Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS151106.roa
File: AS151106.roa (raw, json)
Hash identifier: PmNKnc54+0/JE5jWzdOQDvqbSD1SRnFP3TlKWC3fasU=
Subject key identifier: CE:29:D5:DD:04:95:BA:A6:01:80:91:D9:87:12:B0:84:B1:F8:15:2C
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 740C4B885F571A81D3F5C74BB186AAA122ACD889
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS151106.roa
Signing time: Thu 09 Jan 2025 08:22:17 +0000
ROA not before: Thu 09 Jan 2025 08:17:17 +0000
ROA not after: Thu 08 Jan 2026 08:22:17 +0000
asID: 151106
IP address blocks: 103.204.193.0/24 maxlen: 24
103.204.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 13:37:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:0c:4b:88:5f:57:1a:81:d3:f5:c7:4b:b1:86:aa:a1:22:ac:d8:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Jan 9 08:17:17 2025 GMT
Not After : Jan 8 08:22:17 2026 GMT
Subject: CN=CE29D5DD0495BAA6018091D98712B084B1F8152C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d3:4f:07:05:77:5a:aa:ea:4e:63:15:c6:93:
a7:f0:83:b7:c2:5b:9c:c6:e7:17:57:fc:5d:7b:4b:
62:55:2a:8f:e1:36:04:3e:14:af:20:21:81:7d:97:
df:db:c8:a5:f6:08:09:df:13:3f:3a:7b:a4:4c:36:
f3:be:0f:dd:b2:b0:ae:cb:90:0a:82:62:cf:f4:90:
da:7f:f3:5b:a3:69:8f:d0:38:ff:5f:26:9c:24:6b:
ec:a3:75:ab:ed:b0:04:65:66:9a:5e:e2:8d:fd:70:
51:39:e2:01:a5:78:81:95:7f:45:d3:28:b4:3f:87:
0c:05:13:ee:bd:ea:e5:b7:90:7f:5b:e9:63:a9:d1:
07:fc:4b:73:b0:57:e1:99:26:2c:36:61:bc:0b:39:
80:b2:19:4d:cd:69:09:99:de:a5:54:43:10:39:5a:
06:5c:c6:5e:19:20:d9:a4:bd:06:b2:2a:4d:a3:37:
f0:47:22:1e:e9:e6:0a:4d:86:a6:fc:1a:40:d6:63:
55:f9:8b:e2:f9:0e:2d:c7:91:df:13:dc:05:4b:b6:
1b:bf:89:42:09:41:65:58:25:a5:53:3b:30:8e:e1:
bb:51:87:46:68:3f:83:ff:ca:af:26:10:e8:47:df:
b0:4e:1d:79:c6:92:f8:f4:1e:06:62:ce:d9:21:20:
b7:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:29:D5:DD:04:95:BA:A6:01:80:91:D9:87:12:B0:84:B1:F8:15:2C
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS151106.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.204.193.0-103.204.194.255
Signature Algorithm: sha256WithRSAEncryption
c3:fd:a4:26:18:36:fc:40:1a:6e:2a:e9:75:50:a7:75:86:a8:
29:8e:2a:42:71:4b:b7:00:d1:a7:3a:14:97:10:c4:5d:ef:95:
53:98:43:87:6b:5b:62:8a:8f:24:c8:ac:f2:86:ba:ea:d6:5b:
34:58:e6:f1:fc:f3:c2:82:69:42:ae:fd:50:61:f0:77:ed:82:
0f:7b:62:ef:12:8e:e7:72:ad:36:c4:98:79:d8:91:e6:0b:d9:
7f:fb:c3:85:b3:42:b3:e3:47:fc:d2:70:b3:93:e9:ab:d2:82:
a1:f1:4e:90:72:c8:a9:3e:f1:b3:51:b4:a9:7e:5b:e0:2f:07:
91:73:91:f3:fa:d3:19:9f:01:3a:62:7b:b1:eb:75:d7:ec:e9:
80:94:07:e2:6c:3d:73:d8:1e:f1:76:b5:a3:e2:67:fb:26:22:
5b:1e:1a:b1:d8:07:8e:d5:f9:4e:2c:4e:d7:52:52:a0:47:fb:
99:8a:7f:76:7e:82:1e:dc:8b:67:61:9b:de:7e:7a:ca:fe:b6:
58:07:eb:ed:10:34:bd:46:72:2b:c5:cc:dc:b8:64:5f:b3:0b:
df:3a:39:e8:ed:a9:82:2f:4a:f7:3a:4a:a2:aa:f1:3b:88:9a:
da:6f:da:6e:29:c8:8e:97:1f:33:53:6d:d7:68:fa:80:d9:2a:
0c:b4:b8:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 18:01:02 2025 by rpki-client