Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS211305.roa
File: AS211305.roa (raw, json)
Hash identifier: J3d+UJI7czBlhsbfLX8r5j0kI+CSayDFNscUHGw0EoU=
Subject key identifier: 79:D8:05:45:C2:A8:58:DB:B6:05:10:7C:9E:C4:00:0F:D1:32:37:CB
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 7F34393BE7CA545E7DD3FFAB59BB168EBE56BB02
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS211305.roa
Signing time: Sun 08 Jun 2025 00:22:59 +0000
ROA not before: Sun 08 Jun 2025 00:17:59 +0000
ROA not after: Sun 07 Jun 2026 00:22:59 +0000
asID: 211305
IP address blocks: 103.204.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:34:39:3b:e7:ca:54:5e:7d:d3:ff:ab:59:bb:16:8e:be:56:bb:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Jun 8 00:17:59 2025 GMT
Not After : Jun 7 00:22:59 2026 GMT
Subject: CN=79D80545C2A858DBB605107C9EC4000FD13237CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:38:ac:e4:ba:d1:a5:cb:ff:ff:27:df:95:06:
96:4e:ef:50:fe:0a:c9:a5:14:b5:51:f1:0f:84:79:
83:1a:a6:91:78:a9:1a:52:56:b1:80:a8:43:f7:16:
2d:b9:ce:a9:7c:8c:40:2f:df:15:70:d3:ea:d2:bc:
52:20:ba:e8:e9:ac:2e:09:44:1f:ee:1a:56:0c:f9:
28:c0:8b:8f:0a:c5:94:dd:78:2c:a1:df:0b:a1:94:
cb:bd:a7:e7:b4:da:26:13:32:e0:6c:20:f2:a1:99:
66:1b:6b:08:63:81:54:d5:c1:e0:11:a0:c9:9f:15:
ba:49:60:c5:21:d3:91:8f:49:2d:4b:c1:a9:7c:34:
95:76:39:74:17:cc:87:f3:4e:a7:20:5e:b4:b8:25:
f3:fa:7e:48:61:9e:c6:d8:29:d4:bd:5b:ab:6a:d0:
a0:18:09:c1:22:12:b3:f1:68:8d:05:a0:cd:34:25:
5f:f0:04:7b:f7:ad:84:3d:14:13:e9:59:c7:c5:77:
95:19:6f:89:1a:6e:7f:c1:33:b1:03:0b:e6:34:33:
32:ec:a2:d8:70:ac:ec:4e:87:b1:8c:0e:b3:0e:26:
b7:88:c7:9f:b9:72:94:14:f0:67:72:ae:f8:3d:03:
a2:a1:84:49:51:18:d9:98:a9:9a:96:ce:03:3b:ae:
39:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:D8:05:45:C2:A8:58:DB:B6:05:10:7C:9E:C4:00:0F:D1:32:37:CB
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS211305.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.204.193.0/24
Signature Algorithm: sha256WithRSAEncryption
62:1c:27:9a:cb:86:9b:dc:43:00:93:75:05:82:5b:35:f9:40:
56:e4:a8:9b:4a:06:57:3b:7c:94:a7:7a:80:64:79:31:2e:2e:
29:5b:24:3b:b1:bc:f1:92:97:19:f8:f7:86:b9:de:59:52:be:
86:40:d7:02:7c:5c:4d:57:bc:bf:e4:21:70:fa:fd:0f:db:2c:
32:01:78:6f:79:0d:27:2b:2f:8f:4b:5b:12:7e:9b:9e:37:fc:
e7:99:c5:98:54:0b:86:17:98:0c:7e:4a:43:0f:6a:31:81:dd:
35:d1:e5:72:cc:79:91:95:19:7d:fb:3c:52:a5:cd:4e:77:8e:
6d:be:5a:84:8f:66:2c:97:78:96:07:a0:4d:81:ea:65:48:71:
b2:11:85:1f:d3:05:a6:fd:65:26:6d:16:a3:89:6d:d6:6b:aa:
d0:af:3e:6d:cf:03:63:6b:2d:a7:74:0c:69:54:fc:0d:c3:ee:
8c:6c:15:bc:1d:dd:d5:66:87:5f:56:fc:dc:fa:d9:91:44:47:
7b:48:cd:f1:a6:a1:42:42:28:98:d5:38:1a:aa:45:ec:23:30:
74:b6:63:87:ba:bd:8c:1a:d2:26:40:bb:92:81:2d:8c:48:44:
a5:17:21:47:3d:5f:82:8e:1f:04:5d:83:48:cb:63:42:d9:5d:
69:f7:bc:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 19:26:20 2025 by rpki-client