Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS207778.roa
File: AS207778.roa (raw, json)
Hash identifier: ToU+0kyA/BsOW6D3+MmTYq64e8lT+R1Z+JbQ67kbWOs=
Subject key identifier: 6D:8C:33:FE:90:97:63:56:2B:27:2B:59:4E:81:A2:B9:7B:9A:9F:81
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 5C18E835E51F6A7C53F163C3716977943200370E
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS207778.roa
Signing time: Fri 13 Dec 2024 02:56:29 +0000
ROA not before: Fri 13 Dec 2024 02:51:29 +0000
ROA not after: Fri 12 Dec 2025 02:56:29 +0000
asID: 207778
IP address blocks: 103.204.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 09:24:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:18:e8:35:e5:1f:6a:7c:53:f1:63:c3:71:69:77:94:32:00:37:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Dec 13 02:51:29 2024 GMT
Not After : Dec 12 02:56:29 2025 GMT
Subject: CN=6D8C33FE909763562B272B594E81A2B97B9A9F81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ba:33:30:41:26:0f:23:a1:79:41:e5:c4:23:
f3:fa:03:0f:47:13:19:dd:3b:6c:81:aa:1d:d4:b4:
0e:48:0a:9b:35:88:5d:c4:e7:d4:28:7e:c0:00:98:
ad:05:d0:78:a1:94:5b:9c:13:aa:89:36:82:54:06:
83:f4:d1:9e:de:81:b1:96:43:3b:0d:93:9a:11:a4:
97:49:79:74:d3:6c:43:32:1d:0a:c7:bb:16:d0:10:
76:4a:a0:1b:76:d2:5e:41:83:5d:cc:cd:7d:84:77:
8c:df:92:4f:23:97:b2:2a:3c:aa:a7:33:08:fe:f1:
c1:d4:d0:24:2e:e5:04:ec:46:75:e7:7f:c0:57:88:
33:61:46:47:0e:15:f3:60:75:f1:49:c7:e5:52:1a:
c5:8c:b1:1e:f5:da:ae:26:a8:dd:9f:b3:33:02:ec:
2c:b8:15:58:02:4b:82:bf:2f:0a:1a:ad:59:a3:36:
45:0a:dd:01:df:2e:8d:57:97:ad:1f:51:21:6d:b4:
05:74:2d:da:c2:e4:0d:0a:b1:b5:b7:29:4f:64:52:
22:b4:d7:a4:20:40:28:26:f0:35:28:30:50:8d:e7:
09:ce:12:35:ed:39:4a:6e:60:ba:ec:09:14:1e:8c:
f7:83:17:ef:b3:58:a4:07:3c:6b:27:13:3b:eb:e3:
1c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:8C:33:FE:90:97:63:56:2B:27:2B:59:4E:81:A2:B9:7B:9A:9F:81
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS207778.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.204.192.0/24
Signature Algorithm: sha256WithRSAEncryption
16:95:ba:18:6e:be:b9:9a:43:90:5e:61:e4:70:5b:7a:fd:c7:
0e:6b:fc:55:cd:86:9b:04:22:f0:72:09:8e:5d:e0:90:38:88:
17:bd:2c:91:7c:4a:56:c8:fd:73:8e:c5:5c:35:f7:a4:a6:92:
b1:22:48:4d:18:a1:c2:9c:1f:96:ff:f9:19:f6:73:39:b0:94:
6a:2d:d7:32:dd:d3:a6:f1:1e:ee:6a:3e:14:34:f0:10:5d:fb:
85:87:a1:86:6d:ca:3a:91:c7:87:eb:d7:8f:2c:96:08:7c:0c:
a6:b3:e5:a6:c8:d0:43:61:db:5e:7f:1b:e1:50:02:3d:0a:3d:
ee:e7:7a:b2:a1:35:81:cd:1b:44:4a:88:48:2f:b0:2d:bf:67:
b6:25:ce:48:29:e7:38:1d:10:28:ab:a2:6b:95:3c:22:6a:3b:
37:6c:fb:d4:77:f1:e7:3a:75:21:6f:5c:96:b7:16:35:9f:77:
93:38:91:e5:dd:db:03:71:75:43:62:6a:10:0b:8c:2f:50:c0:
e9:b0:bb:ce:6a:c3:9a:a2:99:21:1c:1b:7d:ff:1f:03:03:fe:
14:06:49:2e:6d:18:72:16:68:c1:d2:f0:78:b4:93:7d:25:30:
98:1a:32:85:ab:bf:8d:98:0e:d6:7a:b9:25:97:c6:29:57:83:
d5:ca:69:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:41:27 2025 by rpki-client