Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS60781.roa
File: AS60781.roa (raw, json)
Hash identifier: TPq6vEN+enUQxtDhDhZ177sY42Qhizuv7FcSLJrsYyo=
Subject key identifier: 1C:FF:EB:E3:30:24:5E:13:67:9F:87:2B:CC:66:2D:00:29:79:9F:11
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 15F1A55C0B952228AEE1E8F2B56BA237D4281651
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS60781.roa
Signing time: Thu 03 Jul 2025 15:51:21 +0000
ROA not before: Thu 03 Jul 2025 15:46:21 +0000
ROA not after: Thu 02 Jul 2026 15:51:21 +0000
asID: 60781
IP address blocks: 160.202.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 17:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:f1:a5:5c:0b:95:22:28:ae:e1:e8:f2:b5:6b:a2:37:d4:28:16:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Jul 3 15:46:21 2025 GMT
Not After : Jul 2 15:51:21 2026 GMT
Subject: CN=1CFFEBE330245E13679F872BCC662D0029799F11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:26:a7:70:d8:73:df:39:8c:c4:c2:74:09:13:
03:af:2d:ea:65:ca:28:d6:ea:f2:fd:2a:c6:4e:39:
62:8d:37:ac:3d:4f:4d:3e:8e:6a:b7:07:4a:d2:10:
8a:e3:e0:d2:3a:c6:aa:94:9a:f3:3d:77:55:7e:e2:
87:5c:19:4b:8d:ed:b4:c8:52:d6:6a:c5:40:d9:33:
80:b9:18:f0:f7:42:5c:91:2c:25:d2:a3:0d:45:06:
ea:f4:fb:82:45:56:1c:14:b9:53:a1:cb:ca:ec:3f:
e3:a0:6d:1e:70:4d:c5:06:81:33:c9:86:b9:f1:85:
ea:6f:9c:ca:13:d4:a7:1f:b8:c6:81:48:d7:37:43:
f8:a1:43:0f:f7:95:2f:9d:5d:8c:72:00:e9:21:0c:
ef:07:ce:86:08:46:7b:14:99:11:b8:41:4f:03:ec:
7e:69:8d:e6:cc:9d:91:cc:fc:46:b3:44:08:ac:b6:
05:dc:d9:2f:0b:7a:7a:3c:23:59:69:95:f0:cc:f3:
7d:ef:eb:8d:ed:b8:5f:36:03:62:3e:4a:1d:4c:56:
ec:8d:c7:87:a1:67:f1:24:54:d4:25:95:7d:59:cb:
71:9f:0a:55:7b:68:8d:38:35:c4:78:83:ff:3e:df:
79:32:09:10:f8:dc:dd:9d:9c:b0:6d:7f:57:17:5b:
4d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:FF:EB:E3:30:24:5E:13:67:9F:87:2B:CC:66:2D:00:29:79:9F:11
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS60781.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.202.133.0/24
Signature Algorithm: sha256WithRSAEncryption
03:c1:5d:87:a2:94:8b:bc:b0:9a:8b:92:35:13:12:2c:57:2f:
c6:47:8c:d8:c2:32:ff:55:68:a6:4b:4e:7d:4b:13:59:be:14:
45:f4:e0:09:02:b8:2c:bf:d5:70:6c:93:51:c6:40:85:4f:28:
c4:c3:99:f2:f9:42:02:ab:18:b6:50:77:8a:f0:a2:da:1b:1c:
7e:49:b9:8a:4c:99:35:68:36:f1:01:8a:29:87:a6:d3:56:a1:
34:50:a4:29:3f:7f:5e:14:b8:b2:d4:70:a5:af:a7:4a:4c:06:
ae:6d:08:44:1b:ce:28:8f:28:c6:23:01:cc:94:80:3b:06:b3:
ea:6a:4b:5b:ed:57:85:f1:76:e6:2c:45:98:d5:9c:ba:a8:8f:
ff:d0:b1:68:79:dd:60:2d:d1:81:3a:49:2c:1b:d6:a5:a1:9f:
aa:df:b6:bb:b7:28:48:e9:a6:0d:02:70:ba:03:18:2c:97:c4:
72:1b:97:3a:e0:24:60:42:e9:fc:a6:23:50:56:a5:b8:de:1b:
79:66:b4:b8:12:7a:b8:94:f5:96:f8:65:54:f4:89:4e:1c:6a:
f7:6d:da:42:01:85:a0:73:6e:70:0c:6c:52:b3:30:50:20:b9:
10:ec:a9:26:3e:7d:3d:20:7b:a3:b0:a9:b6:4a:15:db:9e:45:
8b:c0:7e:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 22:06:54 2025 by rpki-client