Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS211869.roa
File: AS211869.roa (raw, json)
Hash identifier: rkkmqp5YvsI3mhIAgcMYMxCYuoBXgSSwgq32BDmKL2o=
Subject key identifier: 37:CC:F3:6B:16:DF:7C:49:34:95:E9:5A:73:8F:2D:A0:62:98:B9:B2
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 6F5E73865566EB2545C960CD1C9B7F80FB4EF843
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS211869.roa
Signing time: Thu 03 Jul 2025 15:52:20 +0000
ROA not before: Thu 03 Jul 2025 15:47:20 +0000
ROA not after: Thu 02 Jul 2026 15:52:20 +0000
asID: 211869
IP address blocks: 2a06:a005:1300::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 17:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:5e:73:86:55:66:eb:25:45:c9:60:cd:1c:9b:7f:80:fb:4e:f8:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Jul 3 15:47:20 2025 GMT
Not After : Jul 2 15:52:20 2026 GMT
Subject: CN=37CCF36B16DF7C493495E95A738F2DA06298B9B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2b:40:82:78:2a:72:ac:5f:08:1f:20:1f:30:
af:e4:10:c6:25:42:ec:d3:1a:ea:60:58:dc:7c:0d:
b7:cd:a5:f9:98:4f:98:de:bd:53:6f:c6:03:ca:85:
85:6d:08:50:eb:65:30:29:d4:1c:a3:66:17:fc:bb:
c0:7d:e9:08:be:c5:c2:81:30:cd:74:27:70:e0:89:
54:5b:e1:52:d3:23:b6:45:bc:37:2e:1c:03:58:b7:
d4:31:51:60:e3:8b:82:e7:1d:92:b2:d0:48:65:19:
a5:c8:2a:3d:70:77:bd:e9:f3:27:25:5d:9c:16:50:
5b:fa:d1:b9:29:84:aa:d4:2d:34:20:14:2d:d9:e4:
2c:5a:56:2c:54:81:6b:76:fb:16:65:7b:22:27:b4:
78:ea:2d:2a:a4:e5:0c:59:21:0b:0c:6d:b3:ed:27:
fe:9e:bd:ef:70:5b:bb:87:ce:45:06:42:5e:4e:55:
61:48:47:e7:c3:0b:55:5c:92:6b:c5:06:50:d0:2f:
a8:8a:25:a9:00:40:5a:73:ba:4e:00:89:b8:d4:b4:
97:5a:fc:5a:2a:01:96:66:56:2b:0b:eb:83:68:3e:
33:e3:6b:e4:22:b9:70:c1:62:8f:d0:60:ea:b9:e6:
b4:88:12:fa:4e:71:00:cf:25:c5:6a:de:92:23:47:
60:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:CC:F3:6B:16:DF:7C:49:34:95:E9:5A:73:8F:2D:A0:62:98:B9:B2
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS211869.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1300::/44
Signature Algorithm: sha256WithRSAEncryption
ba:a3:ef:19:92:73:f7:b7:17:b5:45:40:82:2e:3f:39:ab:56:
cf:d3:b0:50:64:b1:f0:e2:75:a2:dc:7d:61:17:d9:8e:de:97:
e1:86:b2:21:1c:e6:c5:ad:d3:dd:c2:08:97:2c:62:fd:44:2b:
30:7c:3f:17:4e:c4:74:31:32:95:9a:1d:d8:a3:3f:2e:2e:dd:
71:d8:90:8f:dc:3f:70:49:b0:99:54:eb:e8:38:43:f7:fa:36:
61:19:90:e3:a2:45:ec:a9:a7:d6:27:1b:71:b1:14:2f:87:76:
12:65:97:38:85:78:66:72:30:54:10:a1:4b:95:c8:13:f7:8d:
41:68:8a:57:bb:52:1b:d2:82:44:90:9d:c4:b0:df:62:60:5d:
8b:12:e2:e5:d8:3e:76:98:d2:a5:bf:b1:8b:0c:10:7d:4a:0e:
ba:61:a8:76:46:56:8b:e3:b7:ea:00:f6:b8:75:5e:d7:c8:68:
ec:f2:aa:df:ad:df:ba:6d:f8:fc:20:0a:15:62:7a:ee:22:d6:
4f:90:b8:7b:8e:02:bd:ea:71:77:cc:e2:75:61:f4:05:dc:77:
9b:06:d8:6b:4c:05:19:7d:ec:c3:d4:a1:d8:e6:ae:66:76:2a:
9f:4d:01:29:ce:48:5b:e0:68:48:2d:03:3e:37:09:b4:13:0d:
74:80:3e:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 22:22:56 2025 by rpki-client