Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS61138.roa
File: AS61138.roa (raw, json)
Hash identifier: 21BIJmXgk7EI6P+W2cTcQPJmZLF/ZskK5UTLEPoOdiA=
Subject key identifier: 3F:88:9C:6F:7A:78:94:2A:F9:50:F4:14:B6:57:6E:8A:D1:8A:97:C8
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 1C468B7013310195A3BEE8475CAD99957F3BC7CE
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS61138.roa
Signing time: Tue 29 Apr 2025 08:45:28 +0000
ROA not before: Tue 29 Apr 2025 08:40:28 +0000
ROA not after: Tue 28 Apr 2026 08:45:28 +0000
asID: 61138
IP address blocks: 5.253.84.0/22 maxlen: 24
5.253.86.0/24 maxlen: 24
27.0.232.0/22 maxlen: 24
81.31.208.0/21 maxlen: 24
83.142.30.0/23 maxlen: 24
85.90.220.0/23 maxlen: 24
89.39.210.0/23 maxlen: 24
94.24.108.0/23 maxlen: 24
94.26.24.0/23 maxlen: 24
103.204.192.0/22 maxlen: 24
103.214.68.0/22 maxlen: 24
103.230.140.0/22 maxlen: 24
104.167.16.0/23 maxlen: 24
118.91.184.0/22 maxlen: 24
144.48.80.0/22 maxlen: 24
160.202.132.0/22 maxlen: 24
185.90.62.0/23 maxlen: 24
185.99.132.0/22 maxlen: 24
185.121.160.0/22 maxlen: 24
185.121.168.0/22 maxlen: 24
185.121.168.0/24 maxlen: 24
185.121.176.0/22 maxlen: 24
185.147.32.0/22 maxlen: 24
185.195.238.0/23 maxlen: 24
185.214.172.0/22 maxlen: 24
185.236.212.0/22 maxlen: 24
194.58.64.0/23 maxlen: 24
195.184.246.0/23 maxlen: 24
2a06:1280::/32 maxlen: 48
2a06:9f45::/32 maxlen: 48
2a06:9f46::/32 maxlen: 48
2a06:a004::/32 maxlen: 48
2a06:a006::/32 maxlen: 48
2a09:54c1::/32 maxlen: 48
2a0a:6047::/32 maxlen: 48
2a0d:d903::/32 maxlen: 48
2a0d:d906::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 14:07:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:46:8b:70:13:31:01:95:a3:be:e8:47:5c:ad:99:95:7f:3b:c7:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Apr 29 08:40:28 2025 GMT
Not After : Apr 28 08:45:28 2026 GMT
Subject: CN=3F889C6F7A78942AF950F414B6576E8AD18A97C8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:33:bc:e9:95:cc:34:f7:27:4d:44:df:8a:d6:
21:6c:11:45:49:ab:ea:70:fc:52:32:bb:a4:40:d8:
b8:65:d0:11:ca:f3:9f:4e:65:ab:4e:d8:33:d1:a0:
c0:ab:cd:8d:27:28:c1:3b:f8:54:57:fe:01:0b:98:
e3:e5:84:c5:ed:9b:28:f0:14:3e:70:ad:12:34:73:
8c:14:3f:60:c6:36:93:88:ef:22:d4:76:b6:b6:95:
00:b0:6e:bc:b3:c2:a5:e8:3a:e1:52:4f:de:3d:f3:
c3:56:1c:a2:d5:f9:c0:17:5c:3e:4c:ff:36:18:07:
57:1c:75:5f:2d:82:c9:31:6d:a8:52:af:6e:d4:4a:
f7:f9:f9:98:f6:d7:26:9d:54:5e:6d:d4:c2:44:c3:
11:57:a0:b9:bc:a0:97:3b:62:ba:46:05:8d:9b:66:
8a:63:7f:7b:d8:20:73:5c:d4:94:b7:b7:54:e1:c6:
30:b6:37:a1:3b:82:76:f0:eb:25:e0:f1:a0:ca:39:
26:63:dd:7d:d6:e2:37:ba:2b:c7:5c:89:36:55:92:
8f:16:f4:21:d7:c9:11:09:74:49:c7:94:ba:1b:d5:
23:19:07:4b:ff:33:b8:f2:51:94:b3:5f:08:a2:5b:
5f:32:60:90:7e:c2:89:23:2a:63:62:d8:48:c0:15:
54:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:88:9C:6F:7A:78:94:2A:F9:50:F4:14:B6:57:6E:8A:D1:8A:97:C8
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS61138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.84.0/22
27.0.232.0/22
81.31.208.0/21
83.142.30.0/23
85.90.220.0/23
89.39.210.0/23
94.24.108.0/23
94.26.24.0/23
103.204.192.0/22
103.214.68.0/22
103.230.140.0/22
104.167.16.0/23
118.91.184.0/22
144.48.80.0/22
160.202.132.0/22
185.90.62.0/23
185.99.132.0/22
185.121.160.0/22
185.121.168.0/22
185.121.176.0/22
185.147.32.0/22
185.195.238.0/23
185.214.172.0/22
185.236.212.0/22
194.58.64.0/23
195.184.246.0/23
IPv6:
2a06:1280::/32
2a06:9f45::-2a06:9f46:ffff:ffff:ffff:ffff:ffff:ffff
2a06:a004::/32
2a06:a006::/32
2a09:54c1::/32
2a0a:6047::/32
2a0d:d903::/32
2a0d:d906::/32
Signature Algorithm: sha256WithRSAEncryption
9d:36:76:97:32:81:29:28:d2:07:be:cf:3d:a0:c3:a8:8e:a9:
ed:b7:f6:5e:2a:3c:44:1e:81:05:af:22:53:17:0a:84:e1:41:
67:39:31:36:51:ac:0e:d1:a6:63:9d:ea:44:e4:85:28:1f:79:
10:1c:ce:9f:17:89:96:41:30:4f:cb:83:fe:fc:d0:9e:cb:65:
31:e9:ce:d2:37:10:83:17:e5:7d:88:45:bb:8d:b5:16:d2:4f:
14:6d:7a:5f:dd:14:ca:81:6b:fb:9b:d6:aa:f8:d5:22:43:ff:
82:ba:e2:0d:01:c1:a1:63:dd:48:d5:37:29:27:58:d3:b7:e4:
04:82:13:70:80:bd:11:a9:b7:41:08:49:8b:5d:17:a3:c0:73:
74:e4:25:4a:5a:de:cb:44:00:34:67:ed:5a:57:09:c0:64:f8:
82:57:c9:23:83:19:a6:a7:2b:97:7f:41:b4:c6:49:2f:c5:4e:
08:b7:79:eb:a1:4e:11:76:9f:1f:87:d1:fc:a2:0b:ec:b8:8f:
1e:64:01:9b:0c:68:ee:ba:2b:7f:77:41:34:aa:dc:d5:00:3e:
f5:fe:3b:93:b3:bf:f3:22:06:1f:0f:00:0a:66:7e:71:2a:01:
3a:14:64:0b:90:20:91:1d:57:89:e9:0b:8b:be:9d:9d:84:bf:
6f:d7:79:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 01:55:15 2025 by rpki-client