Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS133448.roa
File: AS133448.roa (raw, json)
Hash identifier: 4X3ywlLy2Yy1HQGHel3okFXyPml0JrztjadQkmnDX+I=
Subject key identifier: 82:50:EC:7B:E6:CB:B4:FC:9A:59:E2:BE:49:B3:6C:D9:2B:79:E6:21
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 6C940553774BE9546EF5C21EC557C2CDA6D3D53E
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS133448.roa
Signing time: Wed 11 Jun 2025 17:52:10 +0000
ROA not before: Wed 11 Jun 2025 17:47:10 +0000
ROA not after: Wed 10 Jun 2026 17:52:10 +0000
asID: 133448
IP address blocks: 5.253.85.0/24 maxlen: 24
103.68.110.0/24 maxlen: 24
103.214.69.0/24 maxlen: 24
185.90.62.0/24 maxlen: 24
185.99.134.0/24 maxlen: 24
185.121.162.0/24 maxlen: 24
185.121.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:94:05:53:77:4b:e9:54:6e:f5:c2:1e:c5:57:c2:cd:a6:d3:d5:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Jun 11 17:47:10 2025 GMT
Not After : Jun 10 17:52:10 2026 GMT
Subject: CN=8250EC7BE6CBB4FC9A59E2BE49B36CD92B79E621
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:2a:30:fb:18:b8:76:b8:7b:b2:3d:1c:bd:a4:
bc:f4:dc:97:ee:fe:c7:8e:ba:1b:c5:54:d5:6e:ba:
b5:2f:93:f0:6f:7c:49:02:5c:d9:94:86:f2:cb:48:
23:b6:ae:ee:3a:97:dc:c4:68:d6:99:0c:cb:41:74:
72:36:ce:e1:89:21:9d:bd:a9:64:af:bb:4b:8d:2d:
1f:bd:d2:fd:4d:91:38:b3:57:bc:39:59:b7:b7:02:
5d:5d:d8:d5:3a:9c:2c:2b:90:24:a1:8d:5d:4b:ab:
8b:62:a5:cd:77:9c:dc:ab:f5:59:b3:aa:5e:62:83:
9b:43:74:14:65:a4:2a:2d:a9:ee:0d:57:83:a6:4b:
be:95:37:3f:23:bf:b5:21:10:ee:f4:69:27:55:be:
38:e7:7b:50:bb:d7:b7:2e:58:8d:9f:53:c3:c0:bf:
e5:95:1f:70:72:8b:53:32:1b:ee:9a:ed:1f:45:98:
38:ab:2b:07:8b:b1:f3:70:84:ff:b5:53:e5:03:33:
c2:32:ea:f9:a1:7e:ed:21:5d:07:52:f5:16:17:ae:
21:92:f1:c2:11:79:5a:f6:24:52:56:7d:ba:68:e2:
6e:e9:0b:7b:67:02:c3:e7:57:62:6c:8b:6a:2d:b8:
38:bf:d2:fc:d8:66:4e:f7:8d:52:12:b4:80:dc:64:
c8:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:50:EC:7B:E6:CB:B4:FC:9A:59:E2:BE:49:B3:6C:D9:2B:79:E6:21
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS133448.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.85.0/24
103.68.110.0/24
103.214.69.0/24
185.90.62.0/24
185.99.134.0/24
185.121.162.0/23
Signature Algorithm: sha256WithRSAEncryption
49:98:24:7c:90:ce:38:44:d1:ac:4b:6c:01:04:5a:85:4a:29:
e9:42:a6:c4:9d:26:2a:f7:a7:f6:eb:64:e4:2d:03:25:9e:d2:
99:22:d7:0d:bf:ee:86:fb:81:e2:9f:88:70:a3:07:d4:c1:96:
02:e6:ea:42:c4:42:ca:cc:de:95:76:71:fe:6d:c6:f3:94:e3:
06:4d:07:f7:9e:b4:9f:28:a9:de:5b:e9:40:6c:be:06:66:e9:
f8:52:26:d6:61:54:7e:f9:59:12:c3:9e:f2:d3:02:58:70:0a:
ec:19:2e:b0:bc:52:c7:8b:18:95:e0:08:d4:0f:4a:25:0d:0b:
c4:98:28:24:d5:fe:4c:bb:2a:f3:76:2d:c6:c0:5b:f1:71:70:
e3:c3:76:8d:cb:36:5c:5d:b2:6e:85:fe:30:94:61:e5:ee:7a:
5b:a6:33:8e:67:fd:30:b3:08:4c:12:93:e9:93:85:aa:c7:dd:
05:86:f9:9a:dd:30:67:a0:80:6e:5f:1b:40:fd:d4:26:93:75:
6c:f0:8e:6f:48:5d:ab:5c:85:5f:9f:f0:0b:6f:58:75:20:29:
33:37:d2:47:9b:c9:51:0b:8e:42:04:f9:f0:19:4a:2d:bd:b4:
64:65:f4:c6:68:80:87:72:d4:36:60:45:a2:ab:ba:d7:69:c5:
66:57:15:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 19:27:47 2025 by rpki-client