Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS215086.roa
File: AS215086.roa (raw, json)
Hash identifier: AgnM0HuyHt4fui6yN7VsZIsMP7/bVN2tZk0cnT5pYHo=
Subject key identifier: ED:69:D5:E4:A5:4F:03:E6:60:92:00:37:93:53:13:C3:2E:18:55:DD
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 598E819198B0CB6C0C6B10A9DCA8433977A362C4
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS215086.roa
Signing time: Tue 10 Dec 2024 20:05:10 +0000
ROA not before: Tue 10 Dec 2024 20:00:10 +0000
ROA not after: Tue 09 Dec 2025 20:05:10 +0000
asID: 215086
IP address blocks: 103.204.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 13:37:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:8e:81:91:98:b0:cb:6c:0c:6b:10:a9:dc:a8:43:39:77:a3:62:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Dec 10 20:00:10 2024 GMT
Not After : Dec 9 20:05:10 2025 GMT
Subject: CN=ED69D5E4A54F03E660920037935313C32E1855DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e8:70:ea:8e:a2:f2:a9:a9:cc:b4:eb:98:89:
e6:de:25:0b:12:74:9c:0f:e5:a4:86:25:67:8e:2f:
d5:82:f9:43:5a:6b:74:3c:03:df:c9:3f:87:c6:d6:
3a:e3:f7:1b:4d:ad:0f:31:63:53:74:f9:d4:38:a5:
a3:b4:4e:35:aa:be:ea:59:53:cb:10:d8:5c:c2:5a:
ee:5b:ba:b8:81:a0:88:e2:d0:21:32:20:b1:16:2e:
89:3e:31:a5:b4:45:9b:5b:6c:b5:7f:58:95:9e:40:
d1:ba:ec:5f:6a:08:ba:2c:0d:c1:19:70:bc:1b:7f:
8a:f3:8f:a6:54:56:94:95:fd:ed:82:42:1d:f6:15:
e3:f3:77:11:d0:b8:d0:e4:2f:4a:24:f2:f7:d7:27:
6a:db:56:54:9c:1c:e3:e4:53:66:96:9c:b7:be:a0:
2b:df:c1:7c:7a:7b:e0:de:a9:01:73:3f:af:71:b8:
12:e5:ba:59:16:08:07:e9:d7:6e:95:09:6a:3f:f6:
9c:48:90:b3:f3:1e:38:2e:bd:45:d0:7c:47:24:f8:
e9:a8:32:d4:be:86:70:19:81:a5:b4:ae:13:94:89:
e3:ce:4e:7a:5c:9c:dd:29:8f:9b:b9:0a:e6:14:b0:
3d:61:64:5e:e6:ea:19:4d:b7:f8:25:73:63:dc:88:
10:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:69:D5:E4:A5:4F:03:E6:60:92:00:37:93:53:13:C3:2E:18:55:DD
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS215086.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.204.195.0/24
Signature Algorithm: sha256WithRSAEncryption
90:4f:27:c3:54:b1:45:f2:ee:0f:4c:9c:86:0d:ea:86:e8:d4:
19:4e:db:80:8e:2d:df:16:5a:17:25:51:62:f2:ca:64:f8:00:
28:91:a1:d6:9e:e0:a4:22:c9:6f:60:e4:d7:9f:8d:aa:8b:e9:
04:ea:bd:3a:9c:8e:af:e2:30:63:93:1c:9a:7d:1c:d4:a6:35:
