Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS212359.roa
File: AS212359.roa (raw, json)
Hash identifier: SKph73VN+XIeOkoXwCDv9U4WxQtkh8i+NeQQKMtjOfE=
Subject key identifier: 5F:91:42:DD:43:85:8F:9B:1D:A2:5A:E4:B5:D2:9C:46:95:A1:26:8F
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 420FBF7149E8DFBCE5CD78BBCA790232C1EB9C86
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS212359.roa
Signing time: Thu 03 Jul 2025 15:52:27 +0000
ROA not before: Thu 03 Jul 2025 15:47:27 +0000
ROA not after: Thu 02 Jul 2026 15:52:27 +0000
asID: 212359
IP address blocks: 2a06:a005:1c0::/44 maxlen: 48
2a06:a005:1d0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 17:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:0f:bf:71:49:e8:df:bc:e5:cd:78:bb:ca:79:02:32:c1:eb:9c:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Jul 3 15:47:27 2025 GMT
Not After : Jul 2 15:52:27 2026 GMT
Subject: CN=5F9142DD43858F9B1DA25AE4B5D29C4695A1268F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:30:42:20:dc:a2:5a:ce:1a:cb:10:c2:60:91:
4b:b3:5e:65:16:2d:f3:f4:0b:d5:57:4f:57:c3:f6:
af:c6:a2:f6:82:0e:b9:1e:16:1d:74:b0:19:08:e8:
55:a3:f8:7b:fe:1d:0e:d3:d1:22:18:fb:51:32:bc:
6a:6c:ce:85:6a:de:73:8e:11:87:ea:3b:ef:24:57:
1a:49:ec:59:e6:25:ab:6d:2a:bf:6f:70:06:9f:98:
64:ef:95:0a:2f:29:1e:7c:0b:35:66:8e:c6:d6:1b:
10:45:b4:e0:45:29:c1:c9:10:80:c8:29:d9:21:3f:
99:d1:0b:1b:c5:ee:32:df:3a:74:94:5e:d1:c5:fb:
ef:69:fa:2f:9d:81:a9:d6:cb:31:d1:e1:a7:4b:7b:
ee:80:60:75:df:9d:f2:aa:73:cc:52:8d:29:91:4d:
ed:d7:5b:95:f5:92:c2:c4:ed:ce:66:f4:17:23:62:
17:47:bf:a0:06:97:bc:6d:ce:46:c5:5b:2d:c6:a3:
92:d0:81:a1:ef:98:bd:6e:4c:9d:a1:ae:61:6c:27:
39:fb:11:e8:8c:ed:a7:ee:7e:57:39:7d:21:70:d0:
74:6c:00:86:90:50:88:df:36:b7:0f:3e:48:f2:e0:
07:be:ae:e5:de:88:00:71:3d:ac:3e:9b:07:eb:1a:
50:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:91:42:DD:43:85:8F:9B:1D:A2:5A:E4:B5:D2:9C:46:95:A1:26:8F
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS212359.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1c0::/43
Signature Algorithm: sha256WithRSAEncryption
2f:50:03:ea:8d:83:ba:6f:f8:d3:12:98:46:6e:3f:45:d8:22:
dc:3b:0f:70:41:a5:bb:36:a2:93:16:fc:84:63:a3:e8:67:fd:
8b:7e:a0:f3:d2:e3:12:86:dd:08:3d:f2:5b:64:cc:43:77:08:
ca:f5:29:c1:42:63:8f:df:7e:1f:d0:1a:4f:e4:35:e9:7b:d0:
fb:cc:3b:7d:65:63:a5:28:d8:3b:01:c2:29:7b:ff:fc:31:8d:
e3:61:e1:39:99:78:58:4d:2b:99:05:7d:90:b6:93:42:39:d7:
b5:9b:31:59:e7:ff:7d:a7:ab:34:c7:5c:1f:aa:5d:c6:8d:88:
87:e4:c4:81:cc:5f:5e:6e:75:2f:1a:94:b6:5d:9a:80:ad:e6:
61:57:e1:5b:af:09:79:ce:35:c5:79:61:a1:7b:93:8d:dc:69:
04:a5:fb:83:9f:54:ce:fd:50:f2:59:3e:9a:5f:10:c3:e0:9f:
84:2f:20:6a:0c:30:73:6f:bf:d2:6d:46:51:a4:37:52:fa:ca:
8c:57:da:8f:d7:95:91:6a:cc:71:e8:3b:81:4f:e6:a1:52:0d:
0c:73:e3:0a:54:1c:84:71:6b:d7:cd:38:12:80:1c:10:cf:96:
c3:1f:ce:a7:ff:6d:5c:ae:1c:0c:43:bb:59:a6:5d:f2:35:64:
e2:28:b1:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 22:07:35 2025 by rpki-client