Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS211305.roa
File: AS211305.roa (raw, json)
Hash identifier: FeuQDn1d1TeDy9ivUM7J9RZbxEi6PNiQF0zBFgnQXO0=
Subject key identifier: 86:D2:06:D6:F3:45:DB:CD:92:2D:C2:49:FD:A2:0B:CB:C4:68:6E:0E
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 43EA30D6208CFF3D79E7ED0DD46BC88837153676
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS211305.roa
Signing time: Thu 03 Jul 2025 15:52:29 +0000
ROA not before: Thu 03 Jul 2025 15:47:29 +0000
ROA not after: Thu 02 Jul 2026 15:52:29 +0000
asID: 211305
IP address blocks: 103.204.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 17:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:ea:30:d6:20:8c:ff:3d:79:e7:ed:0d:d4:6b:c8:88:37:15:36:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Jul 3 15:47:29 2025 GMT
Not After : Jul 2 15:52:29 2026 GMT
Subject: CN=86D206D6F345DBCD922DC249FDA20BCBC4686E0E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:37:83:cf:61:aa:22:f7:f6:aa:12:59:46:47:
d2:60:cf:24:7c:00:4a:50:c3:8c:00:4a:fe:f3:20:
2d:77:96:94:a8:35:76:da:e6:5b:b4:65:c5:c0:2d:
cd:5d:27:90:fe:26:61:53:0f:c3:79:50:96:55:3a:
62:44:3a:dd:47:01:0f:3e:92:c1:35:41:83:d8:88:
dc:48:af:40:3b:01:51:05:cc:d3:b2:a9:9f:5c:86:
86:85:2c:a1:b6:d5:31:35:11:3f:72:a6:59:db:aa:
da:1e:45:7a:82:00:2c:68:f7:1f:2c:72:67:70:e6:
71:74:38:32:7b:f0:53:3c:42:dc:85:0f:b3:f1:2f:
5c:9f:16:fa:bb:32:da:c8:d5:3e:2c:48:4a:34:36:
ca:99:e9:85:d1:96:3b:87:5e:0d:5b:77:cc:99:01:
a8:2d:96:69:d7:43:da:26:ae:fb:dc:0d:a7:ce:36:
7c:4c:6b:45:81:04:99:92:a5:a2:18:dc:9a:f5:e7:
ec:b4:5a:f3:a4:4d:42:e1:f0:5e:f8:6e:06:ab:d7:
81:d6:29:5b:2a:c2:59:a2:91:d9:78:af:24:5b:40:
84:fc:b3:86:60:6b:00:6a:8e:ea:37:5b:7a:07:93:
75:0d:6e:8d:4c:69:25:45:f1:0d:1c:57:ec:f6:18:
f1:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:D2:06:D6:F3:45:DB:CD:92:2D:C2:49:FD:A2:0B:CB:C4:68:6E:0E
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS211305.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.204.193.0/24
Signature Algorithm: sha256WithRSAEncryption
07:48:5c:51:71:b2:0d:67:ff:12:b5:ae:85:db:65:c7:f1:8a:
58:4e:8c:8a:49:64:93:b5:4e:cc:9a:1c:33:e2:b9:f0:79:cf:
17:ba:d3:29:1b:24:d7:82:2a:06:88:12:61:b6:98:15:0e:5e:
0a:a1:51:4b:67:e8:7f:b4:78:a0:bf:d4:9c:79:5a:17:bf:e4:
58:98:19:00:2b:27:24:03:9f:47:81:04:cc:40:64:3d:90:78:
43:f1:82:d3:d8:c5:41:9a:bf:89:5c:d7:3b:f0:95:71:38:bb:
80:9b:30:a2:51:e1:25:61:8b:7e:83:23:5d:3d:b9:cf:73:49:
54:af:a0:6b:14:b4:32:fa:3a:55:7e:ba:32:fa:c6:f7:15:94:
52:87:7e:b7:68:9f:3c:60:c2:49:7e:cd:bc:8f:54:f6:e7:2a:
65:6f:13:1e:a0:31:23:d5:f4:60:10:ce:2f:1e:ff:c4:17:f0:
67:72:b3:e2:19:53:fd:1b:75:07:0a:fc:41:8e:fe:c4:a8:c2:
34:79:3d:34:0e:de:96:45:00:fc:f2:c1:9e:7b:03:61:e6:1a:
f0:3d:d5:3c:7c:63:fd:5b:6d:d3:da:ab:b5:7f:e0:3f:dc:ae:
f0:b8:d7:6f:11:24:1f:2c:d4:d4:8c:d4:4e:a0:8a:d4:08:d1:
47:d0:b2:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 22:05:02 2025 by rpki-client