Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS50917.roa
File: AS50917.roa (raw, json)
Hash identifier: 6bEcu6imprRXUHZ4f9LozA/kUYDATScLeZCt8ebFiaQ=
Subject key identifier: 50:3E:70:63:12:73:3B:13:91:F7:89:81:9D:51:72:CD:36:5D:42:34
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 5B93EB0A9730F41A0E33226A1924C5247C6F264C
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS50917.roa
Signing time: Thu 03 Jul 2025 15:52:33 +0000
ROA not before: Thu 03 Jul 2025 15:47:33 +0000
ROA not after: Thu 02 Jul 2026 15:52:33 +0000
asID: 50917
IP address blocks: 103.141.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 17:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:93:eb:0a:97:30:f4:1a:0e:33:22:6a:19:24:c5:24:7c:6f:26:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Jul 3 15:47:33 2025 GMT
Not After : Jul 2 15:52:33 2026 GMT
Subject: CN=503E706312733B1391F789819D5172CD365D4234
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:2d:57:84:25:7a:4c:4e:18:ab:1b:a2:f6:2e:
49:f4:4f:68:28:ee:cc:fd:d6:f6:a5:99:9a:51:b3:
db:a6:53:a1:a5:92:8b:bf:13:5c:c1:24:aa:69:62:
45:c0:1a:b9:83:ef:cb:7f:f3:7d:f9:3f:7e:91:18:
2d:ca:77:d2:37:49:0c:88:d9:15:94:db:ac:97:6b:
ea:b4:79:7a:db:5a:42:83:a8:7e:77:14:dd:2f:9b:
2f:ed:30:23:53:87:4b:41:77:79:b2:07:ea:f7:b7:
4c:1c:5b:e8:a3:6c:c1:5f:70:66:77:42:dc:cb:a5:
3d:94:86:9d:5d:8b:28:4a:18:d2:88:f3:db:44:6f:
76:e7:8b:fb:cf:54:db:03:6c:ee:36:44:be:63:53:
cb:dc:ab:cb:7e:1f:2a:33:3f:79:b1:09:b2:08:39:
37:77:0d:f6:33:c3:db:8c:47:61:65:c7:b0:94:94:
f4:e3:5a:d8:aa:53:cf:c6:2f:bf:78:3e:88:6d:8f:
8a:fc:ae:2e:92:b3:c5:78:c1:4a:a3:d0:f4:fb:d0:
e0:98:f5:2c:64:a8:3d:af:4c:00:09:cc:15:b8:20:
8c:fd:5e:20:f7:68:09:1c:31:d4:fc:99:f9:6d:2b:
4b:90:4b:48:af:e1:34:0b:6d:1d:17:37:a1:62:c4:
c3:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:3E:70:63:12:73:3B:13:91:F7:89:81:9D:51:72:CD:36:5D:42:34
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS50917.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.141.12.0/24
Signature Algorithm: sha256WithRSAEncryption
32:4a:f9:94:88:20:4c:43:91:5c:83:bc:0b:85:f7:df:06:74:
67:af:34:4d:84:27:7e:4e:1c:cd:be:97:42:45:c7:2e:f7:6f:
77:a2:e8:08:96:00:67:3a:49:3d:fb:20:24:a4:a5:06:6e:4d:
87:2c:82:a1:f1:4a:41:2f:5c:e3:54:22:fc:ef:21:5d:af:ea:
95:a6:91:f3:57:46:0c:f8:e9:e0:29:da:af:00:d0:fb:39:ec:
19:7e:eb:6f:2e:86:d9:45:7d:34:f6:7d:9c:25:e6:02:e2:a5:
67:27:67:1b:3a:b9:d5:cd:d8:a3:88:4a:65:59:2b:33:19:8b:
4b:de:5e:8a:b7:d5:69:4f:ad:7a:7a:cb:32:c3:00:a9:ed:ea:
a2:c6:d0:aa:16:0f:bc:9a:e7:32:f9:8d:72:6c:24:bf:0a:33:
42:8e:d5:ac:e9:b3:84:a4:5c:57:f3:02:87:37:51:b1:af:18:
f5:fa:d4:94:fe:d4:17:e8:e5:e8:b3:ff:9c:2e:fe:ea:da:2b:
d7:48:04:21:0f:c5:44:6b:bd:2f:2b:dd:91:c0:a0:b6:d4:a4:
65:eb:69:6b:fd:52:bd:cc:91:18:51:3d:f9:6d:97:e7:eb:f0:
be:19:e8:cb:61:c7:59:09:41:c3:7d:f6:99:ae:fe:28:84:33:
0d:f6:d9:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 22:06:09 2025 by rpki-client