Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS63279.roa
File: AS63279.roa (raw, json)
Hash identifier: n1sTE/i5U4Q0BhrC1DLyVELNAsbqLpQZ57GuWpLPNNo=
Subject key identifier: C9:68:80:7F:E1:B3:8C:C7:D9:5F:BD:27:F7:23:3A:ED:6E:C9:BD:3E
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 1AA165B684B1DCB3AD1069A37441C995106820F5
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS63279.roa
Signing time: Thu 03 Jul 2025 15:51:31 +0000
ROA not before: Thu 03 Jul 2025 15:46:31 +0000
ROA not after: Thu 02 Jul 2026 15:51:31 +0000
asID: 63279
IP address blocks: 2a06:a005:1d90::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 17:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:a1:65:b6:84:b1:dc:b3:ad:10:69:a3:74:41:c9:95:10:68:20:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Jul 3 15:46:31 2025 GMT
Not After : Jul 2 15:51:31 2026 GMT
Subject: CN=C968807FE1B38CC7D95FBD27F7233AED6EC9BD3E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:66:cc:d3:9a:67:7d:83:3c:9d:f7:22:28:c5:
c8:e7:17:f1:e6:c0:69:c5:81:12:91:b3:9b:36:79:
90:75:b9:5c:d1:00:66:6b:1f:da:16:07:e5:9c:18:
d4:16:92:de:05:31:96:cc:3e:41:b6:c3:cd:1d:b3:
e6:0c:7a:2d:ee:bc:e5:98:a2:46:11:64:67:0d:27:
d7:c3:04:7a:b1:e5:2f:6b:a1:52:54:ef:e8:d5:34:
ac:8d:8a:c5:db:72:40:c1:4a:85:94:2b:86:56:12:
07:6b:a7:19:e3:f1:19:80:9d:53:fc:ab:8b:e5:dc:
d2:82:d3:f8:ec:bd:a2:bc:69:c8:8f:fd:81:bb:52:
57:e4:10:21:03:a1:f4:5c:aa:27:95:0a:1a:97:1d:
ae:82:d5:28:e7:09:2d:de:86:d0:ac:80:e1:33:3e:
f1:34:62:9a:30:e0:70:4f:6b:1f:d7:17:e9:b9:a9:
c8:1f:3b:12:85:13:cb:ba:fb:e6:d1:7b:e2:54:df:
5d:c6:36:05:c9:aa:1c:ba:7a:73:8f:85:a6:c0:9d:
93:8a:0a:80:33:f3:25:d9:ab:22:1d:14:18:31:3f:
0d:09:26:18:d0:b3:1a:e4:1f:ca:80:15:d8:b3:0e:
bc:1a:94:f6:98:13:18:58:86:d4:80:46:5c:83:d6:
91:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:68:80:7F:E1:B3:8C:C7:D9:5F:BD:27:F7:23:3A:ED:6E:C9:BD:3E
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS63279.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1d90::/44
Signature Algorithm: sha256WithRSAEncryption
5d:d0:6c:78:90:ea:0e:ae:8b:38:0b:1f:d5:ce:49:15:ff:b0:
66:63:85:75:13:5b:be:1f:22:02:a7:73:d2:07:bd:f7:82:78:
9b:a8:24:70:97:b5:0f:23:1d:2d:ee:d0:50:69:9e:3d:09:d0:
87:17:0e:f5:55:cb:2b:97:fb:b0:70:7d:09:1d:28:1b:4c:6a:
51:3e:07:a7:54:2c:72:28:c0:6f:9a:ea:d8:03:d7:21:58:7b:
78:26:82:03:16:ba:29:d8:9b:8c:5d:f2:35:be:89:cb:f0:91:
5f:15:4f:69:12:bc:1f:ee:f2:60:3e:cd:6d:cb:12:b7:ee:0a:
49:c4:62:16:0f:28:c4:50:74:20:0e:59:48:a3:15:58:53:f4:
cc:85:68:7d:60:0d:1a:08:c5:6c:81:7a:df:15:64:06:51:0d:
35:a6:22:32:4d:9d:39:42:23:e9:b7:e8:b3:47:a7:9d:83:39:
56:5b:08:07:0f:c7:40:e0:a8:fb:87:ff:92:02:89:7a:20:54:
82:b0:8c:2f:16:f8:16:28:a7:6c:de:6f:c6:d7:dc:5d:68:e3:
d2:bb:34:a4:77:15:bb:6d:03:3f:16:8e:ed:48:47:6d:e3:e6:
17:6a:dd:04:73:07:25:ad:7f:93:3b:13:c2:d1:e0:bc:71:69:
c0:5b:40:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 21:58:20 2025 by rpki-client