Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS151817.roa
File: AS151817.roa (raw, json)
Hash identifier: g7UlMHIeVebmttpG4wZZClz1qlV9J9fTV8O7CsbQCH4=
Subject key identifier: C8:0B:A7:66:A3:FF:BE:6E:5B:6A:EB:EB:14:35:E6:63:6C:E6:52:0C
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 02C27C67EB4F8DA4F6B4C4959BF66C928755B1BE
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS151817.roa
Signing time: Thu 03 Jul 2025 15:51:47 +0000
ROA not before: Thu 03 Jul 2025 15:46:47 +0000
ROA not after: Thu 02 Jul 2026 15:51:47 +0000
asID: 151817
IP address blocks: 103.68.108.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 17:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:c2:7c:67:eb:4f:8d:a4:f6:b4:c4:95:9b:f6:6c:92:87:55:b1:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Jul 3 15:46:47 2025 GMT
Not After : Jul 2 15:51:47 2026 GMT
Subject: CN=C80BA766A3FFBE6E5B6AEBEB1435E6636CE6520C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ad:c3:c6:57:f1:25:8e:51:1a:87:e1:39:33:
9c:81:de:4b:9c:1a:94:b0:d2:f5:2d:e2:de:21:d4:
81:a7:7f:05:2f:c5:bb:32:0a:62:37:9a:60:ae:93:
59:e4:a2:66:db:e2:fd:34:a3:7b:c4:b6:88:b1:8e:
bd:50:53:53:dc:26:f1:67:8b:a2:7f:79:07:c2:62:
f8:a5:76:35:73:e0:9f:f4:ca:75:8f:f7:7a:4a:6e:
3b:95:2b:12:8b:3f:78:b6:23:bc:90:cf:87:6e:56:
44:8b:7b:34:f4:43:92:26:8f:93:6a:d7:46:b8:4f:
25:40:e8:0d:8b:34:e6:1b:c9:af:97:a6:0f:f3:26:
88:b6:83:9a:9c:85:1f:51:32:38:8f:eb:9a:c4:3d:
1f:61:47:c4:11:07:1a:6d:bc:4d:2a:e3:fe:07:93:
94:bd:b2:4c:9e:13:e5:74:18:e9:7c:e6:46:33:be:
fa:f5:29:3c:3f:46:44:5a:b7:f3:41:dc:3d:c4:bc:
e8:07:c0:b0:a1:d6:05:01:0f:46:da:b6:73:24:d8:
77:2a:91:19:db:f6:ac:e9:ae:f1:8e:fe:1a:dd:f0:
85:d4:24:7f:ba:0c:bc:96:16:37:ad:2e:83:41:97:
8d:5e:2d:81:91:7d:f3:95:38:85:66:49:97:6a:bf:
25:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:0B:A7:66:A3:FF:BE:6E:5B:6A:EB:EB:14:35:E6:63:6C:E6:52:0C
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS151817.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.68.108.0/22
Signature Algorithm: sha256WithRSAEncryption
a4:5a:3a:ae:0b:73:1a:33:b3:5f:7f:f8:b6:08:4b:8c:d3:83:
d7:fd:4f:18:fa:fb:bf:2a:a2:3f:88:45:c1:23:34:99:47:08:
2d:4c:57:b9:a4:2b:f8:8d:74:05:d5:bb:81:4d:90:f1:23:57:
2b:ef:ac:46:a6:be:79:67:e6:e1:91:1a:d6:b2:00:c3:34:c2:
e8:8b:91:5b:e9:13:4d:48:ae:3b:57:a4:6c:22:67:a2:58:69:
1e:95:d6:be:b0:4b:29:05:b3:49:5d:85:4f:60:9c:7f:a2:19:
73:f7:13:ff:70:a2:6f:fa:78:cf:47:33:d5:e7:ed:f2:41:9a:
ca:d0:17:c9:ae:12:61:6d:5c:20:ce:19:72:9d:2c:e3:eb:05:
81:60:53:49:e7:30:9e:20:85:70:77:a5:84:4e:38:c4:6d:4f:
bc:6e:8e:68:99:e3:fe:e2:b0:c3:5e:d1:67:1c:2c:5d:d6:58:
9a:9d:b5:be:21:23:09:67:97:78:68:d8:56:5a:2b:96:24:5c:
b3:e5:d5:56:c7:68:47:48:96:a3:a8:0c:19:f2:f6:a9:d7:1a:
c8:5f:4a:bf:0a:db:6e:1e:04:eb:61:83:08:2d:88:57:01:42:
d9:29:cf:bb:6f:40:e9:fa:07:3f:76:c5:2c:e1:ec:c0:2b:4c:
32:5c:10:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 22:19:17 2025 by rpki-client