Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS138995.roa
File: AS138995.roa (raw, json)
Hash identifier: z37ydqeJjFefdQyDXrANi9NmBZFVyd5WgxLSAQ+CoOU=
Subject key identifier: B6:D6:BA:76:D0:93:D7:50:0D:A4:BD:43:EB:EA:5A:D9:82:DB:36:F6
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 296A8771A9ED3A679F4D7EF56D0C5FAC064D923C
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS138995.roa
Signing time: Wed 11 Jun 2025 17:52:10 +0000
ROA not before: Wed 11 Jun 2025 17:47:10 +0000
ROA not after: Wed 10 Jun 2026 17:52:10 +0000
asID: 138995
IP address blocks: 103.68.111.0/24 maxlen: 24
103.214.70.0/24 maxlen: 24
185.121.170.0/24 maxlen: 24
185.121.178.0/24 maxlen: 24
185.121.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:6a:87:71:a9:ed:3a:67:9f:4d:7e:f5:6d:0c:5f:ac:06:4d:92:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Jun 11 17:47:10 2025 GMT
Not After : Jun 10 17:52:10 2026 GMT
Subject: CN=B6D6BA76D093D7500DA4BD43EBEA5AD982DB36F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:bc:ac:29:1c:05:35:c1:f8:f6:1b:d0:95:09:
5d:cb:d1:0b:54:32:fb:1e:b8:d3:c8:91:99:0b:4d:
7f:ed:e0:ea:5e:de:a0:11:53:10:53:3e:05:f9:cf:
07:f3:91:77:8e:f0:1f:a5:4e:f8:92:af:52:7a:dc:
be:73:fc:2c:40:2a:ac:2c:3a:fa:0e:2c:4e:d4:14:
17:a6:97:4e:38:0a:b6:1f:c5:fa:d5:6f:51:78:51:
92:e2:90:d8:09:e2:4d:ed:34:0f:98:7b:49:22:fa:
28:e2:f4:b9:8f:8b:cd:c0:16:3a:fb:b6:85:89:f9:
10:ae:c7:9e:f3:45:1f:2c:8b:fa:a6:d9:e0:d7:02:
1a:86:2a:01:39:96:a0:44:04:93:a9:f0:3b:a2:eb:
28:4b:6d:96:5a:48:07:b7:4b:68:31:2b:6c:71:3a:
e3:79:a0:3e:61:5d:d4:a7:bb:04:3a:f4:1c:86:d5:
76:1a:af:d1:d9:bd:9c:d9:f4:2f:c2:5a:20:b0:4b:
ec:60:75:28:ed:bb:c6:7a:e5:fb:bc:6d:a0:dd:59:
03:a4:cc:78:9e:73:57:af:47:75:65:cd:9d:86:cd:
90:bd:6c:ef:49:6e:ea:bb:da:64:07:a2:5c:72:14:
65:95:e7:49:bb:19:3c:60:d0:46:0a:6b:25:ed:8a:
e1:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:D6:BA:76:D0:93:D7:50:0D:A4:BD:43:EB:EA:5A:D9:82:DB:36:F6
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS138995.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.68.111.0/24
103.214.70.0/24
185.121.170.0/24
185.121.178.0/23
Signature Algorithm: sha256WithRSAEncryption
7e:68:e7:bb:07:3b:43:af:63:a8:58:53:57:d9:3d:6e:17:a8:
d4:98:15:d8:08:90:5e:d2:5b:58:c4:d8:29:8b:09:8b:f5:73:
91:85:66:6f:0e:1e:66:8b:a5:e8:24:91:c0:27:2f:05:85:c1:
e5:f8:aa:e8:4b:43:3e:e8:e7:11:b5:52:22:4c:e9:8e:d7:82:
2f:41:65:ad:c0:5f:4a:8b:48:21:ad:45:91:9d:c2:da:17:8e:
56:d3:32:ce:96:1e:fe:22:15:dc:f6:d8:b8:46:f6:7f:7f:ed:
ca:61:41:66:93:6d:0f:43:53:26:6e:08:4f:34:1b:e6:c9:6d:
bc:62:b0:56:d3:2b:12:6d:1e:bb:07:25:de:a2:0b:68:0e:b6:
f0:6f:7b:0e:87:81:80:c9:60:d0:c2:0a:84:41:bb:e9:85:18:
52:b5:74:99:e6:fa:45:92:17:04:63:18:01:18:d7:b9:9d:19:
d9:43:82:2c:c1:98:81:3b:cb:c6:75:0c:66:ef:e2:cd:a4:51:
7c:56:9f:ca:29:4c:c9:43:e8:53:da:4e:01:05:f5:c2:26:ac:
12:4b:57:e2:56:c1:6b:35:55:75:1a:a5:c8:2f:9d:a4:fb:77:
e8:14:f0:d3:65:7a:ca:33:78:09:61:61:8e:f6:02:2f:96:50:
b6:1f:88:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 19:28:02 2025 by rpki-client