Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS136557.roa
File: AS136557.roa (raw, json)
Hash identifier: lqQn483GOoMt8IGigA8aGoIL9A6JtaZeHWOpJeXgXpA=
Subject key identifier: 55:67:0D:88:02:B8:AB:95:6B:CA:DC:97:D5:AC:2C:B8:E1:B4:48:A5
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 0F71C9F05BCE51494636A4B3AE249803548A6024
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS136557.roa
Signing time: Wed 11 Jun 2025 17:52:09 +0000
ROA not before: Wed 11 Jun 2025 17:47:09 +0000
ROA not after: Wed 10 Jun 2026 17:52:09 +0000
asID: 136557
IP address blocks: 103.68.109.0/24 maxlen: 24
206.245.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:71:c9:f0:5b:ce:51:49:46:36:a4:b3:ae:24:98:03:54:8a:60:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Jun 11 17:47:09 2025 GMT
Not After : Jun 10 17:52:09 2026 GMT
Subject: CN=55670D8802B8AB956BCADC97D5AC2CB8E1B448A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:9f:d7:0b:05:97:a1:08:63:66:70:84:bf:2c:
b3:b4:64:52:6e:d7:a1:70:5d:cb:a4:32:68:05:9c:
44:ef:fd:7b:de:09:f9:81:66:a7:0c:02:0e:31:12:
90:da:4d:48:01:ab:01:7c:a1:b7:44:ec:3b:66:7c:
43:82:84:66:cb:86:b8:e9:ad:41:fd:d1:ce:3f:c3:
b3:57:e6:65:90:7b:78:2b:57:4d:5d:3c:ad:04:21:
c0:b0:c5:6d:92:b3:5f:81:b6:ea:66:bf:52:db:87:
1f:65:e1:ce:69:da:90:2d:a6:a1:67:ce:49:31:ce:
d5:e9:2f:9f:ee:97:12:a2:43:eb:82:7a:73:79:f7:
62:73:2b:96:39:9d:38:ff:a2:05:ce:cb:25:2c:11:
be:d3:92:f8:3b:a5:f4:f8:35:e8:92:3a:f7:09:a2:
ae:67:39:41:fd:3b:e4:e0:9c:9c:3f:52:25:af:9e:
bb:99:9a:c0:b1:e6:ec:bc:25:5d:c3:e0:3d:ef:4f:
54:f5:43:eb:ff:b3:12:43:cf:02:e2:df:c5:b5:80:
4a:58:6b:2d:77:25:63:b7:29:37:dc:b8:38:f9:47:
02:08:27:03:01:20:61:89:a8:e6:b7:0b:a8:d6:15:
33:57:ef:e9:35:8c:8b:34:ad:db:b2:45:a4:7e:1f:
15:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:67:0D:88:02:B8:AB:95:6B:CA:DC:97:D5:AC:2C:B8:E1:B4:48:A5
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS136557.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.68.109.0/24
206.245.167.0/24
Signature Algorithm: sha256WithRSAEncryption
16:cd:88:ee:79:e5:e7:fb:da:5a:3c:ed:12:31:b7:53:d1:1b:
52:8a:58:b2:b6:74:a1:a8:61:2a:ab:3c:58:65:91:b1:91:c9:
63:f0:14:76:16:52:c6:be:ae:87:dc:2f:12:e3:31:2a:75:a6:
42:d1:cf:9f:8f:b8:b4:6c:65:a8:ae:e0:cc:cc:45:06:0f:0f:
8a:92:0b:b5:73:cd:a4:30:14:81:c0:fa:c5:ec:d6:da:6e:05:
8f:9f:dd:05:c3:1e:1a:7c:63:ff:7e:0b:e7:1b:f7:13:fd:09:
28:43:f6:a9:6b:3e:c3:39:62:98:3d:f0:2e:00:b8:0e:e5:6a:
dc:08:13:08:0d:59:50:bc:14:9e:56:56:0a:b3:da:58:53:8d:
e5:df:d4:1e:36:d3:b7:e5:52:a3:6a:ae:a5:29:a8:84:87:90:
2b:e4:b4:34:92:d4:4f:d2:ce:f8:cf:b8:99:98:c8:b7:ed:46:
13:21:76:18:a5:29:54:ef:7e:8e:b5:b2:ce:c4:74:b8:50:05:
cd:72:99:f2:a4:c5:48:36:26:37:81:6d:a9:5e:e8:c1:51:b4:
d6:3a:12:0a:ac:97:54:d1:e7:91:e6:f7:3a:68:b8:43:c4:54:
7d:fb:39:2f:f1:23:59:1c:95:df:ba:5d:5d:67:d9:36:45:0d:
ac:b1:2a:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 19:26:55 2025 by rpki-client