Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS214150.roa
File: AS214150.roa (raw, json)
Hash identifier: oiRi7The3ki6eRDaU8G7eM4Q3c/O0S3QbYS54LZmIqs=
Subject key identifier: 42:B8:FF:5B:AC:F0:49:51:78:78:7F:F2:B3:AD:B1:E3:EF:D2:B8:BF
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 7B4D0FD1B97A022F4615CD01ABC8459FE8FB508B
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS214150.roa
Signing time: Thu 03 Jul 2025 15:51:50 +0000
ROA not before: Thu 03 Jul 2025 15:46:50 +0000
ROA not after: Thu 02 Jul 2026 15:51:50 +0000
asID: 214150
IP address blocks: 103.137.193.0/24 maxlen: 24
103.204.194.0/24 maxlen: 24
202.50.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 17:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:4d:0f:d1:b9:7a:02:2f:46:15:cd:01:ab:c8:45:9f:e8:fb:50:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Jul 3 15:46:50 2025 GMT
Not After : Jul 2 15:51:50 2026 GMT
Subject: CN=42B8FF5BACF0495178787FF2B3ADB1E3EFD2B8BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:53:28:16:99:93:0b:1e:ed:39:bf:81:91:87:
87:8f:c9:6c:6d:de:0b:ea:f4:8c:96:ed:42:15:16:
68:f4:d6:ec:fc:ff:67:62:fb:fb:d1:f2:1c:89:50:
86:99:e7:29:69:e9:2e:40:4b:11:e5:fa:e6:a6:68:
bb:89:35:4b:7b:f2:a1:1e:f2:93:3e:08:1f:02:c3:
5a:a4:21:6d:52:a7:70:9d:7e:79:4e:68:5e:dc:d9:
8a:dc:8e:10:bb:f4:a1:97:b4:c9:23:db:da:26:7e:
cb:5f:fe:01:27:e3:52:44:d9:ea:fa:91:39:64:8d:
57:bb:5e:78:25:07:e9:15:8e:21:0b:0b:5a:d5:03:
f5:04:60:8f:68:d4:a4:39:4d:fd:dc:77:05:ad:45:
c7:9d:47:6f:4a:7b:21:02:8e:37:31:cb:57:e3:dd:
9c:3f:8d:0b:63:56:e4:ea:63:c7:cc:9c:11:35:8d:
2d:97:d6:fd:fd:e0:16:ea:9a:58:e0:3f:04:23:d6:
51:61:b6:b6:87:83:1c:b0:78:1e:74:8f:97:4d:eb:
69:1a:31:ef:bf:90:74:4d:62:86:65:74:5f:9c:af:
2f:e6:d6:a1:86:6d:ff:e7:4c:3b:52:55:66:38:ab:
35:63:29:a8:2e:ac:73:2a:93:0e:8d:cc:d4:8f:f1:
fa:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:B8:FF:5B:AC:F0:49:51:78:78:7F:F2:B3:AD:B1:E3:EF:D2:B8:BF
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS214150.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.137.193.0/24
103.204.194.0/24
202.50.53.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:97:8e:83:18:3f:43:b8:bf:2f:46:6a:5f:b8:37:2c:87:b9:
27:ae:c4:4a:27:6e:3e:07:f2:80:75:e6:2b:41:18:78:2b:2b:
7b:68:4a:0c:1f:93:7c:9b:a3:5b:e0:e5:e9:e5:07:3b:52:f2:
38:8c:07:06:25:a0:43:05:84:e6:f0:5f:f7:9d:21:4e:e9:ed:
e9:fb:76:5c:81:53:ab:58:47:91:6b:22:ca:ae:2e:4f:1f:5c:
83:36:f0:2b:ec:db:7d:e5:7b:59:b2:fd:ff:c8:8f:a0:1e:27:
b4:e4:f2:3d:65:84:91:c8:16:a4:12:35:2c:9e:aa:13:a5:ae:
d7:a7:6e:e3:26:8f:ce:d0:45:f8:33:1c:41:71:39:c5:96:54:
d5:b6:88:a4:4f:de:62:03:ce:8c:1f:29:1b:db:0e:14:31:d5:
1b:55:4b:8b:cd:f4:6e:15:db:3d:dc:e7:36:cc:e4:78:1a:ae:
85:89:b6:e3:78:41:79:b2:5e:54:ae:df:fd:dc:ff:11:7b:33:
09:d2:97:11:83:09:50:b9:64:2c:ee:0c:27:90:35:87:11:15:
29:95:e0:95:e9:f1:50:f5:14:e8:8f:da:06:a1:14:8b:d8:8d:
42:89:85:74:a2:96:c4:e5:72:16:93:1d:b4:3d:f7:17:bb:95:
a7:12:b3:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 22:07:35 2025 by rpki-client