:c8:06:3e:3a:3b:32:0e:9d:af:a6:50:db:
34:80:42:40:0e:16:c3:7d:e4:02:3a:31:66:cf:2c:
4c:83:38:28:10:0d:ad:3b:f9:dc:ae:ba:9f:00:81:
c2:bf:44:28:f0:cd:5b:39:64:f0:07:a1:88:08:40:
20:44:d8:92:56:b3:d0:5c:fa:1f:aa:8f:cd:99:18:
6c:d6:e1:ab:15:73:8f:7b:d8:57:d3:22:5e:6b:7b:
48:4b:32:e8:47:5e:0b:4a:f4:29:e5:f4:fc:e9:37:
4d:ed:27:24:7e:56:55:d5:ac:e4:e8:54:a1:68:3a:
d5:c1:33:6d:9f:0c:93:b7:9c:86:61:7f:0e:15:52:
c8:8f:6e:a9:ad:be:7b:22:8f:1b:f0:b0:f0:20:95:
4c:57:7a:28:a1:99:1e:56:90:80:cd:c4:84:fe:6d:
6e:c7:30:84:3c:58:16:6e:9e:ce:87:2d:95:d7:d1:
c7:b6:43:f8:fb:3c:ad:68:ad:0d:a4:14:bb:71:69:
8d:65:33:9a:e1:c0:a2:6a:b4:f4:e7:01:dc:3e:dc:
0d:ee:10:53:92:03:da:b9:e6:65:1f:46:a2:85:0a:
38:d6:08:0b:a7:8c:46:3d:ba:9e:85:3b:f8:ae:3d:
44:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:22:80:D4:9D:F8:BA:A5:36:34:BC:56:54:B1:9B:32:2A:A3:01:E6
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS206569.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:2000::/44
Signature Algorithm: sha256WithRSAEncryption
19:d3:83:ae:53:1e:fb:5e:b3:41:9a:98:9b:b2:ba:d7:91:31:
57:c2:23:a0:a0:3a:aa:9d:49:14:f6:98:40:d7:c0:a7:c0:cd:
9f:31:08:b6:4b:1e:31:76:5e:10:ba:37:0d:bb:f8:d6:13:3d:
c2:7a:20:73:ed:f4:81:76:5a:c8:14:ec:52:dd:02:67:d7:61:
dc:7b:90:53:49:93:f2:4d:12:34:f4:a1:de:f9:b6:43:ed:b4:
20:25:a9:33:f6:30:7c:8b:42:64:fd:59:e0:f9:fe:d8:fd:99:
2e:d5:0d:ae:03:70:43:60:6e:87:2f:b4:c1:5e:16:18:9c:ca:
ed:0b:4c:14:53:3b:6f:22:ca:28:7f:46:2f:96:de:7d:cd:fc:
91:3d:43:6e:16:d9:a5:a6:a3:b3:dd:e2:3a:23:5f:25:07:da:
c3:da:a7:d5:72:cd:10:29:90:7d:f4:e6:83:6a:69:4c:6c:48:
d0:7c:3b:e8:54:67:77:27:ca:35:90:b9:4b:55:d9:a0:e2:41:
5d:ac:26:a8:ee:59:0d:0c:a4:31:4f:2e:09:2d:80:41:3f:b8:
b3:06:c2:21:c2:da:af:60:b9:36:e4:74:bd:4f:e0:5a:ee:5c:
05:d6:0b:54:c8:cf:95:21:33:39:27:95:bc:14:b8:82:f4:24:
9e:48:e3:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 22:06:09 2025 by rpki-client