Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS151817.roa
File: AS151817.roa (raw, json)
Hash identifier: q+FEW40MwpNLB2NIgW5+crG/aoHoM4vcX23TeCsc6wY=
Subject key identifier: FD:28:59:7E:C6:1A:D1:D1:14:24:D4:72:96:07:7C:B2:EE:21:2A:15
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 10DF379BAACC22852CCD78346D52741EA2952A1F
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS151817.roa
Signing time: Wed 11 Jun 2025 17:52:09 +0000
ROA not before: Wed 11 Jun 2025 17:47:09 +0000
ROA not after: Wed 10 Jun 2026 17:52:09 +0000
asID: 151817
IP address blocks: 103.68.108.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 20:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:df:37:9b:aa:cc:22:85:2c:cd:78:34:6d:52:74:1e:a2:95:2a:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Jun 11 17:47:09 2025 GMT
Not After : Jun 10 17:52:09 2026 GMT
Subject: CN=FD28597EC61AD1D11424D47296077CB2EE212A15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:e5:f4:f3:48:86:18:b2:06:0c:04:ea:55:bc:
a0:d8:19:05:13:e1:c9:d6:4d:4c:6e:e1:03:95:5b:
96:8c:ba:f4:9e:92:2d:f0:ae:6d:01:54:0d:1c:ec:
5d:d4:c7:5d:d1:e9:7c:b7:c4:f1:d3:52:88:41:88:
41:c6:9b:c3:db:c0:c6:fd:05:71:c4:d0:47:a2:13:
22:80:7d:b1:82:0a:d7:0f:3e:74:d1:47:b5:54:cf:
64:f6:d7:af:b8:63:93:ac:35:88:7e:30:dd:69:4e:
b2:13:3a:06:a0:4f:ad:d2:85:02:1b:11:ca:3a:4b:
ac:bc:04:69:50:41:e5:96:4b:85:66:b9:45:94:60:
39:ee:a6:42:1a:a0:66:ac:57:84:e7:35:95:bc:20:
5d:58:f7:b1:01:82:91:77:5b:b7:09:06:7a:3a:22:
e5:e7:91:2a:ca:41:ac:95:9d:89:7a:08:0d:d4:18:
05:e0:87:e4:ac:a4:a2:ae:3c:52:f7:bb:7d:15:57:
6e:3b:6f:fc:4f:c9:6b:dd:e8:63:87:f9:02:1f:29:
0c:fb:2e:a6:75:23:04:11:73:6e:07:17:c1:a2:8f:
83:aa:9e:5d:a0:7b:ef:de:a0:fe:54:ba:c6:ce:f9:
26:33:7c:a9:99:7e:95:84:7b:30:26:61:e3:cb:59:
dc:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:28:59:7E:C6:1A:D1:D1:14:24:D4:72:96:07:7C:B2:EE:21:2A:15
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS151817.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.68.108.0/22
Signature Algorithm: sha256WithRSAEncryption
c0:f2:60:bc:9f:89:22:d7:9b:bd:7f:7e:34:5a:ed:be:f5:05:
33:d7:66:4d:64:6a:c1:29:88:eb:e6:e5:ff:62:6f:42:81:f0:
1f:e4:07:8f:1b:f1:0a:ae:9f:08:a3:e2:9e:e2:a3:ab:90:62:
24:b1:07:21:6f:2c:1f:c2:88:af:12:39:a1:df:84:fb:3d:4f:
ea:d4:73:c0:d0:30:4a:66:7e:b8:54:76:04:1e:b5:28:a8:7c:
3e:74:07:d3:2d:5b:e4:fe:2e:12:7c:c1:de:96:50:c4:ab:0e:
a8:82:02:fe:05:75:85:36:b7:8b:4b:23:75:50:31:7f:b9:20:
88:0b:f5:b0:f3:9f:ee:e9:2f:37:15:9c:09:3f:f5:0f:5e:5b:
49:c4:a9:4f:46:92:2e:66:87:bb:1b:54:3f:91:39:ec:10:59:
35:22:a9:45:3f:9f:54:f1:a5:7b:cb:95:03:6c:d5:c8:f6:da:
29:e1:1b:94:c9:ef:1d:0b:58:41:7f:6a:14:31:ba:02:d5:3b:
4e:b6:cb:df:34:7a:0f:27:f4:ab:c9:91:4e:d9:7e:ec:9f:ba:
cd:0e:69:73:77:96:ba:97:68:c8:59:8f:00:e8:79:9f:a7:ad:
60:fc:76:d1:0f:b2:c6:51:91:8b:ca:14:e8:6f:30:f8:9e:aa:
56:c5:4a:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 13:31:06 2025 by rpki-client