Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS210445.roa
File: AS210445.roa (raw, json)
Hash identifier: 66gZCMyMJJsw+UcpqBuKgQMQanQ0aeD/qa3C0EkJm6s=
Subject key identifier: 1E:82:22:CD:2D:55:BD:E9:9B:98:22:B3:96:FE:90:9B:D0:15:90:0A
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 01C0A0006E67644A00E8D4DF698313159D5BD4A3
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS210445.roa
Signing time: Thu 03 Jul 2025 15:51:45 +0000
ROA not before: Thu 03 Jul 2025 15:46:45 +0000
ROA not after: Thu 02 Jul 2026 15:51:45 +0000
asID: 210445
IP address blocks: 2a06:a005:f60::/44 maxlen: 48
2a06:a005:16f0::/44 maxlen: 48
2a06:a005:2180::/44 maxlen: 48
2a06:a005:29b0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 17:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:c0:a0:00:6e:67:64:4a:00:e8:d4:df:69:83:13:15:9d:5b:d4:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Jul 3 15:46:45 2025 GMT
Not After : Jul 2 15:51:45 2026 GMT
Subject: CN=1E8222CD2D55BDE99B9822B396FE909BD015900A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:c7:ba:5e:06:1c:52:11:0a:cb:38:45:8c:fc:
95:3a:83:91:e7:d3:0f:24:b1:83:9d:6a:78:af:4a:
3a:6c:1b:17:e5:d8:04:2e:f4:52:22:92:90:f3:19:
94:da:7b:d4:1b:fa:26:b4:a1:f8:8b:90:c3:70:68:
45:19:28:5f:ad:b2:cf:98:e4:16:b5:00:42:ed:2d:
9f:ef:af:02:6b:77:d0:f5:35:14:d1:1a:79:99:1c:
0f:f2:b4:51:13:d9:50:5d:9a:8b:5d:b6:51:31:51:
7f:f7:5b:3c:c4:90:a8:c6:da:c5:89:4c:8d:3a:28:
fa:2e:0d:c0:1e:43:29:1b:68:9d:e9:61:11:80:75:
82:a4:fa:5b:be:4d:9e:bf:c0:29:28:01:0a:e1:a6:
1d:c9:d7:d2:aa:89:99:01:03:42:f1:e2:72:3b:f2:
0c:6d:3a:e8:67:12:1a:cb:6b:1a:f4:ff:32:75:d1:
11:ab:1e:d0:dc:55:ca:51:6f:77:ac:2b:c4:a2:75:
00:01:71:c3:50:cd:d2:41:f2:90:98:c0:3c:3e:de:
42:3e:a7:b4:0c:02:30:3c:05:e0:8e:14:28:74:53:
7c:1d:a5:ea:c7:e5:e6:6b:be:42:cc:1d:98:07:7f:
e9:28:7f:c6:eb:4a:6b:78:76:90:d8:c5:e5:0a:95:
55:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:82:22:CD:2D:55:BD:E9:9B:98:22:B3:96:FE:90:9B:D0:15:90:0A
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS210445.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:f60::/44
2a06:a005:16f0::/44
2a06:a005:2180::/44
2a06:a005:29b0::/44
Signature Algorithm: sha256WithRSAEncryption
53:d4:ee:09:d0:66:40:3a:46:c6:ac:97:d4:fd:6e:01:26:43:
cc:e5:23:9b:e4:96:f0:40:8b:54:2b:41:af:15:bf:f8:e6:2b:
e5:03:36:41:49:26:7f:02:53:0f:6f:4c:7e:d8:05:fe:d5:43:
18:24:69:26:1c:5a:be:e1:33:11:84:d8:85:99:3f:55:c6:77:
e3:bc:89:e2:2c:dc:b8:64:c6:39:04:38:17:0a:d9:90:08:cd:
c7:42:db:3d:7f:6f:71:df:7a:15:ea:4a:6d:ff:ac:e3:4f:7b:
a8:0e:5c:dd:e7:13:83:d1:fb:f9:ba:f5:f3:10:36:47:83:7b:
4e:ac:85:79:9c:44:55:d4:1a:64:78:dc:a6:a2:39:70:c1:28:
c1:94:b4:68:70:07:e7:e2:39:4e:7b:0d:2d:34:ba:17:a8:e7:
85:ea:0b:f2:41:b7:be:47:61:cf:b0:7e:2a:07:c7:ae:58:09:
a3:8e:f0:4a:9e:70:ac:94:97:26:2a:a6:96:73:1e:9b:93:dc:
eb:0f:57:f3:a0:b0:25:c6:d6:34:d6:63:19:4c:df:ab:ff:a8:
4a:33:a0:d9:11:eb:00:be:b6:92:b7:08:32:20:a5:5d:ae:b5:
e0:16:27:e6:4c:1f:08:7c:73:f6:02:e6:e8:bf:dd:a4:4e:97:
39:36:e9:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 22:08:29 2025 by rpki-client