Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS208913.roa
File: AS208913.roa (raw, json)
Hash identifier: /XQfxS/10Dk204+WY5qz8CvfAoVvOZY6mWqfMF3KV20=
Subject key identifier: EE:23:2C:E5:5B:77:A0:96:E5:79:78:94:5E:F7:A0:02:3F:B8:03:87
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 4241F7E7B9CB8C5CBB609EE03A9BA96907AD25EF
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS208913.roa
Signing time: Fri 09 May 2025 09:53:35 +0000
ROA not before: Fri 09 May 2025 09:48:35 +0000
ROA not after: Fri 08 May 2026 09:53:35 +0000
asID: 208913
IP address blocks: 111.235.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 12:28:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:41:f7:e7:b9:cb:8c:5c:bb:60:9e:e0:3a:9b:a9:69:07:ad:25:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: May 9 09:48:35 2025 GMT
Not After : May 8 09:53:35 2026 GMT
Subject: CN=EE232CE55B77A096E57978945EF7A0023FB80387
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:c6:b9:60:77:b7:47:ee:f4:d3:34:11:ad:73:
ec:85:16:8f:9a:4b:ee:0a:4d:75:90:82:b9:63:14:
54:6b:4c:4f:1d:1f:40:12:cc:2c:75:f4:2b:9b:64:
ad:f3:70:f1:73:fb:00:3d:64:af:04:34:f8:7d:fe:
f6:3c:df:ec:b2:1e:2d:66:c1:66:7c:27:45:fc:a3:
38:2b:00:eb:8d:7b:db:7b:d2:06:9b:26:6f:42:40:
85:73:79:30:18:0d:97:11:d3:a7:b9:9b:b2:df:ce:
7e:fe:21:57:4c:f9:51:79:3e:a2:9a:ff:f5:37:86:
db:fd:ca:fb:ee:8f:d2:3c:f7:41:a3:ed:84:f6:fa:
3a:60:d1:d2:8d:8e:a7:34:c4:78:b2:cf:24:52:e2:
75:f9:84:da:1f:3e:15:94:3a:96:da:51:01:29:85:
45:bc:7f:c2:6b:fd:7b:26:52:4e:71:43:47:e2:19:
7b:57:a7:0d:94:25:97:1e:f7:ae:b1:b6:a0:40:b4:
8e:f7:ae:de:00:42:c7:c4:99:95:f4:6a:d4:1f:fa:
91:82:f4:74:86:29:4a:9e:49:d9:e6:e0:70:12:d5:
3e:1e:04:62:76:4d:93:2b:d2:86:aa:cd:b5:32:72:
a3:b7:6e:91:cd:15:ee:84:f2:bb:b6:9c:9f:18:c3:
cf:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:23:2C:E5:5B:77:A0:96:E5:79:78:94:5E:F7:A0:02:3F:B8:03:87
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS208913.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
111.235.150.0/24
Signature Algorithm: sha256WithRSAEncryption
16:e2:ed:8f:51:8b:39:6f:07:cd:e9:1c:15:c9:0d:9d:03:de:
03:3d:30:6e:95:29:07:4f:1f:e5:5e:83:fc:9e:fb:6d:13:eb:
22:7b:f8:07:8e:70:6a:9d:e8:4a:a7:eb:92:48:cc:74:c8:1e:
f2:71:65:2a:56:4f:e8:03:f6:65:9c:43:91:d1:3a:82:92:14:
eb:8d:be:fc:5b:00:88:cb:83:a7:6a:57:eb:cb:99:e9:00:93:
3c:f4:9b:c4:10:16:51:c8:a8:58:be:31:46:da:af:86:72:30:
74:b4:e2:38:ed:e9:ee:16:da:ba:e6:00:d3:db:b0:55:b4:20:
cd:0b:1c:55:c9:e0:d6:db:d8:eb:6d:48:c8:00:75:83:47:01:
e4:46:fe:1e:c2:9c:0f:57:2b:41:11:ad:4c:1a:a0:65:45:86:
11:68:00:8e:6d:74:16:50:1c:18:e4:91:88:cc:e0:3c:3c:47:
88:d6:1d:6e:a7:04:11:db:c1:d5:9e:69:62:03:87:50:dd:a0:
55:f8:3d:e0:04:20:ac:97:3e:98:2e:b4:3f:08:12:2b:63:72:
da:01:67:56:0f:b3:36:5d:f7:6c:b4:28:06:72:d8:bd:81:03:
83:d9:c5:f0:19:1f:b5:ab:cc:8a:b1:2a:27:7b:41:2d:5c:ad:
b6:2f:46:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 05:29:58 2025 by rpki-client