Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS213438.roa
File: AS213438.roa (raw, json)
Hash identifier: c8Wn/6GUz/EXWSzPjAXYImINMPHosec88vNThxmW6GA=
Subject key identifier: EC:16:26:9F:13:D5:CB:64:CC:31:53:01:F5:C4:2F:24:2F:4E:F1:4D
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 5631A4D14CCB5D1B649F91059F9F13F5E68CF97F
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS213438.roa
Signing time: Sun 11 May 2025 20:53:53 +0000
ROA not before: Sun 11 May 2025 20:48:53 +0000
ROA not after: Sun 10 May 2026 20:53:53 +0000
asID: 213438
IP address blocks: 5.253.84.0/24 maxlen: 24
5.253.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Jun 2025 08:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:31:a4:d1:4c:cb:5d:1b:64:9f:91:05:9f:9f:13:f5:e6:8c:f9:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: May 11 20:48:53 2025 GMT
Not After : May 10 20:53:53 2026 GMT
Subject: CN=EC16269F13D5CB64CC315301F5C42F242F4EF14D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ed:70:b5:ab:55:1c:65:20:c9:d7:fd:fc:e3:
b3:06:dd:ec:70:d2:6c:5f:68:4c:23:4d:d5:a5:be:
33:bd:f2:c8:bd:44:8a:fc:e8:1a:33:be:55:46:62:
4d:28:bb:62:26:dd:43:ed:ac:fb:2d:8b:4f:b0:96:
a1:0e:10:24:1e:4f:ba:ca:97:57:37:27:fd:e2:ae:
60:78:27:39:df:05:30:73:6b:52:25:34:a8:60:c7:
db:75:a9:3a:15:d5:ee:da:f2:6d:73:9e:a6:78:96:
cd:09:75:0f:fe:6a:e2:06:67:8e:8e:1a:5c:b5:bf:
6e:d7:61:5a:bf:1c:a0:35:4b:6b:57:e1:5d:96:cd:
73:61:05:5e:89:38:06:a1:b7:af:ca:1b:c6:fe:5e:
e8:22:70:0a:f6:a9:05:3c:bc:d0:d6:0a:fd:37:15:
91:9c:fb:ca:db:e4:ce:3e:60:61:95:1a:3d:7e:38:
92:7c:b8:f0:3c:5e:07:8f:e0:b4:62:e3:21:bd:24:
5a:cc:fc:1f:f2:ab:52:9b:0f:a7:7d:d6:52:f7:0c:
9f:2e:a7:97:4d:9d:fa:8a:9a:5e:23:49:1a:f9:b2:
96:62:6b:9e:27:d4:7f:bb:d3:ab:b8:ec:8b:7b:87:
96:2a:65:5b:6a:91:69:89:33:61:7f:0e:dc:b6:0e:
84:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:16:26:9F:13:D5:CB:64:CC:31:53:01:F5:C4:2F:24:2F:4E:F1:4D
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS213438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.84.0/24
5.253.86.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:6a:24:45:6a:7e:d3:5a:1c:19:e5:e0:bb:5b:22:7f:95:ce:
d6:62:57:4e:3c:b6:8a:f8:d5:47:40:b7:f5:4b:ab:2e:29:c7:
44:c7:f8:45:fa:66:43:9e:04:38:05:4a:c4:3e:6d:05:29:b7:
f8:20:96:c3:e7:e0:34:c3:34:71:7d:c3:6d:36:39:4f:18:b3:
99:1d:7e:ef:e4:37:c8:a8:8c:cb:bc:12:71:9e:b1:35:19:69:
76:5b:30:e7:c5:d4:c1:f1:95:da:b8:bb:ed:f8:4a:a6:48:65:
0e:2d:36:ba:51:3f:78:73:f4:c7:dd:5f:2a:f1:4e:45:bd:5a:
dd:58:65:f2:61:2b:3f:0a:5f:ea:f3:16:b8:68:77:76:7c:99:
28:1b:a8:af:c5:37:27:1e:aa:74:1e:93:64:d0:61:2d:4a:bf:
22:18:be:9d:aa:f6:c1:4b:b0:11:fc:9c:a2:a3:49:a9:ce:e3:
c9:79:b4:90:d5:c4:51:8a:1a:79:12:e6:75:81:89:a2:13:95:
ca:36:f6:d6:6c:e3:56:a1:3f:8f:e5:01:d1:43:37:11:4c:25:
0d:8a:db:c7:8d:ea:15:10:30:13:9b:f7:82:c2:0b:8f:e8:46:
42:c6:80:94:77:95:18:06:7b:50:c7:13:c1:46:b5:7d:ce:0f:
ea:ac:55:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 12:24:37 2025 by rpki-client