Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/11/326131333a633030373a383031383a3a2f34372d3438203d3e2030.roa
File: 326131333a633030373a383031383a3a2f34372d3438203d3e2030.roa (raw, json)
Hash identifier: /XizzDEjWfHtXHc0Ab5o0ZbY35Db7SjtES+r1/OhmjA=
Subject key identifier: D3:ED:5F:BF:98:6A:61:85:DE:46:84:F4:81:8D:C4:EB:96:55:1A:A8
Certificate issuer: /CN=d4700d8e6f022571a0b26fcd4c70c0408ea4ffc9
Certificate serial: 29BB7EDDF7B64B8B35B78574522BADD62667AA9B
Authority key identifier: D4:70:0D:8E:6F:02:25:71:A0:B2:6F:CD:4C:70:C0:40:8E:A4:FF:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HANjm8CJXGgsm_NTHDAQI6k_8k.cer
Subject info access: rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/11/326131333a633030373a383031383a3a2f34372d3438203d3e2030.roa
Signing time: Mon 16 Jun 2025 22:13:03 +0000
ROA not before: Mon 16 Jun 2025 22:08:03 +0000
ROA not after: Mon 15 Jun 2026 22:13:03 +0000
asID: 0
IP address blocks: 2a13:c007:8018::/47 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/11/D4700D8E6F022571A0B26FCD4C70C0408EA4FFC9.crl
rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/11/D4700D8E6F022571A0B26FCD4C70C0408EA4FFC9.mft
rsync://rpki.ripe.net/repository/DEFAULT/1HANjm8CJXGgsm_NTHDAQI6k_8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:47:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:bb:7e:dd:f7:b6:4b:8b:35:b7:85:74:52:2b:ad:d6:26:67:aa:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4700d8e6f022571a0b26fcd4c70c0408ea4ffc9
Validity
Not Before: Jun 16 22:08:03 2025 GMT
Not After : Jun 15 22:13:03 2026 GMT
Subject: CN=D3ED5FBF986A6185DE4684F4818DC4EB96551AA8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:f9:78:1d:ff:a0:03:49:e5:c3:ca:9f:dd:c2:
f8:b2:12:70:b6:f1:9e:bd:e4:29:23:3d:cc:96:a4:
7c:b0:18:7f:67:9b:e4:a6:2e:6c:01:ed:cd:a3:d7:
90:d7:62:ce:39:5d:ee:e0:0c:fd:aa:de:90:39:f8:
c2:d2:48:a7:24:e3:d0:f0:b0:40:f4:9e:f4:7d:e2:
4a:d9:5f:19:42:0a:57:25:57:e1:b1:25:5a:0c:b4:
be:14:7e:68:43:79:5d:60:7d:d0:d2:44:53:91:9e:
95:d0:46:a0:6f:d8:61:51:cc:d0:fa:95:74:7b:71:
83:c8:be:f2:82:f1:64:ec:4b:15:56:3c:bc:0a:41:
c4:30:39:fa:f0:70:93:55:a3:04:c8:19:79:0e:c0:
18:ca:ed:15:95:a5:fd:1b:38:d1:77:a7:d4:8e:e3:
61:e9:1d:a0:1f:8b:95:a6:d2:6b:c2:52:39:a0:16:
f4:78:a8:f9:86:9c:d7:c5:c2:c0:c1:79:fa:e8:b3:
b3:ff:41:ab:7e:7b:7a:6a:23:98:38:5f:b4:7b:18:
f5:5d:b4:32:d1:48:91:e2:bb:d2:38:ae:bf:c3:b4:
94:59:57:d6:8e:26:f1:17:95:17:f6:b7:32:46:54:
52:ca:01:9f:41:1e:d0:2f:e9:90:91:f6:eb:27:fb:
9b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:ED:5F:BF:98:6A:61:85:DE:46:84:F4:81:8D:C4:EB:96:55:1A:A8
X509v3 Authority Key Identifier:
keyid:D4:70:0D:8E:6F:02:25:71:A0:B2:6F:CD:4C:70:C0:40:8E:A4:FF:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/11/D4700D8E6F022571A0B26FCD4C70C0408EA4FFC9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HANjm8CJXGgsm_NTHDAQI6k_8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/11/326131333a633030373a383031383a3a2f34372d3438203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:c007:8018::/47
Signature Algorithm: sha256WithRSAEncryption
5c:18:88:96:db:7f:84:7a:bd:24:b0:be:aa:2c:6d:5b:80:6a:
bd:0a:83:7a:03:6d:78:d0:8f:bd:3f:58:55:49:e8:70:b1:f8:
ba:10:48:bf:a9:96:38:78:f2:4f:87:4b:7e:c5:9a:e6:dd:21:
e7:38:c1:f5:95:1a:4c:93:97:c4:11:cb:63:11:09:40:b1:6b:
3e:30:1f:a1:c8:77:7a:f6:5c:ae:cd:05:5b:64:3b:9d:b0:f8:
85:99:ce:1d:4e:71:7d:6d:fd:a9:08:37:41:b9:b0:ff:95:82:
f2:02:74:1c:72:bb:7a:e5:09:26:3b:f1:1a:60:38:d4:d2:1e:
71:19:ac:41:ed:a8:b4:a7:46:e4:07:35:6f:0f:86:c8:d2:5a:
6b:fe:da:dd:81:a6:1b:8d:f2:64:36:40:d7:5e:06:65:93:0a:
e7:b2:ab:29:e4:5f:14:7c:b9:80:b6:13:f6:35:59:28:ec:91:
ec:86:69:3b:e4:0f:e4:a2:bc:a7:cc:ff:2f:6d:2e:cb:15:d6:
f8:fb:0e:30:24:d9:e4:99:3c:12:b9:01:ac:4d:5d:29:e0:62:
95:78:06:65:6c:98:86:19:37:3f:f0:ed:c9:f9:70:e3:4d:2d:
68:0c:fd:71:33:67:6c:55:c2:03:28:a4:29:d7:8c:06:e0:ef:
ff:f9:60:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 03:48:25 2025 by rpki-client