Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS214710.roa
File: AS214710.roa (raw, json)
Hash identifier: akDmR9+DggOWba6qc8brrmnnnf5rffK085+zxrP3TQU=
Subject key identifier: A3:5C:07:4A:E2:75:17:A1:91:E0:FB:21:54:9A:2D:E0:0C:AC:5D:65
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 4D9046927323EB812E7AFAE7E43E94A8E73BA3F6
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS214710.roa
Signing time: Thu 03 Jul 2025 15:52:06 +0000
ROA not before: Thu 03 Jul 2025 15:47:06 +0000
ROA not after: Thu 02 Jul 2026 15:52:06 +0000
asID: 214710
IP address blocks: 94.26.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 17:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:90:46:92:73:23:eb:81:2e:7a:fa:e7:e4:3e:94:a8:e7:3b:a3:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Jul 3 15:47:06 2025 GMT
Not After : Jul 2 15:52:06 2026 GMT
Subject: CN=A35C074AE27517A191E0FB21549A2DE00CAC5D65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:23:7f:70:0a:ee:cd:11:71:1d:03:3f:10:8d:
91:3c:3a:5d:b3:03:9e:7e:44:11:ba:82:8a:4a:83:
9a:cb:24:35:43:8e:e8:7b:10:c8:12:93:8c:95:09:
de:01:f7:2c:1a:e3:70:7b:7b:ac:f4:b3:cb:d1:42:
9e:f5:d9:14:9e:d5:e4:ef:de:e4:9d:0e:52:dc:6f:
df:3b:49:17:af:61:b3:a2:3b:83:ca:26:2e:09:b9:
53:ff:0a:1f:3d:80:16:51:5f:60:0f:67:eb:f5:93:
de:27:29:ad:7e:bc:fb:e6:9f:f3:a0:a9:e7:63:ee:
7c:7e:fa:0b:93:c8:9d:0b:83:c4:91:34:c2:79:8e:
c8:b4:65:76:5a:c1:52:7b:80:2d:ab:99:86:88:5c:
6c:99:a6:f1:6e:c0:39:31:62:48:f6:b0:5c:b6:e5:
5a:17:a1:7a:06:8f:64:92:41:e8:6f:48:c8:1c:a3:
75:ae:e1:18:17:73:d4:a7:82:f6:c0:b1:7c:14:d9:
ae:4b:d8:5b:35:69:e8:ef:85:f3:3b:ff:1f:e0:d6:
33:66:85:13:9d:4e:02:40:2e:ce:52:b7:86:3e:c4:
52:d9:06:d9:73:14:20:b8:7b:ac:10:61:46:36:70:
6d:f4:fd:cf:89:c2:31:24:c9:1f:47:66:a8:91:7d:
aa:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:5C:07:4A:E2:75:17:A1:91:E0:FB:21:54:9A:2D:E0:0C:AC:5D:65
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS214710.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.26.25.0/24
Signature Algorithm: sha256WithRSAEncryption
88:e6:94:bf:d4:70:ae:3c:40:85:51:6c:d0:9c:b1:49:fe:0b:
2b:ad:e4:fd:8d:2e:c4:df:61:0f:7f:30:d0:25:6b:51:42:37:
93:e0:4f:33:bb:74:26:cf:8c:75:10:a4:88:51:66:6d:f5:44:
fb:94:6b:31:4a:7a:67:67:7f:0a:50:72:64:37:8b:83:ea:17:
85:94:30:6b:26:57:d1:bf:c5:49:09:a6:e5:dc:a0:64:73:7e:
97:c0:56:bd:74:92:8b:7d:8a:3b:ab:c8:74:56:6e:6d:26:bf:
3b:04:2e:94:60:8e:51:ec:14:37:d9:de:0f:a6:e7:aa:d1:4d:
1f:7d:15:66:d5:97:0b:55:52:d9:17:97:fb:e3:4e:da:24:07:
8a:94:18:1a:8b:63:8c:c1:7a:14:4d:fd:db:3f:c3:50:c2:e2:
be:1e:08:bb:1c:00:cd:ea:82:d0:34:1e:94:82:ea:e5:03:15:
6a:c9:11:a2:6e:02:9c:78:7e:2a:72:d6:1c:63:4a:29:d2:09:
2b:2d:69:c5:39:6f:f7:c0:8a:ae:71:4d:43:ae:98:fd:c2:d1:
53:eb:3a:cc:8c:4d:20:f2:93:67:ec:99:3e:d4:82:dd:2b:d0:
82:d3:a1:03:93:28:b1:15:c3:45:0f:dd:dd:f2:4b:5e:0b:b0:
a3:92:68:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 22:05:02 2025 by rpki-client