Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS212746.roa
File: AS212746.roa (raw, json)
Hash identifier: 81ADjcKIqJwWAoS1uuxptxI0bhC4xdSdiy4tfQEM79E=
Subject key identifier: 27:6E:31:20:D1:19:CF:8C:FE:88:2D:B4:8F:6D:7B:4A:0B:AA:3B:EF
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 5AD1E127100FA8BFBC7D33432E39E1EC7878BC7D
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS212746.roa
Signing time: Thu 03 Jul 2025 15:52:19 +0000
ROA not before: Thu 03 Jul 2025 15:47:19 +0000
ROA not after: Thu 02 Jul 2026 15:52:19 +0000
asID: 212746
IP address blocks: 2a06:a005:1020::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 17:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:d1:e1:27:10:0f:a8:bf:bc:7d:33:43:2e:39:e1:ec:78:78:bc:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Jul 3 15:47:19 2025 GMT
Not After : Jul 2 15:52:19 2026 GMT
Subject: CN=276E3120D119CF8CFE882DB48F6D7B4A0BAA3BEF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:31:94:09:17:d5:9a:10:29:07:90:eb:4c:c7:
b9:3a:38:a2:09:c8:79:30:82:84:69:df:92:e4:df:
c7:d7:11:0c:af:36:08:9f:bb:1e:62:24:c6:42:c8:
8b:7f:d2:3a:96:56:b0:14:0f:59:c2:08:c9:7b:ee:
55:be:72:4c:60:dd:03:53:2e:01:87:d0:65:8d:de:
27:d1:d9:61:23:33:89:0c:ba:2a:8b:c9:75:eb:58:
d7:71:da:68:76:b1:a6:71:21:ee:1f:de:79:c7:e4:
69:86:cd:72:f1:b5:1b:e3:40:4d:43:cf:7c:ab:01:
70:2a:62:0d:7a:fd:29:e3:49:8a:7c:ae:7e:30:4e:
3a:ff:b8:51:2e:ac:69:b7:d5:55:f0:b1:cc:ac:ed:
42:fc:54:86:d7:6f:a1:b7:47:a7:95:a0:a6:0b:f8:
fa:5b:78:a8:7f:29:ee:64:92:2e:18:05:33:0f:aa:
be:ff:d2:d6:48:1a:33:0f:cd:9f:3b:28:20:61:f7:
81:7b:96:81:3b:91:89:48:47:04:c4:ee:4c:5d:c6:
07:d4:23:9c:cc:73:24:c7:51:a9:3a:df:10:5d:f4:
93:96:ff:22:9b:af:68:f7:f1:c7:42:11:58:de:a9:
5d:6b:02:76:fb:14:c8:e0:01:b3:40:13:b1:e6:bb:
a2:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:6E:31:20:D1:19:CF:8C:FE:88:2D:B4:8F:6D:7B:4A:0B:AA:3B:EF
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS212746.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1020::/44
Signature Algorithm: sha256WithRSAEncryption
27:62:f3:c5:d8:20:81:f3:e3:14:79:ed:ad:cb:72:82:89:6d:
d4:eb:7f:6b:38:9f:f2:aa:57:84:f4:36:99:a2:a0:ba:d7:e3:
db:8a:16:7a:08:10:88:4e:23:85:fd:e7:90:c4:ef:82:65:82:
37:48:e8:c8:22:f6:9b:c3:f3:2b:4f:aa:e8:b6:d9:f6:c8:cd:
94:a1:39:83:04:5b:2e:43:a9:4b:ca:87:c3:c5:b2:b6:b5:61:
25:3e:b7:51:d1:18:b4:2c:92:20:c6:ee:b5:e2:3a:73:c9:f5:
2c:96:aa:62:2d:65:c1:ae:ba:4d:1f:22:03:ef:4f:34:0b:f0:
e0:e1:da:15:03:c3:9e:f8:0b:0b:4b:57:58:7b:8e:32:1d:60:
13:2a:d6:ee:b0:31:71:c7:a1:c8:73:31:d4:bc:fb:bc:65:e7:
5e:a3:ac:b9:d1:23:ba:ae:64:22:6e:f4:63:28:a4:84:cd:c1:
c3:fb:dd:cf:b6:e0:8d:c9:50:ee:ca:a2:54:ba:c8:8d:7d:9c:
a9:43:ad:ce:7c:7c:7f:73:be:ac:28:df:75:1c:65:7c:bf:9e:
da:52:06:74:c1:8d:ca:4c:b9:03:f7:ca:98:c1:f9:08:69:ad:
dd:8e:40:2d:7b:f9:35:a5:90:1d:6f:73:09:ce:73:b0:71:43:
5d:f3:e3:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 22:09:17 2025 by rpki-client