Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS215467.roa
File: AS215467.roa (raw, json)
Hash identifier: psCYkalFoAyd6L3mhnCXy078oEWljaTs9i9r9qkoFj4=
Subject key identifier: 4D:FB:BF:C4:B5:F5:7E:35:11:CD:73:94:69:3D:3F:51:68:42:02:7C
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 3F72F700BBF6ED9D891C8B9917DFE59C1B158F64
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS215467.roa
Signing time: Thu 03 Jul 2025 21:10:45 +0000
ROA not before: Thu 03 Jul 2025 21:05:45 +0000
ROA not after: Thu 02 Jul 2026 21:10:45 +0000
asID: 215467
IP address blocks: 103.141.13.0/24 maxlen: 24
185.195.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 17:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:72:f7:00:bb:f6:ed:9d:89:1c:8b:99:17:df:e5:9c:1b:15:8f:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Jul 3 21:05:45 2025 GMT
Not After : Jul 2 21:10:45 2026 GMT
Subject: CN=4DFBBFC4B5F57E3511CD7394693D3F516842027C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:7b:66:31:0e:68:74:2e:b5:3e:db:6a:09:a1:
67:7d:01:48:d9:b0:eb:c7:ec:81:3d:45:e4:74:1a:
a4:99:b7:f8:28:9b:31:be:01:b9:2a:f8:52:97:fd:
55:e2:f5:ae:49:9a:0c:48:c7:2e:bb:85:1f:35:96:
e0:a0:bf:c6:71:aa:a6:20:0b:85:93:40:62:8e:79:
3a:77:cf:2b:fd:fa:25:ed:22:31:2e:df:02:78:a1:
13:22:5e:23:dd:de:70:d5:6e:19:5a:9c:0a:2a:5f:
c1:08:ff:d7:6f:98:33:fd:99:25:b0:8b:1e:f9:50:
14:44:ad:de:2d:32:a8:96:d2:1a:11:93:05:5f:94:
f9:ae:a8:0a:fe:1c:96:a9:d6:49:54:cc:cd:5b:c9:
a5:bb:68:4b:ee:20:ea:2e:d4:ab:99:f8:5b:dc:ca:
3a:66:1d:bc:e0:aa:a8:9a:b6:5e:26:25:0e:61:a1:
23:ef:5b:b5:ca:7a:1f:3a:ae:33:2f:ff:84:cf:95:
39:a6:37:1f:13:ca:44:38:23:66:1b:66:12:61:a9:
a2:7f:ad:1f:1b:7b:f8:05:1c:93:9d:de:13:a7:12:
8a:9e:95:19:51:93:b8:8d:15:b5:3b:37:ac:83:98:
fb:58:e4:91:14:41:db:df:5f:48:71:79:a9:7e:3b:
e6:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:FB:BF:C4:B5:F5:7E:35:11:CD:73:94:69:3D:3F:51:68:42:02:7C
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS215467.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.141.13.0/24
185.195.236.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:45:6a:d5:14:a7:ca:fa:6b:5a:a4:a5:54:e1:a0:bd:f7:d3:
d8:7e:f5:f8:f4:ea:f4:15:56:b7:89:44:16:e0:fc:d2:e1:e4:
b4:15:14:ce:18:fb:4b:ca:96:63:46:7c:73:12:1a:c7:e1:13:
87:ec:ef:bf:88:05:d5:86:b8:d6:72:7c:4d:53:4c:25:b5:6f:
37:dd:73:27:f2:84:98:4c:d2:ee:08:c9:f8:f0:93:ca:9b:39:
be:fa:18:7f:e2:a5:2b:67:ca:15:f3:1b:da:4e:11:62:8b:1d:
8b:2d:e0:c8:5f:ab:96:d6:08:f3:5d:69:37:88:a1:cf:51:01:
34:52:81:45:47:ee:b8:b4:b9:e7:28:c9:fa:a9:49:76:cb:7d:
0f:fe:60:a8:d1:e4:e7:25:41:5c:fd:f6:36:1a:f9:ca:7f:8c:
21:ab:86:e0:77:71:a0:91:55:7d:92:13:d8:a1:5f:21:82:c5:
db:35:e5:c9:89:8b:9e:25:a5:8d:13:8b:c6:25:83:73:6d:b5:
9e:ae:36:c9:20:cb:dc:54:e1:ec:24:62:3f:80:c1:1e:e0:32:
4b:df:ae:4c:0c:1a:99:5e:b1:1f:b6:69:b0:82:a1:42:b4:89:
11:85:98:97:9c:23:27:a8:bc:30:99:36:89:f6:dd:83:38:17:
a4:ac:8a:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 22:05:02 2025 by rpki-client