1f:6d:f3:fc:fd:44:87:b6:95:31:6b:0a:88:83:42:5c:9a:e2:
68:3f:49:fb:74:d7:22:15:d1:da:ff:6e:8d:95:3e:11:a6:48:
33:e2:56:cf:80:9e:cd:fd:e5:b2:c8:f5:71:a1:93:1e:d0:1d:
2d:27:fb:25:cc:5a:47:99:9f:e9:ab:94:5c:6f:aa:18:de:98:
7b:1a:98:44:64:2d:de:25:1b:c4:45:ef:28:59:74:e8:f4:f9:
bd:f6:27:53:69:f4:9a:1f:55:6a:0f:96:6f:ff:f3:99:c6:e6:
01:0e:f1:59:dc:ea:b3:4c:8c:a3:7f:b9:91:f4:07:05:e0:38:
2a:c7:52:90:67:f0:60:9c:5a:05:63:e4:36:51:f4:8d:6a:53:
88:ea:d1:ed:38:ce:3c:94:f6:9a:5f:d8:45:43:a0:d5:82:8d:
a6:b2:c0:5e:c1:bd:3c:9f:b3:b1:05:68:33:5c:12:a3:c5:bd:
77:01:6f:78
-----BEGIN CERTIFICATE-----
MIIE5TCCA82gAwIBAgIUWY6BkZiwy2wMaxCp3KhDOXejYsQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzk5NDM4ZjFiMTc2MmFlZWY4YTM1Y2Y0ZTZjYmFlOTc2
OTliZDAyMDAeFw0yNDEyMTAyMDAwMTBaFw0yNTEyMDkyMDA1MTBaMDMxMTAvBgNV
BAMTKEVENjlENUU0QTU0RjAzRTY2MDkyMDAzNzkzNTMxM0MzMkUxODU1REQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC16HDqjqLyqanMtOuYiebeJQsS
dJwP5aSGJWeOL9WC+UNaa3Q8A9/JP4fG1jrj9xtNrQ8xY1N0+dQ4paO0TjWqvupZ
U8sQ2FzCWu5buriBoIji0CEyILEWLok+MaW0RZtbbLV/WJWeQNG67F9qCLosDcEZ
cLwbf4rzj6ZUVpSV/e2CQh32FePzdxHQuNDkL0ok8vfXJ2rbVlScHOPkU2aWnLe+
oCvfwXx6e+DeqQFzP69xuBLlulkWCAfp126VCWo/9pxIkLPzHjguvUXQfEck+Omo
MtS+hnAZgaW0rhOUiePOTnpcnN0pj5u5CuYUsD1hZF7m6hlNt/glc2PciBDjAgMB
AAGjggHvMIIB6zAdBgNVHQ4EFgQU7WnV5KVPA+ZgkgA3k1MTwy4YVd0wHwYDVR0j
BBgwFoAUeZQ48bF2Ku74o1z05suul2mb0CAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi83OTk0MzhGMUIx
NzYyQUVFRjhBMzVDRjRFNkNCQUU5NzY5OUJEMDIwLmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZVpRNDhiRjJLdTc0bzF6MDVzdXVsMm1iMENBLmNlcjBwBggrBgEF
BQcBCwRkMGIwYAYIKwYBBQUHMAuGVHJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv
cmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5ZC8yL0FT
MjE1MDg2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAZ8zDMA0GCSqGSIb3DQEBCwUAA4IBAQCQTyfDVLFF
8u4PTJyGDeqG6NQZTtuAji3fFloXJVFi8spk+AAokaHWnuCkIslvYOTXn42qi+kE
6r06nI6v4jBjkxyafRzUpjUfbfP8/USHtpUxawqIg0JcmuJoP0n7dNciFdHa/26N
lT4Rpkgz4lbPgJ7N/eWyyPVxoZMe0B0tJ/slzFpHmZ/pq5Rcb6oY3ph7GphEZC3e
JRvERe8oWXTo9Pm99idTafSaH1VqD5Zv//OZxuYBDvFZ3OqzTIyjf7mR9AcF4Dgq
x1KQZ/BgnFoFY+Q2UfSNalOI6tHtOM48lPaaX9hFQ6DVgo2mssBewb08n7OxBWgz
XBKjxb13AW94
-----END CERTIFICATE-----
Generated at Wed Feb 5 17:56:45 2025 by rpki-client