Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS215823.roa
File: AS215823.roa (raw, json)
Hash identifier: yxuvcCOqkSYwXbSmVCV5LpT266QfpL5nCUB+NThTsoo=
Subject key identifier: 7F:0D:6D:5E:D9:48:93:6D:69:B8:66:52:56:DD:32:51:58:77:E3:A5
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 7584CA5C9909F36CC5A4B9373FBF27DF06637849
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS215823.roa
Signing time: Mon 12 May 2025 18:59:38 +0000
ROA not before: Mon 12 May 2025 18:54:38 +0000
ROA not after: Mon 11 May 2026 18:59:38 +0000
asID: 215823
IP address blocks: 103.146.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Jun 2025 08:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:84:ca:5c:99:09:f3:6c:c5:a4:b9:37:3f:bf:27:df:06:63:78:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: May 12 18:54:38 2025 GMT
Not After : May 11 18:59:38 2026 GMT
Subject: CN=7F0D6D5ED948936D69B8665256DD32515877E3A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:65:f7:bd:32:be:ad:84:07:c2:d9:5e:58:ab:
1c:d8:7e:d6:13:73:00:f1:3a:d9:78:92:4a:5b:b9:
90:69:b8:46:b6:eb:64:29:7b:a4:19:ba:b4:62:43:
df:37:3b:ce:ff:33:cf:65:1c:d3:07:eb:2b:fe:f2:
86:a5:81:3b:23:04:cf:e0:fb:e2:74:8b:92:22:eb:
f0:0c:0b:09:55:bb:7a:0f:6d:ac:1e:d6:9f:6f:82:
f8:d3:83:b0:05:77:8a:10:74:83:75:cb:33:e1:9b:
3c:0c:a3:b3:0f:9d:d2:92:6a:5d:ba:35:2d:32:08:
61:79:f1:57:bc:a7:57:c2:6d:26:fb:e8:b1:41:c8:
cb:d1:e9:35:30:a0:aa:ae:f4:42:86:e3:81:6e:1f:
f3:70:96:d7:f8:57:45:65:01:f6:fd:26:09:de:be:
79:82:3c:63:d2:be:ec:1e:e7:96:7b:c6:a9:d9:f0:
3e:45:de:98:54:83:d9:d0:b5:12:22:e7:b1:4b:8d:
10:94:c5:db:a1:ac:f9:ec:52:a4:e7:c9:6e:7c:c6:
60:fb:ba:1c:77:b5:3d:2a:2e:09:3b:31:04:41:ba:
b9:b5:ce:81:9b:33:31:a5:65:c0:90:3b:71:10:59:
a0:41:9d:c1:3a:06:ee:94:3d:d6:1c:04:7b:e4:37:
16:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:0D:6D:5E:D9:48:93:6D:69:B8:66:52:56:DD:32:51:58:77:E3:A5
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS215823.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.146.102.0/24
Signature Algorithm: sha256WithRSAEncryption
63:ed:2d:2e:4e:7e:45:d1:4c:fb:fb:4e:21:1c:ee:7b:3a:9f:
ae:a5:40:1f:f8:a9:a2:be:8d:27:ad:6b:c7:63:74:f9:34:00:
8f:1f:83:43:c3:98:67:64:19:23:6c:40:4a:dc:60:a9:cb:f9:
30:fe:e8:4f:76:c2:e4:de:c3:6b:32:e2:e2:f0:cf:91:d2:b8:
44:94:30:b0:76:d9:e5:3f:c1:98:84:9d:c8:70:f2:39:4f:72:
25:06:35:78:38:76:9c:a6:18:5e:78:16:0f:f7:a4:12:10:da:
01:88:f5:f1:38:a1:7b:7c:27:28:1c:69:50:aa:34:2c:b4:a3:
19:e8:f2:09:c3:8b:e5:05:39:f8:b1:3d:e5:a6:6c:60:10:68:
3b:f7:48:b5:58:cf:f4:f4:d3:21:8d:c6:fe:b0:40:03:21:16:
54:9e:2e:95:ab:9e:55:b2:7e:c9:18:d7:f5:a0:e2:60:a5:1e:
a8:8a:09:82:80:bf:f0:a9:08:d2:f9:d8:9c:36:3c:8d:17:34:
46:e1:83:a1:0c:b6:4d:78:cb:a4:4a:b3:af:83:5d:c1:cf:2e:
7f:be:3b:e4:3f:cf:4e:ad:2f:bf:e5:15:1e:9f:bb:c4:03:6e:
3d:52:84:90:07:39:a2:60:a4:5c:65:77:fe:98:b0:e6:f2:41:
ad:05:c8:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 12:24:35 2025 by rpki-client