Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS213884.roa
File: AS213884.roa (raw, json)
Hash identifier: CdkgOnNAfED97maUvKKrAdhcyasyio7c5VUeG5OJKdk=
Subject key identifier: 39:90:EA:C4:77:85:90:6D:C9:9C:A3:E7:60:DA:28:35:EE:97:1B:67
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 333C1377CBF2CED55F21D27C4E0179B03E6048DC
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS213884.roa
Signing time: Thu 03 Jul 2025 15:51:18 +0000
ROA not before: Thu 03 Jul 2025 15:46:18 +0000
ROA not after: Thu 02 Jul 2026 15:51:18 +0000
asID: 213884
IP address blocks: 195.184.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 17:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:3c:13:77:cb:f2:ce:d5:5f:21:d2:7c:4e:01:79:b0:3e:60:48:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Jul 3 15:46:18 2025 GMT
Not After : Jul 2 15:51:18 2026 GMT
Subject: CN=3990EAC47785906DC99CA3E760DA2835EE971B67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4e:b5:8f:f3:a4:78:a5:6f:70:fd:ee:0a:48:
46:a6:9b:8d:c2:e0:45:b1:3d:c8:47:47:56:81:c0:
e2:56:18:65:68:89:d0:29:dd:4c:3e:8e:6b:bf:8b:
b3:be:cd:1e:8b:e0:28:cf:26:63:cd:d7:ae:63:8e:
4d:7a:46:bf:a4:d9:2e:f9:e5:6c:5e:2f:63:2a:55:
1f:10:5d:6c:3e:e2:9c:fd:a6:ce:09:52:35:01:f8:
ae:96:fb:45:87:9f:70:aa:5f:f1:8a:de:36:c6:02:
2d:c9:02:22:aa:2c:4b:09:fa:a1:36:3d:25:06:5f:
2f:99:b5:5b:86:bc:75:4d:1f:5d:6b:58:78:68:74:
40:e3:d4:82:48:15:c1:a4:33:44:d9:70:98:e2:73:
11:83:d7:e0:72:0c:98:c0:40:87:36:fb:df:7a:55:
a8:44:48:d9:4d:24:33:60:3d:2f:a5:f2:0e:ab:ee:
0c:1a:e1:05:b4:06:21:e9:48:f8:2f:d6:22:39:82:
61:01:a2:d8:f1:bf:66:56:60:a1:17:06:fd:88:05:
a4:be:7a:9d:6d:de:f0:6d:05:9e:21:01:21:96:53:
f8:89:c8:5f:74:66:aa:91:63:a2:fe:43:0e:61:73:
65:c4:15:f3:d8:6f:ee:f5:72:ed:b4:2a:18:3d:6f:
c6:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:90:EA:C4:77:85:90:6D:C9:9C:A3:E7:60:DA:28:35:EE:97:1B:67
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS213884.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.184.246.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:e2:4a:c3:f0:24:ae:0f:65:a7:bd:c4:13:c1:70:5d:29:3a:
7f:0f:7c:1f:fa:b2:d6:6b:aa:3b:2f:a1:34:eb:37:50:a9:12:
20:b6:95:6b:4a:08:b4:48:c9:55:d2:07:49:e9:b9:13:a5:70:
de:56:71:30:d8:eb:73:d8:58:c0:6f:43:18:40:eb:bd:c9:e6:
39:65:10:6e:5c:b3:56:3d:0d:a2:fc:ea:8e:5e:31:b4:a0:73:
a2:46:e0:60:22:46:d0:25:ca:64:50:28:54:80:04:01:37:f0:
e1:b7:f6:33:ca:e1:51:6e:66:d5:53:db:d3:59:32:c1:12:c8:
9d:13:75:41:cb:55:bf:19:2c:14:33:87:85:63:c6:e3:cf:8e:
b7:5a:4c:12:19:6d:3d:df:a2:45:39:d6:23:d5:d8:a7:9d:f7:
1f:ee:64:e3:e3:34:1e:80:42:94:a6:b1:d1:49:62:3e:b2:8a:
1b:19:2a:98:e4:fc:68:59:01:6e:37:af:a4:11:2a:a0:f6:cd:
6c:b2:69:8b:37:70:38:fd:d1:28:09:12:88:dd:1c:83:84:3b:
14:2c:38:9a:bc:09:96:27:89:b1:5f:38:f4:80:d0:80:50:e8:
b4:c3:02:7e:53:e8:1d:66:9b:4d:34:a4:f6:25:83:96:11:31:
f4:96:21:c7
-----BEGIN CERTIFICATE-----
MIIE5TCCA82gAwIBAgIUMzwTd8vyztVfIdJ8TgF5sD5gSNwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDE0YjZmY2YyYjJjNjliZTA4NWU5Zjk1OTg3MmRjYmU4
ZWE1NDE3NzAeFw0yNTA3MDMxNTQ2MThaFw0yNjA3MDIxNTUxMThaMDMxMTAvBgNV
BAMTKDM5OTBFQUM0Nzc4NTkwNkRDOTlDQTNFNzYwREEyODM1RUU5NzFCNjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyTrWP86R4pW9w/e4KSEamm43C
4EWxPchHR1aBwOJWGGVoidAp3Uw+jmu/i7O+zR6L4CjPJmPN165jjk16Rr+k2S75
5WxeL2MqVR8QXWw+4pz9ps4JUjUB+K6W+0WHn3CqX/GK3jbGAi3JAiKqLEsJ+qE2
PSUGXy+ZtVuGvHVNH11rWHhodEDj1IJIFcGkM0TZcJjicxGD1+ByDJjAQIc2+996
VahESNlNJDNgPS+l8g6r7gwa4QW0BiHpSPgv1iI5gmEBotjxv2ZWYKEXBv2IBaS+
ep1t3vBtBZ4hASGWU/iJyF90ZqqRY6L+Qw5hc2XEFfPYb+71cu20Khg9b8YzAgMB
AAGjggHvMIIB6zAdBgNVHQ4EFgQUOZDqxHeFkG3JnKPnYNooNe6XG2cwHwYDVR0j
BBgwFoAU0Utvzyssab4IXp+VmHLcvo6lQXcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvNy9EMTRCNkZDRjJC
MkM2OUJFMDg1RTlGOTU5ODcyRENCRThFQTU0MTc3LmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMFV0dnp5c3NhYjRJWHAtVm1ITGN2bzZsUVhjLmNlcjBwBggrBgEF
BQcBCwRkMGIwYAYIKwYBBQUHMAuGVHJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv
cmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5ZC83L0FT
MjEzODg0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAw7j2MA0GCSqGSIb3DQEBCwUAA4IBAQB/4krD8CSu
D2WnvcQTwXBdKTp/D3wf+rLWa6o7L6E06zdQqRIgtpVrSgi0SMlV0gdJ6bkTpXDe
VnEw2Otz2FjAb0MYQOu9yeY5ZRBuXLNWPQ2i/OqOXjG0oHOiRuBgIkbQJcpkUChU
gAQBN/Dht/YzyuFRbmbVU9vTWTLBEsidE3VBy1W/GSwUM4eFY8bjz463WkwSGW09
36JFOdYj1dinnfcf7mTj4zQegEKUprHRSWI+soobGSqY5PxoWQFuN6+kESqg9s1s
smmLN3A4/dEoCRKI3RyDhDsULDiavAmWJ4mxXzj0gNCAUOi0wwJ+U+gdZptNNKT2
JYOWETH0liHH
-----END CERTIFICATE-----
Generated at Fri Jul 4 22:15:13 2025 by rpki-client