Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS49981.roa
File: AS49981.roa (raw, json)
Hash identifier: /ASnYRu3c/Qqc/lOs7YZ/PV0MwizYSVlE/b8MS6ipxc=
Subject key identifier: FE:91:D5:1C:13:D6:4C:80:B1:95:B2:A9:9B:D3:FC:F2:A1:42:BC:F3
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 2C4D5410A4365E0D31C53C4D7FCE332240548003
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS49981.roa
Signing time: Mon 18 Aug 2025 19:52:04 +0000
ROA not before: Mon 18 Aug 2025 19:47:04 +0000
ROA not after: Mon 17 Aug 2026 19:52:04 +0000
asID: 49981
IP address blocks: 185.99.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 20:50:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:4d:54:10:a4:36:5e:0d:31:c5:3c:4d:7f:ce:33:22:40:54:80:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Aug 18 19:47:04 2025 GMT
Not After : Aug 17 19:52:04 2026 GMT
Subject: CN=FE91D51C13D64C80B195B2A99BD3FCF2A142BCF3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e4:e3:7b:65:f3:7a:49:a1:4c:00:77:bb:8e:
9b:2b:38:1d:11:b6:45:78:ba:4b:8c:2b:21:f0:6e:
eb:f6:23:59:54:d2:23:60:2d:f5:7b:38:e1:28:b9:
ae:4a:4b:b7:cb:f0:d2:7b:f6:42:f9:84:63:f7:16:
d2:1f:5c:f3:ad:8f:14:37:e1:ab:79:09:14:b0:aa:
10:df:23:f8:aa:ae:ac:a3:c8:ef:c1:ce:29:61:a7:
de:f0:75:5d:a7:d8:c3:6f:bf:6c:a4:7e:56:c7:3f:
07:ac:10:16:90:db:d7:e6:fa:19:9d:fc:c9:37:2b:
34:2e:07:93:c8:e4:24:aa:18:e1:72:06:a5:39:30:
b0:42:6e:a7:1e:c4:21:5b:64:1b:d0:cc:7a:53:e2:
ec:84:e8:d6:13:d9:d1:8a:62:4c:8c:58:91:9c:96:
b3:92:b6:86:fb:74:e2:23:dc:63:5d:e3:3f:ac:b9:
31:7e:f7:99:28:75:99:f6:65:ae:43:a9:c6:1c:86:
a2:6e:b9:ca:35:05:82:9a:00:3e:73:c6:42:26:d6:
e6:dc:b5:9d:9b:e3:a5:77:fa:a5:fe:75:40:64:77:
1a:bc:70:e4:ff:e6:85:1b:74:72:51:68:86:87:c5:
e4:5e:41:27:14:58:c3:c1:ec:b4:2c:84:fa:f0:87:
af:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:91:D5:1C:13:D6:4C:80:B1:95:B2:A9:9B:D3:FC:F2:A1:42:BC:F3
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS49981.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.99.135.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:95:74:b3:33:94:2f:35:05:95:08:de:18:68:29:38:48:8a:
de:72:3b:99:fa:71:17:8b:ef:08:4d:22:b7:60:95:a3:2d:7e:
04:08:1c:47:4b:56:5b:2e:30:2e:c0:0b:4c:f2:f9:59:3a:30:
a6:23:e3:49:aa:7f:1b:9c:1a:d7:a8:5b:af:80:34:93:9d:24:
95:99:b8:94:70:0c:0b:c9:cb:4b:3b:be:a6:c4:0b:8f:b8:c3:
70:44:18:cf:4a:8a:26:fa:cc:81:40:60:c8:0c:87:d7:bb:5c:
63:1a:04:ac:aa:c8:9c:b8:94:04:6c:d7:f3:e8:45:61:c9:c5:
c0:63:7d:64:0b:24:63:7f:d0:8a:0d:51:af:34:59:74:c6:e2:
60:fc:d2:40:9d:26:92:4e:24:7b:3b:2d:4f:8e:37:a2:02:db:
ce:05:03:15:c4:1d:06:fc:c2:4a:05:63:76:57:75:18:97:0b:
55:63:6b:e7:4a:9b:63:6f:d9:6b:57:c3:86:fa:66:57:b4:99:
63:5d:5d:a7:c5:a3:6a:2d:cf:78:d8:e7:60:42:99:7f:ca:99:
72:e5:71:97:6c:39:3c:f0:bd:5d:4e:2b:86:4c:49:29:4d:68:
f7:2f:8b:0a:23:82:0b:8a:fa:0c:ec:51:eb:e7:51:7f:e0:68:
d1:c2:df:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:27:00 2025 by rpki-client