Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS199414.roa
File: AS199414.roa (raw, json)
Hash identifier: gIGEKuBVTNPXn4UO3pTmCn/z8/Tq8AqE8aEhRr2jWng=
Subject key identifier: 9D:7F:F8:48:CD:AD:32:A8:22:5B:7E:AF:BA:FC:BF:79:45:9E:56:46
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 5BD184EAF41055DB877FC5B07E86E724355ABD65
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS199414.roa
Signing time: Thu 15 May 2025 20:28:54 +0000
ROA not before: Thu 15 May 2025 20:23:54 +0000
ROA not after: Thu 14 May 2026 20:28:54 +0000
asID: 199414
IP address blocks: 118.91.185.0/24 maxlen: 24
206.245.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Jun 2025 08:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:d1:84:ea:f4:10:55:db:87:7f:c5:b0:7e:86:e7:24:35:5a:bd:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: May 15 20:23:54 2025 GMT
Not After : May 14 20:28:54 2026 GMT
Subject: CN=9D7FF848CDAD32A8225B7EAFBAFCBF79459E5646
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:1d:98:6a:00:8d:13:8f:22:44:5a:ff:cb:1e:
c4:d6:60:f8:20:ac:01:47:dd:72:e5:48:99:fe:44:
a8:c9:28:ca:17:c1:26:c9:89:f3:e7:a5:32:2c:22:
d9:20:da:83:87:7e:92:3a:fa:19:ee:ba:b2:20:4e:
19:99:c3:2b:2f:02:0e:4e:11:71:4a:c5:47:cd:62:
68:89:b3:46:18:a2:0a:27:eb:32:e4:08:b3:46:27:
23:9c:cd:d2:f5:9f:59:51:f4:19:21:e7:36:59:74:
26:da:a6:8d:ca:d2:00:b9:80:3e:ec:22:d2:0f:ba:
c7:bf:d7:56:6a:70:82:3c:80:c6:32:8c:15:97:d3:
c0:1f:56:a2:e6:b3:47:68:55:95:4e:c8:49:e4:40:
31:b2:f5:0d:79:0c:67:31:17:3f:82:72:91:28:1d:
c7:a8:45:76:03:06:54:8a:01:b2:31:fb:fd:47:e4:
50:e2:e3:06:1f:26:93:70:0e:eb:eb:08:a5:02:c3:
81:51:2c:9f:9a:82:ed:fb:7a:75:c4:14:7e:37:93:
02:20:7d:da:eb:c5:ae:d2:53:d4:8b:81:ce:5e:b5:
05:66:72:08:b3:ed:7f:80:04:2b:a3:8d:e7:c9:56:
62:58:b5:e9:60:31:46:f8:00:93:d8:8f:52:33:0f:
97:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:7F:F8:48:CD:AD:32:A8:22:5B:7E:AF:BA:FC:BF:79:45:9E:56:46
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS199414.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
118.91.185.0/24
206.245.166.0/24
Signature Algorithm: sha256WithRSAEncryption
d7:13:61:fe:0b:d1:a1:0a:7e:e4:32:d4:4f:b5:e4:c3:21:49:
e3:2a:63:20:78:ee:87:6d:8b:ec:18:76:45:90:b1:74:41:1e:
b8:70:f8:f2:d2:b0:17:32:cc:f0:e4:04:ff:69:c4:5a:ed:44:
02:d3:9b:cd:81:fe:a7:02:10:e0:ae:88:d0:bf:e3:1f:e9:f5:
e5:72:a3:2b:07:c9:91:fc:0a:d0:65:39:ee:eb:54:82:5b:fc:
1b:6c:7e:26:94:60:af:b9:ac:b7:1d:05:ba:9e:73:b5:5a:4a:
87:16:1b:eb:e4:1b:92:c5:ea:75:06:b4:4b:54:43:f9:21:4f:
ac:d8:38:2f:e7:7b:8c:7d:c7:cd:b1:71:ce:af:df:3e:fe:ac:
ed:91:e6:43:5e:01:87:c7:0b:ed:92:4d:c5:45:75:a4:32:d1:
84:87:56:73:92:d3:66:10:87:0a:f9:36:17:32:1e:b7:21:31:
47:5e:c5:cd:f7:2d:a3:6f:5a:b7:0f:f3:48:9c:ec:a2:e9:81:
24:b1:ab:62:dd:21:73:1b:40:a0:ac:38:b4:c2:fd:f9:8a:a4:
b6:6b:4c:dc:80:81:00:4b:17:ff:1a:10:25:db:71:b0:45:8f:
68:77:90:8d:58:ab:7f:b3:aa:d5:7e:4a:cf:dd:99:a2:e2:06:
28:30:91:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 12:13:46 2025 by rpki-client