Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS60438.roa
File: AS60438.roa (raw, json)
Hash identifier: umYFk/PsfsYR2Jp7cOGE+BJMZlZc8b4QDfTWrOmcp2I=
Subject key identifier: C8:D9:88:0E:E4:16:09:06:4A:A3:AC:21:B8:0F:B6:B1:85:E6:1F:98
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 5BD7A7CF659237C704F72EEF0C1B76E79087BDEA
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS60438.roa
Signing time: Thu 03 Jul 2025 15:52:41 +0000
ROA not before: Thu 03 Jul 2025 15:47:41 +0000
ROA not after: Thu 02 Jul 2026 15:52:41 +0000
asID: 60438
IP address blocks: 2a06:a005:26c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 17:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:d7:a7:cf:65:92:37:c7:04:f7:2e:ef:0c:1b:76:e7:90:87:bd:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Jul 3 15:47:41 2025 GMT
Not After : Jul 2 15:52:41 2026 GMT
Subject: CN=C8D9880EE41609064AA3AC21B80FB6B185E61F98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:03:b9:3f:38:08:78:68:ba:a0:46:03:91:8c:
3e:c9:c4:a4:2b:8f:7f:10:ef:01:2e:fa:de:a9:04:
62:0d:0a:7c:1b:d4:8f:27:fa:e3:53:e1:38:16:07:
d7:a8:04:af:ef:55:17:7d:ea:29:a3:b9:a5:86:e8:
f8:7b:72:1e:43:21:07:f1:7f:c9:92:b0:43:3b:f7:
30:f0:94:17:01:96:38:e7:52:98:e1:9a:ca:f7:15:
5c:dd:35:16:e9:c4:18:20:75:16:b8:07:63:e2:b5:
d1:cc:06:21:55:f5:20:8a:e1:19:fe:fe:72:e9:4d:
9f:2e:66:d7:04:0e:cf:ee:e3:b0:9f:6c:e6:65:b9:
c0:c8:5b:02:4c:b2:02:94:bd:54:d9:36:10:13:e9:
07:eb:fc:f3:30:b1:19:ed:42:f8:2b:a6:eb:31:ca:
8d:1e:e1:17:d2:68:03:aa:76:df:1e:09:c2:04:63:
ed:13:2f:af:02:20:cb:e5:40:c4:39:2e:3d:26:74:
64:37:9c:11:b3:1f:8f:60:22:23:95:e9:28:0d:b9:
9b:a7:15:77:62:16:02:0c:4e:9a:a0:c2:00:53:2e:
a2:f8:8a:3d:a0:8d:23:4b:6e:23:c9:66:51:b9:5e:
19:07:d0:52:98:a3:6a:22:03:80:91:c6:88:50:0c:
10:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:D9:88:0E:E4:16:09:06:4A:A3:AC:21:B8:0F:B6:B1:85:E6:1F:98
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS60438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:26c0::/48
Signature Algorithm: sha256WithRSAEncryption
2f:0b:8e:a3:4c:38:2a:16:44:33:dc:79:56:f2:ea:e4:e7:1c:
ae:bb:bc:46:0b:07:82:9d:7b:26:75:6f:f3:ff:7e:03:63:b8:
8a:a8:b2:c8:fe:6f:f4:c1:ff:91:d9:e5:d0:23:2d:90:1d:1c:
a6:b9:77:ce:cf:4e:79:60:d8:44:46:e3:34:97:7c:89:24:95:
59:25:b7:e0:81:ec:32:c0:e9:9d:47:9d:68:70:a6:0c:24:f0:
b3:de:95:64:a3:a2:1b:55:9a:33:0a:bd:1c:de:03:3d:54:8d:
58:d3:74:68:fa:52:42:1a:0d:b3:a6:85:eb:e5:5c:0e:77:a9:
3f:fb:87:b7:2f:92:78:4a:ef:3c:d1:5b:ae:0e:d9:77:06:5c:
f5:0e:dc:81:65:3f:a1:90:e4:c5:59:60:b6:65:6d:86:58:2d:
47:21:67:71:78:ea:3d:f1:fa:15:22:16:65:24:ed:99:98:c6:
8f:be:bf:f3:24:9c:5c:27:7a:66:25:4d:3f:f7:fe:66:05:93:
e0:10:af:f8:65:ae:db:79:1f:83:0b:0d:f7:df:15:94:cf:93:
c1:d3:75:6a:2e:c5:f4:f5:57:76:97:5a:2a:57:ef:24:77:13:
97:68:de:37:85:04:06:3e:b2:5d:74:47:05:21:99:75:8e:fa:
e0:21:ee:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 21:59:48 2025 by rpki-client