Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS136557.roa
File: AS136557.roa (raw, json)
Hash identifier: +YzW0w2Nao444qXLs3bB8RZNWGiCDC3YkFvu2rzYBtQ=
Subject key identifier: B4:5C:F4:98:44:47:4C:5B:17:09:42:03:BF:41:28:5D:AA:FE:62:42
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 405F006E145082CF7D2ED5F52EDE5A3C0C7854AA
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS136557.roa
Signing time: Thu 03 Jul 2025 15:51:39 +0000
ROA not before: Thu 03 Jul 2025 15:46:39 +0000
ROA not after: Thu 02 Jul 2026 15:51:39 +0000
asID: 136557
IP address blocks: 103.68.109.0/24 maxlen: 24
206.245.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 17:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:5f:00:6e:14:50:82:cf:7d:2e:d5:f5:2e:de:5a:3c:0c:78:54:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Jul 3 15:46:39 2025 GMT
Not After : Jul 2 15:51:39 2026 GMT
Subject: CN=B45CF49844474C5B17094203BF41285DAAFE6242
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a0:b9:20:d8:91:94:c1:49:cd:9d:36:87:ea:
ab:3e:51:6c:55:96:b1:e0:72:e6:b4:0e:04:59:45:
9c:97:f4:49:8f:49:21:86:0b:3e:a4:9f:81:67:6b:
29:66:05:ff:99:16:7e:aa:84:61:f7:85:a2:0f:ec:
a8:26:70:30:b7:81:fe:53:5c:a9:2a:64:10:3c:53:
10:5e:1e:c9:28:1e:9b:53:65:64:8d:cb:0b:49:b1:
b3:ec:55:6e:54:73:f2:e2:6d:8c:21:29:fa:7e:29:
c5:5f:74:43:1f:03:ab:36:3c:45:1f:43:bd:ae:d9:
df:38:1b:02:a5:8d:bb:77:b0:8a:2c:88:d0:de:fe:
d7:1f:c5:5a:85:68:ce:e1:81:74:36:ce:eb:ca:a8:
1d:b8:ef:a5:41:89:f2:8a:59:05:64:92:fe:bc:dc:
3c:c6:05:11:31:1b:cb:2c:62:60:82:82:b1:69:16:
de:f4:bb:6d:b4:f7:e5:dc:34:42:5d:eb:70:de:17:
1b:47:d9:09:c3:26:77:60:1a:fa:2d:46:c8:60:ff:
01:8b:85:c2:2b:ca:7a:e1:9b:af:46:70:21:28:05:
aa:1d:cd:b3:17:4c:b9:f3:28:2c:8c:9a:3f:00:54:
b2:5a:0c:41:13:07:7f:23:5d:6b:40:c9:8a:df:67:
61:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:5C:F4:98:44:47:4C:5B:17:09:42:03:BF:41:28:5D:AA:FE:62:42
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS136557.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.68.109.0/24
206.245.167.0/24
Signature Algorithm: sha256WithRSAEncryption
48:32:9a:65:ab:2f:7d:e5:b5:de:51:95:f9:bd:b9:a2:93:d2:
27:71:c1:ce:7b:5d:6f:fe:20:cc:4b:78:18:fc:31:24:41:37:
70:d5:82:6c:97:56:64:b4:f6:69:a3:72:77:8b:13:6b:54:56:
3f:ef:4b:1f:56:b8:ce:33:3f:5d:7a:cc:c6:77:64:0f:31:c7:
00:e0:32:fe:e8:b9:c9:80:6f:25:b4:44:e1:72:84:88:55:85:
a4:0f:f0:53:6d:a9:92:85:16:95:ad:91:42:75:17:30:88:01:
cb:06:2f:3e:6d:2a:c8:e1:79:d9:6d:7b:b5:4a:e4:91:ee:ad:
37:fc:62:ba:99:4c:ab:5f:46:f3:8c:f7:12:28:eb:f7:eb:27:
ae:1c:5a:78:ad:26:c5:a5:fc:7f:5c:09:cb:6d:d7:7d:f6:33:
c3:61:eb:f8:c8:ad:a4:65:c1:c2:3b:00:5a:ac:96:68:b7:c8:
09:75:22:87:43:c4:5e:e7:bd:56:56:e9:78:f8:cc:0b:f8:7a:
82:26:ee:48:f5:bf:8b:ea:cf:45:d1:7c:71:ff:4a:66:91:7b:
e8:80:d7:5d:c6:f6:fa:c5:28:77:cb:35:3e:35:95:d9:d0:d2:
83:fe:d8:49:f7:44:8f:fb:cd:24:73:de:84:cc:40:32:f2:7c:
d6:a7:12:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 22:07:35 2025 by rpki-client