Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS60391.roa
File: AS60391.roa (raw, json)
Hash identifier: WRvqf7dzlnLzmP7zuzwAS/AkA/edrXtoFFYW1SF0CYU=
Subject key identifier: C1:C7:F1:47:8E:5B:6A:B6:79:0B:18:BB:5E:EF:B5:77:B6:71:0B:36
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 4A068A5D7163897F52E9A4DE35705C916E66B508
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS60391.roa
Signing time: Thu 03 Jul 2025 15:51:38 +0000
ROA not before: Thu 03 Jul 2025 15:46:38 +0000
ROA not after: Thu 02 Jul 2026 15:51:38 +0000
asID: 60391
IP address blocks: 2a06:a005:da0::/44 maxlen: 48
2a06:a005:2300::/44 maxlen: 48
2a06:a005:25d0::/44 maxlen: 48
2a06:a005:2f30::/44 maxlen: 48
2a06:a005:2f40::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 17:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:06:8a:5d:71:63:89:7f:52:e9:a4:de:35:70:5c:91:6e:66:b5:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Jul 3 15:46:38 2025 GMT
Not After : Jul 2 15:51:38 2026 GMT
Subject: CN=C1C7F1478E5B6AB6790B18BB5EEFB577B6710B36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:9d:37:b4:42:ee:9b:2c:00:f7:71:fc:9e:87:
aa:93:c4:10:b8:53:d5:c8:d5:e6:65:b0:84:92:7d:
e1:d0:29:f6:c5:6c:63:08:da:ce:41:0f:72:85:07:
cc:5c:77:52:10:b8:54:d1:8b:47:38:9b:07:45:54:
24:ad:f3:b2:a1:a1:ed:96:61:c0:37:a6:ce:cf:29:
5f:ad:6f:8b:6c:72:31:f0:c4:5a:a8:a5:d8:39:a5:
d1:ba:07:f6:bf:03:86:f9:10:86:19:de:e0:e3:b9:
0e:bd:04:b3:32:88:48:5b:17:5d:74:03:04:50:1f:
47:41:be:6a:b8:17:8f:65:1e:83:99:74:bc:32:29:
88:b2:ba:0c:fa:74:97:a9:82:cd:67:df:b2:79:21:
ae:61:40:eb:ac:9b:25:f5:65:0b:4c:1c:1e:f0:5f:
57:f1:b8:ea:4b:cf:49:85:88:87:fc:f0:34:01:d7:
dc:45:19:db:71:38:b2:cd:5c:6d:e0:55:cd:de:9a:
7a:9e:d2:37:ff:97:1b:a3:c9:47:2c:fa:0b:43:83:
3b:97:d4:57:93:83:f5:e7:d8:5d:2c:97:cb:a5:36:
4d:3a:5b:75:ab:36:47:27:62:68:b1:ef:07:9c:bc:
98:04:86:0d:93:05:ce:f5:0d:4c:5d:de:72:a5:f9:
68:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:C7:F1:47:8E:5B:6A:B6:79:0B:18:BB:5E:EF:B5:77:B6:71:0B:36
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS60391.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:da0::/44
2a06:a005:2300::/44
2a06:a005:25d0::/44
2a06:a005:2f30::-2a06:a005:2f4f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
90:55:d8:6c:22:cd:76:5a:57:6d:e0:ec:ac:c6:af:3a:7e:aa:
0a:9e:23:6c:31:bd:21:51:eb:c5:c3:14:ba:19:d1:55:3a:f2:
7a:d2:44:c7:40:dd:8e:cf:12:c9:02:64:cf:ac:a2:39:4a:49:
13:f0:04:eb:02:59:0d:d9:21:b9:45:6a:3c:6a:1c:bd:68:d2:
3c:d7:73:7e:e4:d0:38:62:8f:59:18:fe:66:db:44:dc:c5:da:
9a:f9:c5:f3:15:ff:20:f5:a0:91:c7:5a:b1:f0:ee:ff:bc:d0:
8a:61:e5:a3:ab:34:63:78:f2:17:41:6c:33:3f:05:c4:54:9b:
db:10:00:ba:d4:70:8b:e5:72:f0:31:be:1b:92:e3:3d:fd:d6:
2d:4e:63:d4:f7:42:b9:5f:92:a2:29:3d:02:30:b0:51:45:3f:
d4:74:f8:41:ff:cd:1e:ea:21:bd:e2:ba:20:14:35:82:bc:49:
bc:aa:32:97:93:ec:a6:52:ca:55:27:88:38:ef:29:fa:36:db:
fa:b2:7d:6c:e8:ff:ab:a1:88:2a:5f:9b:06:69:06:c6:ad:4d:
6f:f5:cf:23:71:6b:d7:bd:a6:ab:c5:b0:ba:17:04:96:20:46:
c3:51:97:ae:62:68:2e:1b:be:94:f1:50:83:84:a5:94:8d:0f:
d6:54:0e:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 22:17:40 2025 by rpki-client