Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS207778.roa
File: AS207778.roa (raw, json)
Hash identifier: RN3ogADlkJ+aopx0/u0zbEjHDRu+9JvQV6Cfwxg8jrw=
Subject key identifier: C3:7A:47:80:05:FD:A5:88:18:39:97:65:32:C2:CB:70:0B:00:CC:20
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 0CD36AF6826607DE3702F707D58DBBEAA4DD703D
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS207778.roa
Signing time: Thu 03 Jul 2025 15:51:32 +0000
ROA not before: Thu 03 Jul 2025 15:46:32 +0000
ROA not after: Thu 02 Jul 2026 15:51:32 +0000
asID: 207778
IP address blocks: 103.204.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 17:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:d3:6a:f6:82:66:07:de:37:02:f7:07:d5:8d:bb:ea:a4:dd:70:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Jul 3 15:46:32 2025 GMT
Not After : Jul 2 15:51:32 2026 GMT
Subject: CN=C37A478005FDA5881839976532C2CB700B00CC20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:cd:28:dc:57:98:d4:a5:67:a0:8f:89:5e:40:
d0:8a:83:5e:04:93:39:06:1a:4b:c8:51:c6:02:44:
ea:69:27:2b:e4:91:7d:ed:89:49:7d:a8:20:83:fa:
c5:94:dd:60:55:53:2b:e2:dc:31:17:88:d0:90:a6:
c8:6b:4e:06:7c:29:57:08:84:9b:cd:e2:57:79:28:
38:e0:f8:34:c6:63:7e:25:8c:48:c6:8f:94:dc:2e:
e6:d1:47:2c:f7:fd:3b:e8:89:25:67:99:20:e0:8a:
96:e8:ec:84:a7:b3:ad:45:08:97:de:20:40:60:ce:
20:e5:16:e0:bb:f9:81:41:e9:19:d5:8d:fc:7c:56:
4e:66:6a:22:c3:1b:b6:0d:46:a3:2f:53:01:d6:6b:
00:61:42:22:8a:75:18:21:db:ea:10:12:82:6e:32:
67:8e:90:b4:6b:af:46:ce:bf:76:1a:88:d3:0a:c0:
aa:5b:32:35:e7:af:39:a0:64:dc:ce:a4:4f:06:90:
5e:53:3e:0a:88:0e:5a:3e:bb:35:13:9e:24:5e:aa:
3f:67:1f:60:28:de:d6:50:1a:5c:55:e9:31:77:7f:
72:4c:3f:bb:60:78:71:c0:21:b2:d3:54:39:68:21:
0e:80:75:86:5b:b7:ec:ec:e3:60:a8:d2:6d:97:08:
15:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:7A:47:80:05:FD:A5:88:18:39:97:65:32:C2:CB:70:0B:00:CC:20
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS207778.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.204.192.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:8b:b4:03:ae:09:a5:d6:7b:d0:1d:0a:f1:31:84:4d:65:5b:
ec:85:0a:9e:96:f5:3a:49:2d:15:74:07:6c:cb:d5:69:2c:c4:
ca:ac:41:ad:c3:92:59:31:86:c8:f4:a6:6f:a7:b1:4a:b7:2f:
81:0f:57:e2:26:96:68:82:74:38:65:73:a6:85:2c:4f:f5:d4:
98:45:61:f0:bb:30:06:e2:cc:4c:c1:30:ca:25:f0:bb:0a:17:
9b:88:d3:a2:e1:d9:44:9e:ee:dc:90:25:6e:32:7a:06:f1:1e:
fe:13:f2:7a:8f:fb:96:1e:91:0d:e1:ca:aa:43:71:83:cc:95:
4f:6e:eb:23:df:04:87:19:2b:8e:27:60:a5:21:de:01:d3:6a:
e5:8b:cf:7d:f3:55:2a:ba:4c:c1:52:c8:83:71:64:ea:54:b7:
a8:53:56:20:a3:89:35:03:41:92:06:c5:9f:af:77:ca:5a:c4:
fa:2d:1a:fd:d9:5a:77:32:c1:2b:d2:a9:5f:d4:90:ff:ce:59:
32:65:60:26:e4:b0:7f:78:b6:3c:ee:8c:19:ef:09:3a:0f:7f:
b6:67:e6:5c:64:bc:b2:37:e7:ce:f3:39:e2:b0:52:03:c0:72:
bc:55:42:a4:5c:82:72:5f:3d:49:33:4c:89:60:28:f3:b1:fd:
5a:5c:fe:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 22:18:08 2025 by rpki-client