Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS400304.roa
File: AS400304.roa (raw, json)
Hash identifier: LrpQopXXDDE0GXmasKTVPnpLm+dEGUjwo9Dwt74jiK8=
Subject key identifier: 85:DF:7D:2C:50:40:5B:53:66:85:D6:34:8B:41:C5:61:B8:2F:5C:92
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 7C04C52923810CB4EE6C703B2D956744EFE0A187
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS400304.roa
Signing time: Thu 03 Jul 2025 15:52:14 +0000
ROA not before: Thu 03 Jul 2025 15:47:14 +0000
ROA not after: Thu 02 Jul 2026 15:52:14 +0000
asID: 400304
IP address blocks: 104.167.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 17:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:04:c5:29:23:81:0c:b4:ee:6c:70:3b:2d:95:67:44:ef:e0:a1:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Jul 3 15:47:14 2025 GMT
Not After : Jul 2 15:52:14 2026 GMT
Subject: CN=85DF7D2C50405B536685D6348B41C561B82F5C92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:eb:ae:7d:53:49:a3:45:56:9c:84:91:2d:84:
16:bf:09:ab:29:62:68:45:da:65:f6:ea:2f:0e:46:
f3:92:d1:ae:db:95:72:18:7f:eb:8c:67:02:bc:70:
e5:74:cc:21:f5:c0:dd:63:2d:82:9a:3a:49:22:28:
77:f0:75:f4:da:ac:14:cf:71:36:30:5a:48:0e:68:
dc:66:0c:3e:3a:c4:62:fc:48:17:53:81:42:60:1c:
79:93:bb:6e:c7:7f:20:ac:62:79:a1:5a:ab:f5:a1:
df:8e:46:55:d9:d7:e3:d1:cf:b3:d1:7c:a9:4e:3e:
b0:63:6f:94:e2:3f:1b:4e:91:96:dc:8b:f1:67:e1:
15:c0:98:f1:d4:b2:19:bb:cb:c9:20:e1:65:88:51:
d9:89:82:50:56:14:1e:b1:c4:1c:39:0f:d3:3c:c6:
d6:52:8a:96:f5:8f:aa:0b:a7:d6:e3:61:12:68:5e:
79:3a:e3:98:04:e8:4c:e7:45:ce:f3:f6:b0:20:1a:
51:da:cf:08:65:73:29:46:b5:7f:be:f9:52:57:65:
86:1a:48:a5:20:e7:63:0c:2f:37:da:dc:f7:1f:0f:
97:01:3b:4c:e0:1c:bd:03:53:13:8c:21:bc:2e:2b:
25:d9:dc:03:24:0f:98:d0:97:6b:8c:74:99:30:53:
b6:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:DF:7D:2C:50:40:5B:53:66:85:D6:34:8B:41:C5:61:B8:2F:5C:92
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS400304.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.167.17.0/24
Signature Algorithm: sha256WithRSAEncryption
05:e8:35:e8:97:9f:65:8b:1d:91:88:c7:a4:ff:06:14:bd:18:
06:b1:f2:d7:06:fd:d9:1e:b2:80:21:7f:8d:8d:39:a6:9a:9b:
6b:f8:16:aa:5d:65:89:b5:22:74:19:2c:ff:58:00:ba:61:22:
e1:a1:2e:06:39:86:94:e7:73:e0:98:d0:0e:e0:4d:8b:0a:f3:
71:ed:67:1c:43:34:c9:ba:a9:86:b2:a8:3d:d0:5f:27:fd:55:
c0:95:23:a8:4f:44:26:44:ee:0b:2a:b0:c8:06:b3:3e:20:a3:
42:4f:cc:b8:50:00:b5:85:5b:ae:e9:c7:12:de:57:0f:fe:34:
73:ad:3e:fe:94:2f:fe:2b:31:31:e0:c8:33:66:6f:d3:b5:30:
40:30:8e:4d:e8:e9:70:dd:72:a7:7d:9b:b0:d6:1d:8e:fa:43:
82:4d:be:ef:7a:d3:1e:5a:31:99:37:db:c2:19:f2:f5:e3:b5:
14:95:b8:5d:ca:87:1d:2f:01:3e:f6:89:f4:6c:01:37:68:25:
72:ec:57:3c:9c:a1:e5:27:d7:ff:7a:2f:81:ce:98:ff:ca:0a:
c9:33:93:84:6c:95:d3:66:3f:91:fb:6f:fd:39:95:6e:6a:c0:
77:a6:c2:7d:4c:f7:1e:31:df:0a:3b:be:ae:a5:00:fd:cc:9e:
df:b7:25:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 22:05:28 2025 by rpki-client