Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS212703.roa
File: AS212703.roa (raw, json)
Hash identifier: Yu1bsyMhuYA1OZQj94Oskwhzn+dnWWTWdgzys424MM0=
Subject key identifier: 79:5C:4D:F8:3A:70:8D:57:A4:8D:7B:F0:51:C0:06:C8:92:E8:9B:2A
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 3351FCD6D7769B2BFE73EDB13DD8E17F3788D13E
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS212703.roa
Signing time: Thu 03 Jul 2025 15:51:33 +0000
ROA not before: Thu 03 Jul 2025 15:46:33 +0000
ROA not after: Thu 02 Jul 2026 15:51:33 +0000
asID: 212703
IP address blocks: 2a06:a005:187c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 17:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:51:fc:d6:d7:76:9b:2b:fe:73:ed:b1:3d:d8:e1:7f:37:88:d1:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Jul 3 15:46:33 2025 GMT
Not After : Jul 2 15:51:33 2026 GMT
Subject: CN=795C4DF83A708D57A48D7BF051C006C892E89B2A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c8:9b:b3:51:50:a5:fc:3d:68:a9:33:39:8f:
34:0a:8f:9a:03:54:a6:f7:04:4c:1e:9c:cf:6a:cf:
0b:42:ea:0b:5c:7a:06:c1:da:cf:be:90:7b:84:5f:
71:47:c8:16:9c:10:c9:cf:95:eb:f1:06:a8:e5:4a:
e2:1c:eb:96:2b:80:49:16:9c:a1:98:31:89:1e:32:
aa:33:d4:6e:3d:73:3c:02:e5:22:e3:c3:3d:2e:07:
97:97:15:61:d9:05:c7:f7:0a:4c:f1:c9:3b:9d:ee:
73:9f:76:9a:e2:b5:6c:47:e9:81:50:c4:82:dd:12:
65:bc:bd:06:00:04:37:bb:eb:b8:78:a9:d2:13:e7:
86:10:df:2b:08:03:df:29:71:c7:db:7d:6a:ce:4a:
cf:8f:09:68:69:55:b0:c8:b2:16:2d:19:fd:59:be:
17:ff:fe:10:de:35:19:8e:7e:27:8c:79:e7:e5:15:
07:3b:ac:d0:2a:86:36:94:48:84:5f:25:cb:bf:ea:
82:34:4d:e6:d7:c1:05:dc:03:2d:1e:15:c8:1c:86:
3d:e8:ac:9a:ee:e8:a0:a1:90:f8:81:cb:0a:82:e7:
53:19:d1:42:d3:99:89:a0:f7:39:04:dc:04:4e:52:
9b:51:e8:fc:55:5c:2e:dd:30:60:41:3b:b6:15:02:
b3:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:5C:4D:F8:3A:70:8D:57:A4:8D:7B:F0:51:C0:06:C8:92:E8:9B:2A
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS212703.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:187c::/48
Signature Algorithm: sha256WithRSAEncryption
33:99:90:7f:b6:9c:74:63:84:cb:7c:43:73:a3:8a:57:b2:58:
a1:51:50:ed:71:17:b2:f0:bf:70:84:c9:89:66:87:ae:03:c9:
66:b9:91:e9:c4:99:dc:25:d5:bb:4d:9e:76:d4:31:f0:70:e1:
df:0e:5b:55:43:94:5a:7a:88:fe:4a:e5:58:43:3a:d6:40:4e:
3c:36:e1:43:5e:2d:c8:1e:61:10:7b:20:d9:ef:d1:7c:d8:55:
76:d9:b8:ab:7c:58:36:49:62:97:6b:30:91:09:ed:2c:6c:28:
e8:0f:a2:e4:17:69:da:3f:43:46:55:78:89:d9:b4:62:38:7e:
16:90:30:0a:30:93:c7:2c:18:52:a5:c3:fd:a8:01:1b:26:d4:
2b:17:50:4d:c3:be:0e:d9:04:d9:8e:63:64:28:b5:b1:d0:b5:
d3:f5:20:d2:7b:04:b9:b6:3a:d4:f4:0a:47:2b:10:63:96:ba:
06:f8:50:dd:6f:7e:ce:e3:2b:54:ea:c9:98:8e:a9:5a:da:4f:
89:02:49:8f:a1:d4:be:3a:01:a5:b2:b8:1e:10:3c:ae:ed:a3:
21:8c:b8:b6:f9:f8:a8:e1:c8:26:79:e7:5b:0d:50:da:1e:96:
93:d9:5a:98:f9:c9:96:04:0b:3b:d9:1c:71:d2:26:2a:29:1c:
45:12:5a:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 22:07:35 2025 by rpki-client