Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS44406.roa
File: AS44406.roa (raw, json)
Hash identifier: L0rc9UZelvIWApgRBiv1ZvU7Z9nDaJndKTRqSTGcYQ0=
Subject key identifier: BD:5E:80:18:1A:17:07:8B:20:3E:DC:42:D3:23:C4:06:8F:5B:B9:92
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 7AA1C76AB94C64B8AB7653F66441BD3A0B7D9BF8
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS44406.roa
Signing time: Thu 03 Jul 2025 15:52:34 +0000
ROA not before: Thu 03 Jul 2025 15:47:34 +0000
ROA not after: Thu 02 Jul 2026 15:52:34 +0000
asID: 44406
IP address blocks: 2a06:a005:740::/44 maxlen: 48
2a06:a005:760::/44 maxlen: 48
2a06:a005:780::/44 maxlen: 48
2a06:a005:1e70::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 17:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:a1:c7:6a:b9:4c:64:b8:ab:76:53:f6:64:41:bd:3a:0b:7d:9b:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Jul 3 15:47:34 2025 GMT
Not After : Jul 2 15:52:34 2026 GMT
Subject: CN=BD5E80181A17078B203EDC42D323C4068F5BB992
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e9:a8:9b:c7:ff:09:da:7b:5d:a2:c4:60:86:
f9:63:bf:33:38:81:80:9c:18:39:e2:07:68:d9:1c:
dc:1d:a8:71:6a:78:25:2b:6d:88:30:0d:18:d9:a8:
1a:50:3b:b6:90:04:ad:75:30:7f:91:81:86:96:aa:
be:80:ec:09:b1:7f:be:da:60:ca:4f:29:ac:14:8c:
31:13:80:d3:b7:9f:06:62:6c:e5:74:3b:3e:28:03:
0a:3a:65:a5:25:a4:a8:09:26:e4:60:34:b3:94:d0:
14:6d:82:76:23:d9:48:69:5e:a1:b3:8f:b2:cd:3b:
61:c2:84:1f:eb:ee:49:a0:59:92:32:42:3e:bf:7b:
15:08:22:41:93:07:01:82:a4:82:92:35:24:ca:00:
f9:dc:9f:54:a7:53:a5:9a:a2:f2:4e:0b:d5:26:71:
83:e8:0a:fc:c7:ab:50:9c:bb:f1:4e:fd:0b:3e:94:
d4:51:7c:5b:c5:a6:c1:34:8b:c7:85:91:41:5e:d3:
66:ad:4b:b9:d0:6c:13:81:c3:55:fd:a1:93:28:c5:
95:b5:64:56:e6:ac:75:b6:15:7e:08:71:d4:22:48:
f6:61:3e:c0:39:12:1d:12:a0:be:be:a4:80:84:0e:
eb:9c:ff:ed:ad:aa:83:e2:6d:89:cf:15:80:54:d1:
d6:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:5E:80:18:1A:17:07:8B:20:3E:DC:42:D3:23:C4:06:8F:5B:B9:92
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS44406.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:740::/44
2a06:a005:760::/44
2a06:a005:780::/44
2a06:a005:1e70::/44
Signature Algorithm: sha256WithRSAEncryption
64:9d:16:23:b0:99:02:45:f6:09:c5:b3:46:54:6b:90:a7:f2:
99:89:0f:9e:c5:e8:1b:78:23:1e:6c:ba:ee:f3:2d:bd:03:92:
9f:cd:0e:54:00:6f:ba:87:9f:ac:d3:92:16:92:c9:86:41:18:
06:1c:ef:7c:57:3a:bc:95:5b:56:56:c0:c9:ea:4c:b2:2e:42:
ce:06:83:d6:5d:28:0c:8d:c1:42:5e:e0:f9:98:17:a0:7d:ab:
62:46:7f:01:09:a0:df:d4:21:db:7b:df:cd:c3:68:1c:1b:66:
c9:df:ff:e5:a6:e3:7f:c4:05:17:fb:52:cd:0b:9a:80:a2:a7:
ad:dd:4b:bc:a4:d8:63:2c:fe:87:3f:34:a8:ec:50:54:ad:a7:
54:d7:3b:ff:bb:80:21:5b:9f:da:d3:33:dc:51:a6:05:44:29:
17:a2:8b:91:de:0d:16:d9:58:a6:4f:c7:a9:71:28:0c:b4:80:
1e:7a:98:2a:08:0c:74:b8:85:dc:16:03:93:05:3a:15:67:ea:
cc:c8:a8:56:f3:e7:5d:23:a7:64:cb:91:a4:4f:7b:46:9d:26:
78:d3:99:68:fe:79:62:f5:fb:7b:53:a1:81:f9:ec:29:09:4c:
21:60:dd:45:22:c0:9e:22:1b:52:0a:a5:f6:6e:82:78:48:da:
39:d1:cf:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 22:12:56 2025 by rpki-client