Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS214809.roa
File: AS214809.roa (raw, json)
Hash identifier: k+3rr/T8DfcIBQ6wKlpTJnXFiO7SvHeVrQdobqYyxTo=
Subject key identifier: 18:8C:4D:B4:8A:9A:F3:10:32:74:EA:A2:D5:47:AE:9C:FF:37:7D:C2
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 2C33E5082633FA41439DBC2345153C6A7AB4057A
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS214809.roa
Signing time: Thu 03 Jul 2025 15:52:43 +0000
ROA not before: Thu 03 Jul 2025 15:47:43 +0000
ROA not after: Thu 02 Jul 2026 15:52:43 +0000
asID: 214809
IP address blocks: 103.139.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 17:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:33:e5:08:26:33:fa:41:43:9d:bc:23:45:15:3c:6a:7a:b4:05:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Jul 3 15:47:43 2025 GMT
Not After : Jul 2 15:52:43 2026 GMT
Subject: CN=188C4DB48A9AF3103274EAA2D547AE9CFF377DC2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c5:2c:0d:27:40:a3:55:e6:f3:e3:86:05:ea:
4f:5f:8f:1d:85:fa:0a:44:7c:0a:37:8f:85:aa:82:
6e:88:f7:d9:ae:dd:2d:f6:4a:d9:e7:63:cf:b8:c3:
ae:7e:82:ea:b0:e0:72:4f:6a:a9:40:11:10:a3:90:
7c:db:98:38:84:db:0e:3c:2e:8f:94:85:64:4c:23:
ce:3e:be:60:bb:40:3f:dd:66:24:f3:17:c3:0d:b7:
60:ce:42:ef:90:45:25:75:1d:0d:63:66:19:b4:a7:
ff:7e:bf:78:ab:af:a0:55:a7:33:09:1f:98:57:f4:
fe:f9:da:1d:11:2e:10:55:6d:5f:dd:4b:d0:f7:8c:
6e:9c:56:3c:8f:83:f5:98:87:7f:7b:91:9f:23:94:
3d:93:45:9a:5c:0e:09:bd:43:1d:31:39:23:c0:04:
2f:48:33:9a:e5:fb:d9:f8:db:cf:c9:be:83:a6:a8:
2f:bb:b6:69:fb:0e:06:cd:2d:72:b2:84:d3:df:15:
df:4a:ba:f4:7b:a5:df:49:64:7a:21:71:8f:c3:30:
ec:13:43:fb:e0:68:c9:3a:12:fd:33:c2:af:5a:09:
91:09:6c:8c:3f:9c:08:09:01:79:1a:ed:f9:04:3a:
5c:e2:45:55:b8:b9:aa:f3:b6:7f:02:b7:ac:88:66:
1e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:8C:4D:B4:8A:9A:F3:10:32:74:EA:A2:D5:47:AE:9C:FF:37:7D:C2
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS214809.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.139.88.0/24
Signature Algorithm: sha256WithRSAEncryption
07:1b:6f:03:0d:76:5b:19:5b:58:0f:67:c7:14:e1:25:0e:2f:
43:eb:c8:75:8b:33:6b:28:c7:b1:8e:70:65:58:48:fd:95:a9:
37:32:7c:db:63:3d:6a:d4:07:f4:f5:bd:20:68:41:f1:30:d3:
d7:17:24:c2:07:bc:44:d5:36:1b:31:00:da:5f:9d:54:38:cb:
70:3a:93:92:c4:72:0a:aa:8d:fd:e8:73:a3:a0:52:e6:ed:3e:
63:b9:c1:83:a2:1b:52:c4:02:29:3e:67:c4:63:27:f8:c3:82:
c9:64:a4:f8:d9:91:e9:1d:37:fa:8b:f0:df:4a:27:24:3d:fd:
7f:43:28:2d:18:15:94:86:54:a0:c0:c9:50:fc:7a:f8:22:8a:
6f:44:bc:65:18:b7:f6:6a:cb:58:b3:4c:6e:7d:3f:fa:a2:6b:
60:53:76:6b:28:6e:89:58:f0:e1:ad:52:1f:ec:c0:64:18:c8:
62:e2:54:ae:3f:74:87:2c:ab:ad:12:20:5d:ae:d0:44:9f:ab:
42:db:06:e4:86:06:81:60:a9:08:77:1c:89:7f:e9:ab:d5:35:
c7:b0:96:29:06:fe:62:b0:5b:b4:64:b5:a8:85:b4:fc:3b:c8:
83:54:b9:a5:c3:8b:3e:10:88:ad:cb:a7:ed:af:2e:2f:81:7d:
17:25:e8:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 22:00:43 2025 by rpki-client