Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS215605.roa
File: AS215605.roa (raw, json)
Hash identifier: 2tKEcoBCz00GrRLYmjCaPAuIdi/zipoeCAnSg0/61wU=
Subject key identifier: 4A:AC:48:57:60:AC:81:61:D7:C9:35:A5:DF:E8:0A:E5:F6:18:58:52
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 100EE0B61CF84FA2CA5494F3749E798DA43FB149
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS215605.roa
Signing time: Thu 03 Jul 2025 15:51:28 +0000
ROA not before: Thu 03 Jul 2025 15:46:28 +0000
ROA not after: Thu 02 Jul 2026 15:51:28 +0000
asID: 215605
IP address blocks: 103.204.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 17:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:0e:e0:b6:1c:f8:4f:a2:ca:54:94:f3:74:9e:79:8d:a4:3f:b1:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Jul 3 15:46:28 2025 GMT
Not After : Jul 2 15:51:28 2026 GMT
Subject: CN=4AAC485760AC8161D7C935A5DFE80AE5F6185852
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:c7:0c:68:40:80:fe:f7:22:cc:d9:2e:60:28:
80:e7:f7:a7:60:54:83:90:35:2d:64:0d:9b:e6:6d:
82:4e:bd:ed:97:0c:4b:9e:47:ab:89:39:b9:83:e3:
aa:e1:6a:75:95:18:db:51:22:ef:b8:e2:4d:03:31:
6f:71:98:42:3e:16:4c:2f:d7:f2:c7:12:34:0f:52:
65:12:4b:2d:58:c3:86:10:d0:dd:fb:a8:47:55:95:
33:b1:69:98:fb:47:77:74:43:08:16:e5:0f:72:1d:
3b:57:cd:16:45:46:1d:77:61:e3:79:ab:08:2a:dd:
87:56:16:04:1a:6e:9f:a9:f4:1e:36:71:25:d4:7d:
9b:d3:ec:c7:5a:4c:3e:3d:a1:6f:1f:e7:ef:b6:73:
a7:d9:a9:a5:66:93:50:d1:81:b6:99:58:87:2e:1c:
a8:60:d2:31:78:74:3f:3d:ed:d4:97:c5:9d:42:83:
e5:6c:23:2d:a7:50:b6:cf:e6:95:95:19:7e:94:32:
9e:e5:c6:21:a6:f5:2f:1a:d5:d9:6f:1b:6f:3c:26:
46:91:76:8b:ab:3e:08:09:2a:a6:f5:2c:79:d3:ea:
55:82:6c:c7:0b:5b:61:f9:e5:89:09:36:cb:c2:05:
fd:8e:ad:19:d6:8c:6c:4b:8b:23:72:1a:18:ed:1c:
3c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:AC:48:57:60:AC:81:61:D7:C9:35:A5:DF:E8:0A:E5:F6:18:58:52
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS215605.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.204.195.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:58:52:d3:dc:09:bd:0c:33:41:72:17:a5:05:62:b3:07:1e:
4e:6f:b5:9d:86:dc:04:b2:c2:61:e6:0f:bb:9e:ca:d7:a8:b3:
d6:f0:e0:6d:f0:90:f7:5d:41:a5:89:fe:37:bd:40:9f:62:92:
9e:2b:5a:00:85:84:65:c2:95:8d:3c:2d:ea:3e:46:bd:77:66:
f6:0b:f3:56:d5:8d:4d:3d:be:7f:0c:88:bb:f5:51:d8:c2:b9:
72:06:d0:96:44:62:ad:51:39:d3:f7:32:bb:c2:35:08:83:06:
7e:3b:76:f1:8d:c3:3f:1a:4a:c5:f5:ba:d8:32:52:db:12:d6:
69:b4:c4:69:71:9c:39:02:8c:a6:b2:9e:5f:b2:a5:12:75:d4:
2f:ea:2e:b2:2a:2b:43:05:40:04:91:cc:4c:8f:dc:dd:06:d0:
19:f0:f6:63:18:6c:d3:2b:b0:21:40:3b:6e:7a:2d:3f:47:6b:
30:bc:07:fb:2b:bb:c1:95:4e:de:be:e7:2e:eb:1d:84:87:d3:
8f:e5:05:9f:89:da:31:4d:a9:94:42:df:01:38:1c:c3:29:24:
6d:2b:cf:37:3f:73:85:1e:d1:f9:aa:b9:f9:f8:3a:68:0f:79:
da:39:95:9c:96:69:a3:ee:ef:a9:87:9d:56:29:65:61:48:79:
d1:54:cb:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 22:15:14 2025 by rpki-client