Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS206729.roa
File: AS206729.roa (raw, json)
Hash identifier: 0CzpOjWMJtabEgQL7TahTaKf0FsXTXHadWbyQ0Df0YM=
Subject key identifier: 98:C5:58:AD:9B:60:3B:3F:1A:CC:0D:68:49:C3:0E:1B:DC:49:AE:BA
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 482386557BEB87B215F847D7BE6F40542764946B
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS206729.roa
Signing time: Thu 03 Jul 2025 15:52:27 +0000
ROA not before: Thu 03 Jul 2025 15:47:27 +0000
ROA not after: Thu 02 Jul 2026 15:52:27 +0000
asID: 206729
IP address blocks: 2a06:a005:9e0::/44 maxlen: 48
2a06:a005:1c40::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 17:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:23:86:55:7b:eb:87:b2:15:f8:47:d7:be:6f:40:54:27:64:94:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Jul 3 15:47:27 2025 GMT
Not After : Jul 2 15:52:27 2026 GMT
Subject: CN=98C558AD9B603B3F1ACC0D6849C30E1BDC49AEBA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:56:b7:19:4b:5f:4b:41:43:1c:3b:c0:a3:6e:
45:59:d4:8a:2e:f6:85:70:b8:14:f2:5e:67:9b:2c:
86:8d:e5:6d:e6:a9:35:97:a4:88:6c:1c:b6:70:61:
47:5b:d0:3a:03:9a:09:61:40:85:82:0e:85:b9:e4:
c8:fc:c2:0b:d7:90:ff:12:8e:4c:ae:cb:75:c7:9d:
7c:34:74:d5:29:1e:c2:34:df:21:8c:57:f5:17:66:
3e:84:bd:37:bc:a8:88:b1:cd:93:06:ea:37:f7:61:
9e:51:b5:79:71:13:89:96:b7:93:26:6d:27:8a:a1:
c1:24:91:f4:43:36:b1:e9:2b:ad:f7:44:be:6c:b1:
01:f0:02:33:c0:28:6f:21:07:fd:15:2b:c7:ca:eb:
8b:d3:77:5c:32:19:09:23:fc:08:6d:72:bf:c1:72:
44:39:ea:a5:9c:f9:4a:af:de:38:2a:f3:6d:a8:d6:
a3:d6:ee:e0:1c:5c:23:c1:c6:7b:71:9e:8b:a4:d7:
16:bf:a8:11:50:b6:7f:64:e1:7d:71:63:bb:61:91:
29:b0:ba:b1:b0:1b:de:9d:c6:b2:c0:64:5f:99:fb:
66:85:33:8d:eb:d6:6e:53:42:91:42:2c:f5:6c:89:
2d:4c:49:a8:20:6c:0c:e5:67:54:89:dd:3f:50:27:
a7:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:C5:58:AD:9B:60:3B:3F:1A:CC:0D:68:49:C3:0E:1B:DC:49:AE:BA
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS206729.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:9e0::/44
2a06:a005:1c40::/44
Signature Algorithm: sha256WithRSAEncryption
95:26:d4:84:6c:f7:90:f3:4b:b8:e5:2c:48:4e:28:f3:98:af:
1b:ce:7a:38:d8:15:61:ad:33:bf:f9:6b:29:11:a2:40:e6:60:
b8:1d:83:bf:44:30:06:13:8e:2a:88:80:e6:4b:1d:a1:00:c1:
7d:88:04:3d:fa:ca:dc:14:51:34:56:30:fd:a5:25:0a:b9:8b:
84:09:69:c8:d8:f1:48:9f:68:18:fa:e9:d1:a4:1c:ff:c1:3b:
d6:11:ee:db:f9:9c:1d:de:0a:65:e3:64:04:36:76:dc:88:35:
04:a5:c0:67:ce:4a:2f:b2:06:0c:80:d7:c4:a3:e7:e2:96:7a:
e2:39:9d:22:43:a1:da:47:1a:d0:b4:4b:fb:22:1a:dd:ee:ba:
29:a7:85:e4:69:d4:78:80:7a:74:d5:45:49:a3:be:ea:c4:df:
a6:0d:41:7f:7f:58:3a:99:52:f9:e5:26:ba:d3:94:3c:e6:3f:
74:27:a7:3b:11:11:d5:16:7b:6c:3c:ee:e5:8e:04:81:c9:48:
54:de:a5:0e:91:d3:0e:00:0f:22:24:ff:ae:c2:3b:a2:35:97:
49:94:59:88:6c:42:f6:11:59:4a:70:4e:7b:78:9b:69:2f:19:
5c:74:e0:a2:4d:96:9a:e0:f2:49:68:87:06:06:9c:b9:ab:26:
32:37:57:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 22:12:56 2025 by rpki-client