Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS203098.roa
File: AS203098.roa (raw, json)
Hash identifier: AWYb2q/bAqe7DFhvnqeOb7tGtJExFK9BQWuFyG31SP8=
Subject key identifier: F2:F4:CC:DF:06:9C:1F:39:6C:0A:F1:F2:F3:F4:10:19:94:EE:0F:AE
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 205C0FEC9B0B2E67A8047608D4EBEC8358C0DE55
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS203098.roa
Signing time: Thu 03 Jul 2025 15:51:51 +0000
ROA not before: Thu 03 Jul 2025 15:46:51 +0000
ROA not after: Thu 02 Jul 2026 15:51:51 +0000
asID: 203098
IP address blocks: 103.230.143.0/24 maxlen: 24
185.90.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 17:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:5c:0f:ec:9b:0b:2e:67:a8:04:76:08:d4:eb:ec:83:58:c0:de:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Jul 3 15:46:51 2025 GMT
Not After : Jul 2 15:51:51 2026 GMT
Subject: CN=F2F4CCDF069C1F396C0AF1F2F3F4101994EE0FAE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ef:78:e8:10:b4:81:b5:46:46:c6:b5:9b:be:
a2:e5:44:e4:45:ea:33:e4:6d:ea:c9:4b:3e:a7:12:
d2:78:84:68:d2:3b:95:dc:ad:3b:64:db:23:39:12:
3d:29:98:2d:75:42:aa:68:0f:3a:5a:16:55:60:4a:
76:1d:9a:38:08:37:ff:fb:66:0b:21:c6:b5:42:2f:
b6:1e:26:f7:d2:ad:6c:d9:3e:d6:c1:33:7c:c2:9b:
e9:f4:0e:aa:ba:40:d1:9b:c5:5f:37:99:69:3a:dc:
de:3b:a4:81:a2:0c:cc:95:4f:dd:89:cb:5f:1c:03:
2b:d0:d2:f6:bb:93:e2:4c:71:96:d7:4d:fa:07:97:
f9:08:97:b9:5f:c3:fa:06:6c:80:44:fd:a6:36:69:
9f:4b:77:25:68:9d:d6:73:65:5c:46:a1:54:a7:e8:
0b:ad:c0:62:c9:4e:ef:b4:ae:98:f1:cb:11:44:4d:
77:f0:c4:02:f8:83:d4:5d:49:69:6d:cc:3f:19:bd:
21:bd:72:00:14:73:3a:96:c3:e3:bf:13:72:51:c0:
7f:90:47:26:b7:cf:20:f2:4f:1a:8a:a5:c2:79:9a:
7e:16:bd:17:d1:ed:da:58:da:85:60:46:11:ae:27:
43:a4:c9:9b:92:12:9b:2c:58:4e:5b:be:63:a7:b9:
1f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:F4:CC:DF:06:9C:1F:39:6C:0A:F1:F2:F3:F4:10:19:94:EE:0F:AE
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS203098.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.230.143.0/24
185.90.63.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:d9:be:4e:f9:04:7c:5a:9a:4c:74:4b:18:5d:c4:7c:1d:38:
7f:db:82:8b:8c:27:7f:0b:e1:23:9f:7f:c6:d2:79:13:db:a5:
54:6d:bc:58:33:1b:e4:df:7d:1c:23:7a:50:62:05:e9:e7:7c:
d3:b9:2b:9b:31:27:17:a2:84:cb:95:c9:ae:0a:b9:3e:5d:ba:
fc:25:ac:f8:85:5f:9f:69:82:a6:17:c8:2b:d9:b1:5a:77:fd:
36:65:4e:c7:36:c5:8f:85:90:f7:66:d6:e5:0a:c8:4a:7f:5d:
36:3e:d1:04:da:fa:38:24:c6:c1:c5:a0:2a:80:0d:5e:e4:c9:
c0:03:5d:a8:3a:2c:3d:02:32:8e:ff:c3:5f:9d:68:4e:0b:99:
f6:61:b4:78:54:f4:be:46:77:c0:b5:15:10:bc:f4:e8:d0:7a:
82:e6:b8:75:86:3b:32:8e:23:dc:45:b6:61:ee:eb:e1:89:47:
1d:82:7d:e4:25:fb:99:6e:4a:23:8d:ab:30:4d:46:bf:e0:50:
c8:97:24:83:ce:71:5d:ea:22:12:a2:91:cb:fe:af:77:0d:cc:
fd:ff:38:f5:0a:19:57:e9:b2:c2:1c:71:1a:19:78:cf:6e:4f:
0b:af:87:c9:4f:47:c0:9d:9f:a3:69:36:bd:dd:9f:22:96:7b:
69:89:d0:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 22:19:17 2025 by rpki-client