Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS270168.roa
File: AS270168.roa (raw, json)
Hash identifier: j3uXrAj1OX4lhs2OHD1tHgkhsp3rJf7MM0DSkqNtNFo=
Subject key identifier: E3:B8:FF:48:50:7E:18:1F:7D:9F:03:14:45:CA:FC:64:C1:97:B5:7B
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 56D560CB6A3205399C51D4A688581F987BB2173A
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS270168.roa
Signing time: Fri 18 Apr 2025 04:46:09 +0000
ROA not before: Fri 18 Apr 2025 04:41:09 +0000
ROA not after: Fri 17 Apr 2026 04:46:09 +0000
asID: 270168
IP address blocks: 103.137.192.0/24 maxlen: 24
202.50.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 15:42:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:d5:60:cb:6a:32:05:39:9c:51:d4:a6:88:58:1f:98:7b:b2:17:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Apr 18 04:41:09 2025 GMT
Not After : Apr 17 04:46:09 2026 GMT
Subject: CN=E3B8FF48507E181F7D9F031445CAFC64C197B57B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:8e:bc:30:bc:6a:6e:28:d5:ff:08:01:c9:de:
e0:10:74:c5:2e:9a:e8:48:f2:d1:81:dc:dc:4d:a8:
9c:b5:fb:dc:0e:9d:a6:34:bb:d4:96:84:d3:9f:0d:
cf:9f:b5:6e:55:9d:9c:7c:5b:99:2a:1e:57:1f:d4:
7e:d0:f0:ab:7c:7d:e3:6f:77:e4:d5:fa:31:c0:8c:
86:7f:ba:4a:4d:94:f6:e4:87:90:cb:36:db:d6:16:
cc:50:7b:e6:62:d0:de:c2:7c:0c:c9:4a:7b:06:47:
a5:05:21:af:bf:f5:d7:00:83:bf:6c:65:bd:f0:b0:
64:4b:31:22:0d:c9:d8:13:3f:56:8d:55:d7:d0:56:
88:af:6c:eb:d3:fa:7d:0f:9f:72:45:87:38:7e:46:
9a:95:0f:62:4f:d0:dc:b0:70:3d:54:83:78:55:67:
7c:99:11:c1:b3:0b:70:56:8f:27:05:d6:09:ec:30:
a2:9e:b7:dc:e0:aa:c5:16:53:ce:e2:5d:e1:46:20:
8c:72:5a:6a:92:ab:78:df:ec:d4:15:ce:d4:8a:25:
e9:66:36:ea:e5:9b:dc:53:54:78:e1:f3:96:b9:05:
11:01:be:47:a1:f1:6b:40:a4:67:bf:5d:96:45:1f:
e6:d5:c7:5e:00:35:aa:12:32:bc:b1:52:ab:58:c1:
69:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:B8:FF:48:50:7E:18:1F:7D:9F:03:14:45:CA:FC:64:C1:97:B5:7B
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS270168.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.137.192.0/24
202.50.52.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:cc:40:1c:1e:82:ef:9c:80:34:96:de:87:5f:02:15:3c:ae:
64:ba:08:c9:cf:8d:f1:d5:00:a9:a9:f9:32:d3:b5:44:0a:66:
4b:c4:dd:b2:58:8a:e1:61:bd:5d:a1:e3:9e:ff:cd:a3:41:9a:
f0:b7:d4:3f:96:f8:d9:13:f0:b0:c7:dd:4f:48:53:d2:69:2e:
ad:96:bc:67:f5:4c:f6:c7:a8:59:9d:30:2c:b2:f2:99:f7:0b:
98:ee:2c:fc:6d:08:36:3d:06:53:5e:5d:4a:d8:51:32:7b:98:
7c:dd:61:89:ef:9c:5d:b2:01:0f:b6:26:b3:50:a7:a6:7c:bd:
f3:22:f6:1e:86:a5:a1:85:a5:7e:95:39:29:71:be:ba:6a:b4:
59:17:ea:be:9f:b3:57:1b:39:5c:5e:1d:28:d1:dc:b4:39:9d:
e6:cb:6f:e2:7e:e2:4f:31:93:76:5a:4b:45:82:fc:85:e7:a8:
c0:d0:f1:0b:2e:94:16:5d:39:fc:6d:3a:db:29:16:e9:dc:f9:
aa:4d:85:65:79:21:47:5c:61:ce:90:18:68:a5:d0:b7:e6:cd:
15:00:33:4d:6b:2d:fe:6c:4c:8d:71:be:32:75:93:fc:54:59:
09:a4:0b:c4:0e:09:0c:6b:03:da:6f:97:a7:42:7c:ae:63:9d:
93:0f:3e:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 22:24:43 2025 by rpki-client