Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS44810.roa
File: AS44810.roa (raw, json)
Hash identifier: ntSOw4oG3pB4rj0Kbek8nkoBlXD/lfn/zDPCpz6eaUM=
Subject key identifier: 51:28:42:B3:51:C2:84:31:FF:30:7E:69:D0:26:35:12:63:9F:1F:28
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 713A688431EA33F261FA04AFE88EEB49D8885F4F
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS44810.roa
Signing time: Thu 03 Jul 2025 15:52:31 +0000
ROA not before: Thu 03 Jul 2025 15:47:31 +0000
ROA not after: Thu 02 Jul 2026 15:52:31 +0000
asID: 44810
IP address blocks: 89.39.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 17:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:3a:68:84:31:ea:33:f2:61:fa:04:af:e8:8e:eb:49:d8:88:5f:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Jul 3 15:47:31 2025 GMT
Not After : Jul 2 15:52:31 2026 GMT
Subject: CN=512842B351C28431FF307E69D0263512639F1F28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:96:30:b0:8e:24:1c:ff:ab:a8:c2:68:65:c4:
59:51:57:0e:2e:5c:2c:a9:f5:52:31:76:18:26:59:
c0:75:ac:4b:f0:89:cf:c6:16:58:24:b6:b1:0f:db:
46:b7:97:a4:b0:68:0b:31:74:69:18:28:32:03:e5:
01:d9:ad:b1:97:52:e2:70:7e:2d:07:99:3b:00:55:
3c:c5:10:d6:61:f6:54:f6:57:4a:a0:e2:a5:a0:7b:
bf:8c:5c:3c:ac:65:c2:d6:ec:2d:d4:03:fe:9b:8f:
47:ac:2b:82:4a:06:0e:70:ca:f5:63:ac:96:c8:cf:
c1:c3:da:ea:cb:8c:d2:06:8a:71:c2:2a:7e:96:57:
9e:42:aa:e7:4b:08:45:96:81:31:c4:15:b4:44:16:
9b:7d:88:0e:07:ff:a4:25:5f:d3:f7:42:d4:17:b3:
41:70:3d:c1:2e:c0:7a:4b:50:7b:57:2d:62:f0:cb:
d8:99:0d:a0:6f:f1:b4:b9:ed:a2:7f:36:9f:cf:bc:
8a:17:26:11:45:9e:48:0c:f1:8d:dd:86:15:6b:d8:
11:04:8b:31:3a:5c:d8:fb:66:0e:a2:06:22:1f:58:
99:09:17:14:22:94:02:c3:24:f2:e7:80:eb:78:f6:
0e:77:01:d3:79:fc:e2:ff:74:57:98:c3:41:2c:ff:
03:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:28:42:B3:51:C2:84:31:FF:30:7E:69:D0:26:35:12:63:9F:1F:28
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS44810.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.39.210.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:7a:78:e0:f2:2c:05:84:72:ca:db:99:a2:ab:bd:e4:75:98:
25:ac:48:41:c4:e3:70:0a:0f:80:dd:17:2b:f3:d5:65:d6:f3:
2b:f2:18:62:8a:b3:11:e3:49:58:46:38:85:4f:78:dc:7c:c0:
ff:a3:d5:be:92:48:ac:b5:90:38:e8:e3:57:b6:b5:0b:66:2d:
fb:50:1d:dc:55:37:80:6d:7f:1b:cc:0d:3b:a5:4d:5a:ca:f7:
29:a7:de:26:f6:ba:97:b9:d9:24:c1:07:53:e2:f4:0e:a1:0c:
92:2e:b2:c0:8c:fb:19:8c:6e:f4:5c:88:0a:43:96:49:12:f0:
db:6b:4f:4b:0b:d3:c4:c3:5d:58:f9:93:50:7d:60:c4:fc:6a:
14:c8:30:85:88:cd:b5:e6:82:34:2f:97:ec:27:74:d7:dd:11:
49:85:ac:72:c2:6d:17:ce:c1:19:7c:5a:e6:98:88:1d:c6:c4:
59:2d:f9:1f:7b:fa:ff:ab:89:4d:82:22:5c:bf:76:09:58:a2:
55:f4:a6:28:17:e7:01:dd:ae:e0:04:3d:b2:06:87:6d:90:b1:
f6:c5:66:33:8f:02:87:84:ca:f8:7d:74:71:0a:0f:1a:79:d8:
6b:61:73:35:70:c2:c2:85:c0:e2:21:ce:2d:66:f3:fa:2a:53:
14:6d:a9:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 21:58:17 2025 by rpki-client