Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS212888.roa
File: AS212888.roa (raw, json)
Hash identifier: CxCdw9i+6fXyiOtKjETDRHbVuHnbgAafMVROBzy7QyQ=
Subject key identifier: 31:3C:8B:63:01:65:F6:75:E5:BE:D6:1E:D3:DA:DE:4D:C1:A3:25:51
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 39EE2FB68741D923811C5C7EF5D60D2C8F0F1660
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS212888.roa
Signing time: Thu 03 Jul 2025 15:52:28 +0000
ROA not before: Thu 03 Jul 2025 15:47:28 +0000
ROA not after: Thu 02 Jul 2026 15:52:28 +0000
asID: 212888
IP address blocks: 2a06:a005:1990::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 17:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:ee:2f:b6:87:41:d9:23:81:1c:5c:7e:f5:d6:0d:2c:8f:0f:16:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Jul 3 15:47:28 2025 GMT
Not After : Jul 2 15:52:28 2026 GMT
Subject: CN=313C8B630165F675E5BED61ED3DADE4DC1A32551
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:03:b4:b5:3f:e1:1f:5c:be:7c:03:77:41:52:
1a:f1:30:e0:e1:b0:7a:ac:bd:49:1c:fe:57:f3:c5:
4c:ec:ed:6d:fa:52:db:db:af:cd:33:10:50:af:79:
62:a1:1a:40:b6:f4:55:f1:f7:d1:ee:50:1a:17:ce:
8f:6e:80:09:07:f8:15:26:da:f7:89:db:5f:67:23:
0f:c3:c1:54:4f:f9:83:3a:17:63:5f:a7:fe:0b:f4:
f2:6f:40:23:c0:e2:05:37:70:ff:d6:4e:40:a6:61:
ce:8a:92:97:70:92:4f:7c:16:8c:3b:e5:bb:bd:fd:
5b:74:8e:76:2a:60:ed:af:a9:af:f0:b2:80:2c:a8:
c3:2c:c8:cc:9d:cc:79:80:63:d7:58:72:31:ed:ef:
11:b1:7e:8e:48:eb:c3:fb:02:2d:50:20:ff:e7:d2:
cb:f0:7a:df:52:16:1c:a3:f8:0c:4e:d2:e6:c8:30:
11:a3:5a:78:9b:45:19:98:de:14:8b:9f:1f:6a:78:
c1:7f:7a:73:2d:f0:2a:77:e0:84:28:e2:16:34:06:
3f:6d:db:c1:60:6b:5d:10:4d:1f:9d:7a:7b:e4:41:
14:18:1b:f7:ff:0e:72:63:58:4c:58:ec:ab:45:ad:
c0:f4:cb:85:dc:69:3d:3f:be:16:17:d9:5b:6c:c3:
5f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:3C:8B:63:01:65:F6:75:E5:BE:D6:1E:D3:DA:DE:4D:C1:A3:25:51
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS212888.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1990::/44
Signature Algorithm: sha256WithRSAEncryption
08:7a:18:83:68:77:a6:6f:99:04:89:cc:af:84:bb:46:21:d4:
3d:6b:98:e3:11:23:fe:a9:11:20:d3:f8:ac:68:df:0c:c7:b9:
cc:1f:cc:37:56:0a:8c:bb:b8:70:45:b7:d5:1e:fd:5f:4b:78:
ed:03:5b:3a:68:3d:be:d1:45:68:e7:e4:38:47:6c:0b:93:17:
