Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS212252.roa
File: AS212252.roa (raw, json)
Hash identifier: EsmiwuAvRIq63n9v0x/3XUOQ63oYvm+neLi9ri2WMLA=
Subject key identifier: 5B:DD:AE:05:38:42:95:13:D4:95:FF:C3:AC:E2:0D:2F:68:2C:F5:31
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 74EEA33EEBF2FA7725B34D04A63A9D17132374D5
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS212252.roa
Signing time: Thu 03 Jul 2025 15:52:15 +0000
ROA not before: Thu 03 Jul 2025 15:47:15 +0000
ROA not after: Thu 02 Jul 2026 15:52:15 +0000
asID: 212252
IP address blocks: 2a06:a005:2430::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 17:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:ee:a3:3e:eb:f2:fa:77:25:b3:4d:04:a6:3a:9d:17:13:23:74:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Jul 3 15:47:15 2025 GMT
Not After : Jul 2 15:52:15 2026 GMT
Subject: CN=5BDDAE0538429513D495FFC3ACE20D2F682CF531
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:e1:56:10:f5:4e:f7:ea:46:94:13:27:4e:e2:
57:2e:a7:19:8d:6f:9c:1b:4c:30:aa:f7:d0:a9:4d:
4d:5d:52:d6:fc:c3:c1:e0:a6:e8:4f:42:33:4f:29:
cc:c6:09:d7:a3:b7:ca:db:90:c6:88:77:f8:23:8c:
bb:6f:85:29:7d:68:7c:99:e2:b7:55:8e:fe:b9:d9:
69:f9:8c:1e:c1:01:f8:f9:85:b2:80:96:37:82:e9:
b6:5c:ed:7b:ef:e6:04:b7:d8:3e:9b:ef:42:47:f2:
00:75:57:3a:5b:81:1d:9e:0c:aa:af:b8:03:64:25:
76:61:f1:a7:f6:b6:d3:ed:82:de:76:81:db:fa:e2:
ce:82:44:b4:c7:76:57:b4:99:ee:91:68:24:14:c4:
0d:26:20:65:d3:7d:e0:f1:d3:29:a9:4b:79:65:4e:
7d:42:c8:a1:d6:d7:94:97:cd:c3:e8:ff:aa:dd:4c:
1d:e8:de:47:a9:02:6d:cb:11:4b:c5:af:1a:49:23:
9c:c1:ba:8b:2e:65:c1:f6:b3:3e:08:ef:b3:7c:46:
12:dd:2f:4b:36:ec:ff:ec:60:f9:c5:f5:fa:94:61:
89:87:21:2e:86:62:3f:ff:b6:ca:44:7a:a6:c2:04:
18:4a:84:92:68:6e:24:55:63:30:57:19:b7:6e:ec:
bb:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:DD:AE:05:38:42:95:13:D4:95:FF:C3:AC:E2:0D:2F:68:2C:F5:31
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS212252.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:2430::/44
Signature Algorithm: sha256WithRSAEncryption
05:60:5b:53:df:40:68:b5:15:da:2b:c8:2d:6d:a3:9c:1d:02:
06:34:8d:ae:e7:b6:d4:66:57:76:55:10:7e:50:b7:6e:b2:0a:
e5:20:c7:f3:7e:9b:6b:de:f6:02:ca:4e:cd:70:29:79:4b:4c:
27:25:21:6d:41:58:5f:35:19:86:a3:8a:3b:d9:af:ac:b3:52:
7d:32:0e:1a:dc:4c:5a:f4:5b:5c:0b:18:dc:03:c1:55:ce:b9:
a1:76:2e:84:3e:28:24:92:68:32:66:55:74:b8:ce:d3:76:66:
ee:30:ab:e9:de:6d:56:e9:c4:58:a1:16:76:76:e6:3a:48:41:
ec:ac:6a:95:37:51:0e:97:1c:c0:18:25:3b:4c:48:62:a9:0b:
9c:41:8b:7b:05:45:03:79:a9:1a:4c:8f:00:98:84:a0:71:93:
de:40:6e:3e:f8:5c:34:b0:83:68:56:60:74:d2:b0:20:4f:4c:
86:de:da:d6:46:1b:90:3c:8e:91:90:22:f1:21:98:1f:6d:62:
15:48:3d:41:89:51:a6:4a:dd:80:70:9d:65:dc:e2:e4:0f:db:
a0:39:80:63:72:05:01:01:d6:01:ff:1d:64:4c:c3:02:93:9b:
53:6b:b3:b8:a9:5e:8c:ef:eb:54:0e:9d:72:fc:27:3d:ec:72:
43:7c:8a:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 22:09:17 2025 by rpki-client