Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS207445.roa
File: AS207445.roa (raw, json)
Hash identifier: 4bSHXju3OwTA/hriDmkGEzy/z2/2TJ9YNaq/WyDON1A=
Subject key identifier: E4:E2:69:5D:9A:6C:DF:68:1D:52:A8:6A:48:2D:7B:5E:9A:11:B4:AB
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 40336F20E7556A59EA1164B433A2317B53433493
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS207445.roa
Signing time: Thu 03 Jul 2025 15:52:45 +0000
ROA not before: Thu 03 Jul 2025 15:47:45 +0000
ROA not after: Thu 02 Jul 2026 15:52:45 +0000
asID: 207445
IP address blocks: 2a06:a005:f90::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 17:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:33:6f:20:e7:55:6a:59:ea:11:64:b4:33:a2:31:7b:53:43:34:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Jul 3 15:47:45 2025 GMT
Not After : Jul 2 15:52:45 2026 GMT
Subject: CN=E4E2695D9A6CDF681D52A86A482D7B5E9A11B4AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:89:03:13:b2:76:c9:76:62:0e:86:dc:62:74:
7d:c8:39:89:8a:99:60:94:22:b1:51:28:2e:ed:bf:
f7:45:7d:44:93:8a:f0:6b:1c:ba:0d:15:5e:ac:11:
75:cd:d7:56:3c:dd:ce:c1:13:a5:5b:19:49:cf:ed:
56:58:25:5c:2f:29:eb:57:20:3f:f7:93:65:f3:4d:
80:50:dc:cd:37:b2:8d:36:c3:fb:35:7e:48:8f:30:
8c:d4:d5:77:0d:d6:5b:ec:82:e6:41:d5:f2:d1:cc:
33:0f:a8:88:01:81:9b:aa:60:bf:ac:aa:43:6b:ec:
2b:f7:79:61:32:eb:43:ab:89:11:73:d1:7c:2d:e3:
e8:b9:22:b9:6d:30:19:10:98:5a:33:ef:16:41:0c:
f7:c2:97:57:05:ca:37:06:21:15:1d:05:87:7b:a5:
df:52:5c:65:c1:c2:f9:aa:78:e6:01:62:85:8b:04:
92:0e:ac:9f:c0:7d:d3:cb:d3:ce:44:86:6a:33:e8:
ee:8d:4a:34:15:fc:a8:e6:cb:1d:95:3b:55:79:78:
be:ac:f5:b2:74:db:25:a6:e8:73:9f:56:8e:c9:34:
6e:ec:46:cb:f8:ab:65:14:11:c5:b5:ce:c5:5d:67:
76:cf:c1:4a:e9:8a:0a:78:b3:37:19:df:e3:9b:6e:
e1:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:E2:69:5D:9A:6C:DF:68:1D:52:A8:6A:48:2D:7B:5E:9A:11:B4:AB
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS207445.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:f90::/44
Signature Algorithm: sha256WithRSAEncryption
a9:4d:30:5e:93:0c:48:5c:fd:5f:cd:d6:88:99:98:af:c3:42:
76:41:a9:f2:f7:c9:a7:26:42:44:bb:b9:15:84:c0:af:58:bf:
3e:29:32:30:5e:57:d4:79:b1:58:10:b3:4d:43:c7:f0:f1:bc:
34:ac:b8:c3:fe:65:ca:85:14:f9:66:ca:f7:bd:eb:20:71:83:
8a:93:ed:02:7b:db:73:39:96:46:27:e2:f0:f3:d2:cd:fb:87:
b2:7c:3f:27:b0:2d:13:06:27:f1:13:ac:68:69:ac:42:54:0c:
81:e8:61:f1:dc:f9:e4:c2:50:f4:20:b8:18:5e:3b:9e:9a:4f:
b5:b3:0d:2b:7d:23:d4:72:25:26:a4:cf:36:28:03:84:e1:e0:
cf:c9:49:84:57:92:21:eb:63:f7:ef:a9:43:20:12:f0:8d:52:
4b:d1:b2:3f:85:39:50:fa:d5:b2:17:3f:5a:6e:e8:b4:92:4f:
1d:6d:2a:56:b0:73:76:22:34:17:f0:46:69:3b:77:74:a3:8e:
a8:53:96:44:75:71:ae:61:af:90:84:5a:77:c9:1d:26:bb:83:
c4:4e:f5:c5:f8:9b:57:66:f5:fb:ce:5e:8c:b5:7f:1e:d6:12:
1a:88:18:62:bb:8b:96:8b:67:df:ee:b7:d1:0e:d6:4c:4e:15:
30:60:43:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 22:06:09 2025 by rpki-client