Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS270168.roa
File: AS270168.roa (raw, json)
Hash identifier: kAyBZLnxM8f10/QUQJPMBwku8k4QnNCdZT4Et8+lSqY=
Subject key identifier: 7B:36:09:DE:37:87:27:1C:84:97:79:C7:C4:47:D2:DC:AE:37:69:CA
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 5C039BE121ECF30136AFD470B112CC988A5047B4
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS270168.roa
Signing time: Wed 22 Jan 2025 04:35:10 +0000
ROA not before: Wed 22 Jan 2025 04:30:10 +0000
ROA not after: Wed 21 Jan 2026 04:35:10 +0000
asID: 270168
IP address blocks: 202.50.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 09:24:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:03:9b:e1:21:ec:f3:01:36:af:d4:70:b1:12:cc:98:8a:50:47:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Jan 22 04:30:10 2025 GMT
Not After : Jan 21 04:35:10 2026 GMT
Subject: CN=7B3609DE3787271C849779C7C447D2DCAE3769CA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:27:78:02:ed:16:b3:47:78:90:47:de:64:a7:
25:cf:3e:ee:6a:7b:7b:62:fa:4a:5a:72:01:ec:5b:
0a:12:6a:e4:bb:fd:d1:32:62:f8:72:dd:60:14:f5:
37:9b:23:aa:42:c0:a1:55:a9:36:30:2d:14:bf:76:
77:eb:b7:91:33:f2:07:8e:a1:b0:59:77:50:22:7d:
48:4d:36:b5:e6:59:25:a7:09:38:31:ca:f2:cd:54:
01:fe:e5:1b:5a:00:9e:7b:82:93:29:4f:ce:a7:19:
66:f5:dc:0b:81:9c:05:39:93:ba:ad:57:97:90:9d:
d7:62:56:6f:4b:9a:fb:4e:7a:c8:37:64:e5:d7:0c:
c9:0b:e6:fb:6c:98:fc:4b:e9:d9:3a:23:9c:28:21:
63:5e:0b:24:25:e1:8b:f9:d2:33:5e:89:c3:ef:91:
63:b1:f9:91:1d:ba:8b:8e:7b:68:11:c3:2f:d0:c3:
80:40:cd:7c:54:7e:e0:cf:20:16:ee:da:7c:17:01:
b2:12:83:c9:f1:af:5f:93:2d:5e:6c:50:bb:0a:64:
34:8d:68:9f:5f:e9:e5:33:5d:ff:54:35:82:ab:ad:
35:ec:c0:82:df:09:5e:d1:55:e6:2f:af:0f:14:da:
b6:d9:20:cc:f9:45:f6:b3:bf:8b:db:41:b2:00:23:
e4:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:36:09:DE:37:87:27:1C:84:97:79:C7:C4:47:D2:DC:AE:37:69:CA
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS270168.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.50.52.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:ca:04:5d:c7:3b:9c:71:b4:31:e5:99:27:f1:9f:59:09:5c:
3d:c2:76:8e:0e:46:0d:e7:ea:a8:a6:c9:c0:51:25:8d:0f:b6:
2f:7d:d3:b1:fe:f7:48:94:c5:ad:c5:d3:23:c1:4d:c0:b4:f5:
1c:68:61:21:f8:e2:25:19:0e:36:01:8d:e6:94:bc:38:98:59:
c0:df:78:62:eb:e2:00:61:92:b0:3c:52:7d:d8:b7:d8:ba:31:
bb:73:42:3b:1c:ed:97:5e:3d:10:ff:c5:71:0a:2a:2c:79:8e:
5e:a6:5c:4e:85:9e:fc:ef:2f:15:fb:4c:10:83:d0:4e:eb:90:
7c:0e:e9:36:ef:7f:e4:57:9c:61:dc:2c:2a:d7:bc:30:5a:ed:
7b:5d:2e:74:00:70:b6:ee:b6:3d:32:a4:d2:54:94:d6:5a:1d:
43:ee:64:43:ef:6c:da:a1:32:85:42:aa:14:0e:9f:e6:ef:15:
89:73:b6:63:5d:d1:54:d5:96:fa:12:a4:da:0b:d8:10:85:28:
1f:47:37:05:15:77:4f:e3:30:b9:3f:b8:77:35:6f:01:00:c7:
0e:5a:42:a7:47:f8:05:a2:32:06:1e:2c:54:82:9c:80:3e:42:
20:8f:3d:da:e0:73:18:ea:4a:6a:11:52:5a:d1:41:d8:b4:ab:
3a:83:3f:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:40:22 2025 by rpki-client