Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS212085.roa
File: AS212085.roa (raw, json)
Hash identifier: 59HIE6gLoUbao+4VqPDt3CFDKOdUZFHPt7iiSOogZvQ=
Subject key identifier: 6D:22:F9:C0:4D:21:7F:71:59:44:69:DB:9B:AC:77:B3:62:07:74:23
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 371840AA3A22D978CF6840BCF2EC28F63349A4BD
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS212085.roa
Signing time: Thu 03 Jul 2025 15:52:09 +0000
ROA not before: Thu 03 Jul 2025 15:47:09 +0000
ROA not after: Thu 02 Jul 2026 15:52:09 +0000
asID: 212085
IP address blocks: 2a06:a001:a070::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 17:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:18:40:aa:3a:22:d9:78:cf:68:40:bc:f2:ec:28:f6:33:49:a4:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Jul 3 15:47:09 2025 GMT
Not After : Jul 2 15:52:09 2026 GMT
Subject: CN=6D22F9C04D217F71594469DB9BAC77B362077423
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:36:0f:6f:29:f0:e2:04:f1:aa:0c:e7:1c:61:
70:29:67:b3:2b:58:56:7b:2a:57:68:70:15:ee:b2:
c2:4b:9c:ee:02:88:85:68:17:7f:68:88:14:d4:2c:
5a:ac:4e:f0:ea:53:7c:0a:a1:cd:73:6b:44:aa:3b:
58:47:5b:81:65:a7:c7:e1:b3:01:b1:d3:8a:7d:1b:
8e:b8:c1:70:ba:58:e0:cd:b7:10:02:6a:f7:87:5b:
64:f3:47:10:2d:02:94:f3:a5:60:ae:5f:cc:1b:9b:
5c:68:8f:81:08:ec:2a:4b:8f:8e:b6:2a:f9:1c:aa:
17:87:0b:91:84:8d:0c:c7:03:6d:78:e2:00:26:c2:
7c:bc:5a:a6:5c:fe:d5:a8:03:a3:30:04:94:e6:22:
9d:b3:cb:f8:71:ea:55:a4:e6:d8:4e:5b:18:99:71:
87:ee:03:3a:31:ec:b7:9b:e4:e6:b4:82:13:43:35:
d3:bb:19:f3:8e:1f:7d:25:42:ab:e9:8e:95:a3:06:
45:2a:d4:54:60:c6:bd:8b:59:ce:69:82:56:5c:fe:
ef:62:73:3e:f9:9d:95:9e:c6:2d:7a:b8:83:af:ef:
01:17:d2:ff:0c:d3:c4:12:eb:36:7d:a0:10:6c:0d:
12:50:15:25:0a:48:bb:dd:74:10:43:2d:ab:30:65:
6d:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:22:F9:C0:4D:21:7F:71:59:44:69:DB:9B:AC:77:B3:62:07:74:23
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS212085.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a001:a070::/44
Signature Algorithm: sha256WithRSAEncryption
b3:cb:b3:95:ea:69:93:54:a4:34:0a:f7:cd:ff:18:fb:f2:89:
aa:5e:47:3f:a2:b1:8f:f0:e1:55:97:e7:01:33:7a:99:31:e6:
a3:48:2d:1c:15:06:19:a6:aa:3c:fc:cd:4f:5d:9a:c4:26:90:
55:97:9e:09:46:2d:21:6f:5f:fc:c5:0f:81:44:47:cb:06:cd:
9b:e7:4f:46:ef:0d:d7:f9:14:fc:80:2e:d1:2d:92:5f:e8:21:
1a:8d:9c:0f:c9:20:c2:8f:62:ec:e0:33:7e:7a:c4:02:45:4a:
64:72:ed:02:70:d0:71:a5:f4:5f:09:0e:e8:ca:2f:6a:4d:83:
b7:ec:a0:ce:fa:8e:58:8a:ee:97:58:42:bf:05:2d:29:4b:d7:
75:98:2c:99:0f:9e:d6:28:29:f5:cc:66:7c:6f:47:f5:75:1f:
ac:2d:19:0b:ba:9b:66:20:5e:f3:8f:be:bd:dd:55:32:98:1d:
be:1d:13:93:b9:cf:a1:4c:28:f8:35:90:14:98:84:f7:35:02:
92:28:6d:85:96:86:0e:fc:cf:5e:e2:7f:6e:1c:8d:c9:9d:38:
88:b2:a1:5f:1b:49:01:de:fc:15:22:a0:d1:58:d1:d4:82:bb:
0f:1d:f0:a5:6c:59:b0:de:f6:6e:8d:94:fb:a1:54:cc:3f:96:
3b:45:b1:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 22:08:30 2025 by rpki-client