Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS210384.roa
File: AS210384.roa (raw, json)
Hash identifier: Z/L6AgP5NXYBROHfN41T4ebf8ylm5eznotOZ8uQbGM0=
Subject key identifier: 6E:E8:79:73:E1:90:A0:63:C1:43:1C:5F:91:61:D4:22:99:4C:07:7A
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 45CC6DAA10634E504E5219FEC9C6387621419F43
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS210384.roa
Signing time: Thu 03 Jul 2025 15:51:27 +0000
ROA not before: Thu 03 Jul 2025 15:46:27 +0000
ROA not after: Thu 02 Jul 2026 15:51:27 +0000
asID: 210384
IP address blocks: 2a06:a001:a100::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 17:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:cc:6d:aa:10:63:4e:50:4e:52:19:fe:c9:c6:38:76:21:41:9f:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Jul 3 15:46:27 2025 GMT
Not After : Jul 2 15:51:27 2026 GMT
Subject: CN=6EE87973E190A063C1431C5F9161D422994C077A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:e7:b4:7c:3e:81:fe:65:f9:23:d6:1f:b6:d3:
a1:58:82:35:30:45:05:f9:da:f4:23:24:21:c5:c0:
00:9d:12:2d:2c:3e:24:39:bf:d6:97:b4:8a:5e:a8:
45:47:39:ec:25:a3:a3:91:e7:64:50:76:2e:fd:3f:
bc:3e:61:88:1f:a2:15:84:d3:39:ab:7c:e2:d5:2b:
57:91:be:25:75:8f:92:1b:12:04:de:fd:19:de:a3:
d3:5a:73:f0:67:68:c1:02:aa:66:bd:9d:4b:19:f1:
4e:db:e0:56:3a:fc:ec:53:8f:a4:e7:30:b9:03:c5:
b0:c7:b5:71:df:15:cd:3b:ba:97:4e:df:21:a1:5f:
fa:76:ab:0f:1c:d6:62:e5:7b:08:ce:11:c9:2f:82:
8b:53:3b:82:f0:b3:ea:28:af:3f:7e:87:de:7c:8e:
02:0d:e5:c0:e2:1f:64:67:e9:ba:2d:de:ef:23:f0:
1a:c5:01:e1:82:2d:92:b5:08:34:08:f3:03:55:cb:
a3:5e:2f:3e:ee:76:81:d9:01:4b:9f:55:ec:3e:18:
dd:95:6a:3d:33:90:d4:e9:69:2f:be:ba:72:51:99:
85:f0:12:d8:02:66:d3:b2:a3:91:5a:f3:b4:81:d8:
af:65:2a:98:55:ca:1b:84:16:6b:26:9d:6a:5f:07:
23:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:E8:79:73:E1:90:A0:63:C1:43:1C:5F:91:61:D4:22:99:4C:07:7A
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS210384.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a001:a100::/44
Signature Algorithm: sha256WithRSAEncryption
8d:f2:cc:57:45:b9:8f:fd:d6:c0:8b:59:e1:d3:b7:a7:75:6b:
27:86:dc:55:b0:24:7f:cf:61:f4:28:8b:ef:f0:4b:29:a5:70:
9f:80:01:62:1b:c6:4b:6d:db:04:b2:88:c6:0f:2a:70:dc:2d:
1e:bd:d4:65:f1:35:ae:bc:db:5d:9b:e5:a3:2f:8b:ad:3e:06:
f9:92:ec:34:92:3d:2f:15:bf:fb:76:0e:88:b7:ef:cd:9c:12:
20:63:37:1b:d7:c0:e9:91:76:95:83:fb:c2:73:02:e9:12:5b:
7c:57:6d:b2:84:34:f8:95:0b:41:ad:e4:a8:42:27:28:5f:f7:
16:f5:92:32:2d:3a:87:3f:5a:83:57:79:3b:c4:70:92:44:9c:
02:43:ea:d9:9f:4e:b6:34:17:a2:9e:a0:49:f3:a7:d5:16:96:
36:14:35:ed:9a:de:91:8d:f7:ba:1d:f1:05:93:8a:af:2c:0e:
b1:8a:81:e7:2f:6a:ca:76:ec:14:8a:cc:8e:e7:a3:ae:f8:16:
6f:93:4d:d5:ea:e1:86:1a:44:6a:49:91:df:3b:20:68:86:9a:
b5:35:23:4a:86:60:59:28:be:f4:1d:f7:14:0b:50:32:aa:aa:
67:58:1c:df:38:9b:57:53:2e:39:03:ad:0e:ab:6a:68:d5:df:
26:81:ae:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 21:59:47 2025 by rpki-client