Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS8987.roa
File: AS8987.roa (raw, json)
Hash identifier: 677jzgDNlLSGjK3gQ2v1/OummWwUIQMq6yjNx4SLOuw=
Subject key identifier: A7:21:2C:ED:0E:D5:E9:ED:EE:71:BD:78:3F:34:19:D7:A6:CD:2B:7D
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 5F4253D5418FFB36C35F67FDE67D0BA50A031518
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS8987.roa
Signing time: Thu 03 Jul 2025 15:51:56 +0000
ROA not before: Thu 03 Jul 2025 15:46:56 +0000
ROA not after: Thu 02 Jul 2026 15:51:56 +0000
asID: 8987
IP address blocks: 2a0a:6043::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 17:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:42:53:d5:41:8f:fb:36:c3:5f:67:fd:e6:7d:0b:a5:0a:03:15:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Jul 3 15:46:56 2025 GMT
Not After : Jul 2 15:51:56 2026 GMT
Subject: CN=A7212CED0ED5E9EDEE71BD783F3419D7A6CD2B7D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d9:b0:48:82:a6:ff:8f:6c:b2:01:a8:89:92:
85:fb:5e:15:85:54:c3:f7:ff:b6:c7:8b:59:1b:49:
31:42:1e:b3:b2:cd:f6:e4:13:50:30:3a:87:fd:0f:
fc:87:69:9e:88:c4:39:af:58:80:76:b6:4c:1e:c5:
ee:21:40:cf:2b:8f:4d:36:10:0d:4d:f0:83:66:25:
e0:bd:78:55:bf:97:73:ad:3a:d7:f2:e5:c1:65:f5:
0c:e8:17:84:76:f0:1c:30:8b:4f:82:9f:cd:fd:7e:
32:49:80:4b:49:1e:49:5d:83:92:78:f2:28:bd:05:
f7:dd:3a:f5:d7:bf:a4:cc:c8:2e:04:91:da:ab:6f:
98:3e:9f:42:03:6b:d4:56:6d:c1:b3:29:5b:14:38:
0b:d8:1a:6f:e8:72:fb:8a:64:e9:84:1d:96:4e:a0:
4a:3a:b4:1b:24:8b:b3:f8:39:4a:52:93:18:73:b6:
00:57:da:16:dc:77:e8:07:36:13:f7:d7:17:0f:cc:
6f:f3:41:bd:ed:ea:fe:1c:60:d9:1f:6e:9e:8d:07:
79:8f:ae:30:35:62:da:44:5b:c8:ed:02:e5:b8:79:
c5:dd:d5:fb:83:ff:d0:e7:66:7d:76:9e:3f:93:f8:
d2:59:3a:9b:f7:bc:84:5f:b6:bd:f1:b1:1e:46:1e:
5f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:21:2C:ED:0E:D5:E9:ED:EE:71:BD:78:3F:34:19:D7:A6:CD:2B:7D
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS8987.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6043::/40
Signature Algorithm: sha256WithRSAEncryption
56:f2:0d:f4:06:6c:50:34:58:d2:d2:7f:52:87:aa:1e:33:3e:
cf:2a:16:99:be:d7:aa:af:27:c9:07:c8:c1:1d:fb:2d:68:48:
0c:ee:ff:4c:7e:58:28:d9:fb:b1:e2:03:8e:28:e4:19:39:85:
70:d0:10:fc:52:61:4a:2d:ef:ca:a3:24:94:2d:fe:a1:db:77:
b8:62:be:81:5c:83:6c:47:d5:c0:41:ca:bc:13:3f:fd:7c:f8:
8d:bb:d5:72:27:65:6f:c4:be:03:23:e9:e8:82:04:af:17:08:
11:5f:a7:ac:4e:1c:ec:6a:3f:22:48:46:52:59:aa:9e:ff:5b:
2a:d2:4f:54:30:ee:6f:fe:da:e5:31:1e:34:e5:95:2e:d4:5d:
9f:ce:10:b6:28:33:de:4d:da:69:39:10:f5:9a:74:c0:e1:8d:
22:7e:fa:fb:25:81:92:64:6b:01:3b:58:08:0c:7c:88:e0:9d:
52:08:c1:d0:4f:2c:19:da:92:8a:07:ae:15:43:fd:c0:05:71:
31:1d:8b:03:dc:cb:5c:33:9a:b6:66:aa:d4:71:f8:e4:cc:45:
49:13:a7:f8:ec:af:e9:7b:8c:e5:ea:43:7b:82:0f:76:bd:8f:
63:00:8a:cf:35:50:4a:d2:0b:e2:d9:c1:ed:d7:53:ce:5a:7e:
a5:ea:f2:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 21:56:58 2025 by rpki-client