Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS56808.roa
File: AS56808.roa (raw, json)
Hash identifier: dRAqr8dcTATON1I1oDp1FwQ6oyhDp3YPlIwLd64mUKw=
Subject key identifier: B3:3A:3A:31:1D:F0:47:37:C0:07:11:BF:B4:9B:30:CF:BF:0E:6E:1D
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 1DAF51072679BA6F1D8E5113603B1C1C3558F1E7
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS56808.roa
Signing time: Thu 03 Jul 2025 15:52:22 +0000
ROA not before: Thu 03 Jul 2025 15:47:22 +0000
ROA not after: Thu 02 Jul 2026 15:52:22 +0000
asID: 56808
IP address blocks: 2a06:a005:1273::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 17:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:af:51:07:26:79:ba:6f:1d:8e:51:13:60:3b:1c:1c:35:58:f1:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Jul 3 15:47:22 2025 GMT
Not After : Jul 2 15:52:22 2026 GMT
Subject: CN=B33A3A311DF04737C00711BFB49B30CFBF0E6E1D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e1:80:5d:fe:1b:a8:a1:e3:2c:32:57:bb:01:
46:82:13:29:21:c4:58:98:08:c5:f7:d0:55:c9:db:
4d:56:c5:53:16:70:f0:1b:b4:39:de:f1:dd:29:2c:
5b:49:60:a8:9f:60:e7:77:d2:fb:7b:27:8d:0e:aa:
a3:d7:42:ff:c0:1b:1c:c5:8e:65:dd:d8:d8:68:fa:
2e:f7:2c:0d:68:55:98:c8:c3:04:70:f5:fe:78:d4:
85:55:bc:b5:b6:13:95:b2:ed:f2:cd:3c:2e:27:50:
59:42:9f:2b:1c:ad:d7:31:e6:3d:07:1e:c0:0a:62:
f4:74:45:de:f4:cc:01:7b:f2:fc:e2:98:32:ab:f7:
99:ca:76:67:7c:db:4e:ab:0b:fa:6e:cf:a6:0c:d5:
92:98:4d:73:68:59:1f:45:b4:36:ca:e7:be:27:0f:
db:03:b6:9b:d6:77:96:88:cd:27:10:e7:a1:3f:61:
08:b6:35:44:7b:ae:01:d5:9e:b6:b4:df:e0:12:a5:
14:48:d8:d9:3a:98:82:18:aa:4d:03:82:db:1e:40:
6b:cd:a8:1d:fa:df:56:6e:da:34:81:58:e3:fb:71:
f2:24:0d:c4:c5:2a:1a:fc:ab:77:01:cc:98:4f:cd:
81:b9:bd:a0:c7:33:62:04:20:53:b6:97:b0:d2:62:
0a:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:3A:3A:31:1D:F0:47:37:C0:07:11:BF:B4:9B:30:CF:BF:0E:6E:1D
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS56808.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1273::/48
Signature Algorithm: sha256WithRSAEncryption
7f:3b:0f:2b:e3:0e:60:3c:74:70:87:eb:a2:34:e9:68:17:d6:
a6:5d:6f:63:85:5b:59:57:1e:69:b0:1d:c9:60:5f:16:2b:ac:
a7:fa:e9:6f:52:8c:e7:b9:63:93:03:64:0b:4e:23:74:84:cc:
0e:57:3a:91:43:0e:14:9d:cc:b0:6d:20:04:d6:6e:2c:89:e3:
20:10:6e:ea:be:69:67:10:0e:c6:bb:51:40:f6:9b:09:ae:a5:
b5:95:c9:0d:1c:da:70:c5:d4:d8:66:65:ab:c7:77:58:35:b9:
ba:81:c8:53:d8:6a:65:e0:bb:a6:ec:7e:58:fe:8a:42:3b:81:
45:f3:c8:b2:2e:a4:64:07:1f:9d:b0:d7:21:a8:d3:96:59:36:
43:01:0a:1a:92:6d:b3:ca:2c:a8:31:a3:a6:36:4f:9e:1f:01:
6c:f0:73:6c:7e:50:cf:e8:b2:91:9f:b0:df:47:6f:f5:ce:01:
a7:b4:69:1f:55:b1:58:0b:d5:cc:11:38:fb:76:9f:2f:a1:a1:
d3:6a:aa:e8:51:01:46:c5:22:a4:5b:95:03:f1:49:50:c3:f2:
30:18:d9:22:fb:f8:45:e0:57:cc:cf:dd:cc:f6:9c:d5:0f:f0:
23:fb:21:07:9f:40:c5:44:46:92:df:d4:c7:a6:68:57:ce:0e:
fa:64:9c:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 22:05:27 2025 by rpki-client