0a:e7:a7:35:d8:97:12:94:ee:c4:80:cc:30:85:b9:21:b2:14:
3d:30:52:1f:63:bf:9d:97:d0:11:ba:60:11:01:93:2b:e5:3a:
5f:3c:56:51:86:86:3d:60:55:6a:9d:7e:db:d2:0f:8a:3a:3e:
1c:a9:3f:7a:1f:45:75:a8:a4:18:86:0b:54:c8:2f:c2:63:af:
27:7f:67:ab:97:fa:04:aa:4b:9b:2d:4d:5e:35:8b:58:93:90:
26:7b:04:89:45:8e:46:de:70:02:31:17:58:db:91:bb:26:db:
35:63:21:07:de:fe:b4:c8:a4:4d:37:c7:59:c6:a5:2b:8a:66:
63:28:24:d8:11:d1:e1:08:a5:de:80:a7:4b:8c:39:1f:64:eb:
77:fc:6f:a0:1e:bd:1e:13:f5:d1:af:91:47:8e:fb:08:ce:ff:
b6:29:4f:96:a3:06:fe:30:97:b0:3c:55:01:e8:96:0a:35:b7:
25:a2:e4:ca
-----BEGIN CERTIFICATE-----
MIIE6DCCA9CgAwIBAgIUOe4vtodB2SOBHFx+9dYNLI8PFmAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDE0YjZmY2YyYjJjNjliZTA4NWU5Zjk1OTg3MmRjYmU4
ZWE1NDE3NzAeFw0yNTA3MDMxNTQ3MjhaFw0yNjA3MDIxNTUyMjhaMDMxMTAvBgNV
BAMTKDMxM0M4QjYzMDE2NUY2NzVFNUJFRDYxRUQzREFERTREQzFBMzI1NTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhA7S1P+EfXL58A3dBUhrxMODh
sHqsvUkc/lfzxUzs7W36Utvbr80zEFCveWKhGkC29FXx99HuUBoXzo9ugAkH+BUm
2veJ219nIw/DwVRP+YM6F2Nfp/4L9PJvQCPA4gU3cP/WTkCmYc6Kkpdwkk98Fow7
5bu9/Vt0jnYqYO2vqa/wsoAsqMMsyMydzHmAY9dYcjHt7xGxfo5I68P7Ai1QIP/n
0svwet9SFhyj+AxO0ubIMBGjWnibRRmY3hSLnx9qeMF/enMt8Cp34IQo4hY0Bj9t
28Fga10QTR+denvkQRQYG/f/DnJjWExY7KtFrcD0y4XcaT0/vhYX2Vtsw1/vAgMB
AAGjggHyMIIB7jAdBgNVHQ4EFgQUMTyLYwFl9nXlvtYe09reTcGjJVEwHwYDVR0j
BBgwFoAU0Utvzyssab4IXp+VmHLcvo6lQXcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvNy9EMTRCNkZDRjJC
MkM2OUJFMDg1RTlGOTU5ODcyRENCRThFQTU0MTc3LmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMFV0dnp5c3NhYjRJWHAtVm1ITGN2bzZsUVhjLmNlcjBwBggrBgEF
BQcBCwRkMGIwYAYIKwYBBQUHMAuGVHJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv
cmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5ZC83L0FT
MjEyODg4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEH
AQH/BBMwETAPBAIAAjAJAwcEKgagBRmQMA0GCSqGSIb3DQEBCwUAA4IBAQAIehiD
aHemb5kEicyvhLtGIdQ9a5jjESP+qREg0/isaN8Mx7nMH8w3VgqMu7hwRbfVHv1f
S3jtA1s6aD2+0UVo5+Q4R2wLkxcK56c12JcSlO7EgMwwhbkhshQ9MFIfY7+dl9AR
umARAZMr5TpfPFZRhoY9YFVqnX7b0g+KOj4cqT96H0V1qKQYhgtUyC/CY68nf2er
l/oEqkubLU1eNYtYk5AmewSJRY5G3nACMRdY25G7Jts1YyEH3v60yKRNN8dZxqUr
imZjKCTYEdHhCKXegKdLjDkfZOt3/G+gHr0eE/XRr5FHjvsIzv+2KU+Wowb+MJew
PFUB6JYKNbclouTK
-----END CERTIFICATE-----
Generated at Fri Jul 4 22:22:56 2025 by rpki-client