Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS215367.roa
File: AS215367.roa (raw, json)
Hash identifier: +T6zWDAqsW6kzB9mDMFntWjOKE9Ih5Aqi7gSXH/mtKo=
Subject key identifier: 42:CE:BD:1A:4E:7A:6C:32:7F:C1:1F:26:15:D8:49:FC:55:A4:2C:FB
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 2E6BBD9CBF12BF7D6AEB3481AE35E4B8DB3CA8CF
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS215367.roa
Signing time: Thu 03 Jul 2025 15:51:36 +0000
ROA not before: Thu 03 Jul 2025 15:46:36 +0000
ROA not after: Thu 02 Jul 2026 15:51:36 +0000
asID: 215367
IP address blocks: 160.202.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 17:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:6b:bd:9c:bf:12:bf:7d:6a:eb:34:81:ae:35:e4:b8:db:3c:a8:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Jul 3 15:46:36 2025 GMT
Not After : Jul 2 15:51:36 2026 GMT
Subject: CN=42CEBD1A4E7A6C327FC11F2615D849FC55A42CFB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:1c:f0:85:e3:27:e4:23:5b:2d:67:16:aa:93:
c8:de:34:93:b0:e6:cb:72:59:69:c0:c6:35:e6:fb:
ed:18:10:e2:0d:9d:53:e5:ce:f9:e7:e2:a7:ba:2b:
d0:68:58:c4:fa:36:66:af:dc:03:c0:a6:63:4d:22:
9e:07:40:1b:a5:51:49:7c:4e:d7:13:9f:e9:16:78:
85:14:56:78:c9:3c:fb:d6:e7:e1:84:23:a8:87:ba:
dc:37:69:b6:a3:91:5c:08:b8:af:dc:a1:04:30:40:
73:bc:4f:c3:fc:97:24:07:89:d4:48:a1:e1:34:28:
24:3b:05:22:95:9b:15:ec:30:1e:f9:f0:10:19:53:
63:69:71:04:9d:f1:9e:73:47:69:61:63:2d:37:88:
f8:e3:53:e7:b1:0f:3e:86:4d:12:53:e1:b3:5f:20:
c5:67:f8:b1:2f:d1:d6:e8:f3:7c:28:b1:9b:34:57:
39:52:f4:dd:13:3d:9f:9f:03:4f:2b:5e:fc:6c:86:
9e:4f:26:b3:04:76:35:a7:b7:44:9c:c0:a4:a5:26:
86:d1:38:ce:7c:bf:47:e2:2d:ee:83:91:21:90:b0:
03:35:e2:bc:99:a5:e6:e1:84:ac:5e:b6:36:45:56:
d9:b9:85:8d:fa:fe:9b:fa:57:96:d0:b5:51:76:fd:
8a:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:CE:BD:1A:4E:7A:6C:32:7F:C1:1F:26:15:D8:49:FC:55:A4:2C:FB
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS215367.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.202.135.0/24
Signature Algorithm: sha256WithRSAEncryption
99:7e:73:57:bb:73:ce:ca:9d:97:87:b4:eb:26:fc:ed:f5:d5:
22:15:21:72:dc:59:b6:f9:6e:ca:53:10:96:aa:cf:56:ee:07:
f3:24:79:cc:a0:18:32:63:a8:d6:bb:fc:ea:32:b1:50:2d:8b:
42:dc:cd:c6:33:b1:e3:18:c2:7e:64:d6:2c:b8:1c:c5:7f:f9:
89:c6:0b:72:c6:c4:21:24:a1:6f:72:98:8b:11:2a:f6:7c:42:
a3:47:e1:a4:fb:7a:c2:52:86:76:30:51:58:e3:75:4d:4b:ce:
b6:7e:49:db:b7:34:8d:20:e3:7c:69:1e:83:b6:7c:1b:76:bf:
08:16:7f:8d:7e:6d:4b:bf:3d:89:2a:83:9c:45:a0:aa:88:b1:
7e:5c:68:44:37:d5:f1:5b:ec:9c:95:a4:5b:aa:a7:dc:e1:f9:
ff:70:a6:02:7b:cd:c3:38:15:f7:08:c5:f7:66:a6:64:aa:0e:
dc:8a:3a:b0:7a:af:a4:e9:43:c3:63:13:2a:fc:d2:11:fe:4d:
3f:e0:83:6c:44:1f:1e:50:37:0e:a8:f6:6e:1b:6b:d8:db:86:
9e:07:23:b7:0f:6e:9c:9c:a9:7d:18:28:44:00:54:1e:82:cc:
e9:26:ac:a3:97:1a:eb:04:ab:78:76:6e:31:4f:35:81:10:7c:
e0:36:cc:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 22:18:08 2025 by rpki-client