Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS214710.roa
File: AS214710.roa (raw, json)
Hash identifier: HNtiARDJrbkeOsy2CRo1FTlY5Px+2pojwSKVnwPupSE=
Subject key identifier: E8:45:13:FA:45:46:3A:AC:F9:9D:51:C1:CD:6A:15:17:84:42:89:4E
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 24BF8557868857D33F177369838B57D7BA093F30
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS214710.roa
Signing time: Wed 11 Jun 2025 10:33:24 +0000
ROA not before: Wed 11 Jun 2025 10:28:24 +0000
ROA not after: Wed 10 Jun 2026 10:33:24 +0000
asID: 214710
IP address blocks: 94.26.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:bf:85:57:86:88:57:d3:3f:17:73:69:83:8b:57:d7:ba:09:3f:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Jun 11 10:28:24 2025 GMT
Not After : Jun 10 10:33:24 2026 GMT
Subject: CN=E84513FA45463AACF99D51C1CD6A15178442894E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:69:40:ec:4b:4f:97:27:66:ed:e9:2d:b3:1f:
63:7c:dc:9d:f4:23:cf:0a:61:cc:9c:a6:5c:d9:f4:
5b:8d:38:4c:0d:f5:70:96:6c:01:22:8a:26:67:59:
7a:f6:3b:fd:83:a0:e8:be:6b:0d:a0:0d:3d:ad:11:
0d:05:f5:9a:3b:b0:0f:cd:31:ec:03:32:16:0c:e0:
3a:a5:ac:1f:52:56:16:a7:fe:c8:95:94:2e:83:b0:
dc:b1:3a:f8:de:e3:7f:ef:c3:b0:69:ad:e0:d7:88:
57:71:68:c3:fb:dc:b1:77:6b:96:00:2f:7a:78:c5:
74:22:ab:dc:73:e0:67:55:f8:44:ee:0d:57:79:ad:
b6:ea:25:68:fc:73:dd:14:74:c4:ab:00:1b:01:62:
4c:13:28:59:95:69:94:38:92:62:e7:2d:6c:4f:6e:
02:96:18:29:f2:c3:f7:ed:5e:3f:39:7e:f3:94:28:
08:c0:a2:ee:f9:0f:64:92:e2:2f:52:f6:b8:f1:4c:
48:2e:7c:ca:5b:0b:80:be:6e:76:f6:03:74:7d:da:
d5:3c:b1:2d:45:c6:bb:c9:55:9b:9d:05:d9:b8:cc:
17:3b:60:b0:75:c2:e5:2d:b3:0c:47:12:05:67:02:
91:2e:f4:19:b4:6b:c4:0a:35:cc:d8:d9:69:fa:fa:
e7:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:45:13:FA:45:46:3A:AC:F9:9D:51:C1:CD:6A:15:17:84:42:89:4E
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS214710.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.26.25.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:bc:69:77:86:7c:e4:64:b1:75:88:7e:4a:88:d9:57:4f:13:
50:fc:6f:ba:e9:8d:60:17:3e:d6:4b:c6:ba:71:f9:c1:6c:29:
80:33:0a:38:d0:aa:3e:8f:6a:c4:7b:95:b9:b2:68:35:5e:c5:
c7:2d:73:24:b1:16:3d:36:a7:33:e3:38:36:7b:30:8a:d3:b6:
60:af:e1:84:80:cf:8b:b5:bf:f8:64:29:77:36:68:bd:1a:6a:
f8:ee:cf:18:33:04:94:0c:7f:d8:79:e5:0c:a6:40:7f:d1:55:
3d:24:ca:96:4b:00:2f:04:fb:20:3a:19:8b:62:de:fc:50:d0:
fb:f1:49:0a:1f:41:a7:33:70:6a:3c:67:90:f7:60:97:e0:b0:
c3:a2:fc:7a:b8:d4:f1:d9:fc:46:f8:36:a2:52:00:66:72:40:
1c:23:82:99:2a:5e:94:83:9b:d2:c0:23:32:40:9f:d8:4b:e0:
b1:c6:c0:1b:25:e4:37:15:03:fc:be:86:41:9d:ba:10:3d:6f:
e7:15:44:56:2a:41:07:9d:f4:bf:3b:1c:49:17:2e:9d:41:10:
04:0f:f4:52:48:dc:8e:49:86:73:70:a5:a4:f5:63:bb:cb:29:
9e:95:de:3b:c3:be:db:11:19:75:27:7b:d8:d9:b4:f0:5d:44:
fe:af:a6:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 19:26:15 2025 by rpki-client