Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS215605.roa
File: AS215605.roa (raw, json)
Hash identifier: 8czysCXgaGvJ9fYNQdHFNE8ZOi7C2PJ4HoyBW3T0mi0=
Subject key identifier: A1:22:C9:21:EF:CE:9F:B8:60:6C:D8:49:BE:AC:48:22:18:14:E1:42
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 0330FD8A88C6075CC54368E71FE7A74186EBD672
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS215605.roa
Signing time: Wed 04 Dec 2024 09:37:45 +0000
ROA not before: Wed 04 Dec 2024 09:32:45 +0000
ROA not after: Wed 03 Dec 2025 09:37:45 +0000
asID: 215605
IP address blocks: 103.204.195.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:30:fd:8a:88:c6:07:5c:c5:43:68:e7:1f:e7:a7:41:86:eb:d6:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Dec 4 09:32:45 2024 GMT
Not After : Dec 3 09:37:45 2025 GMT
Subject: CN=A122C921EFCE9FB8606CD849BEAC48221814E142
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:26:9e:0b:82:6b:74:9d:5c:19:de:ec:40:1c:
bd:4a:68:7e:75:0e:14:c4:ff:7c:28:d9:e6:0c:93:
f2:ed:d4:bc:19:ab:62:e1:ce:8e:fa:20:75:65:a1:
64:ea:26:8b:b8:d6:db:c2:86:72:79:63:3d:b9:76:
c0:61:0d:28:bb:94:ee:d2:99:7f:97:38:6d:7f:a5:
cb:94:41:6b:d0:9c:84:2b:14:eb:6e:ca:74:77:ae:
29:dd:ae:b9:df:c5:35:28:d7:dc:bb:5d:fe:c8:bb:
04:44:80:d3:57:5e:7e:88:77:ea:d3:60:8b:86:6d:
45:2c:96:a0:7a:97:9a:b4:fb:52:8e:91:df:cc:8e:
33:45:b1:38:40:10:0c:f4:31:29:a4:9f:4e:d2:65:
82:3c:4f:ed:1f:d4:18:77:2f:92:ea:ac:eb:de:e4:
cd:c1:b5:b2:77:46:6a:6e:6c:95:c3:12:4e:32:eb:
1a:5a:a6:af:be:35:ec:2d:0f:be:39:9d:c6:5e:62:
c5:fd:2a:73:0d:c0:f6:56:84:1b:b3:2d:fd:72:1c:
36:ba:64:1d:64:5b:72:12:ff:2e:9c:d4:b6:9d:be:
2f:e9:31:4e:76:3a:e9:8c:6e:ed:f4:13:92:7f:81:
f0:81:c3:7c:b7:f3:97:bc:5f:cd:0a:0a:a9:56:65:
f6:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:22:C9:21:EF:CE:9F:B8:60:6C:D8:49:BE:AC:48:22:18:14:E1:42
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS215605.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.204.195.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:e8:2d:c1:96:47:87:ef:25:c0:25:df:ff:20:4a:03:ec:98:
32:d5:b6:55:7b:1b:3a:e3:50:3c:89:4e:31:a9:7c:5a:e7:9b:
6a:d9:11:f4:e5:aa:60:a4:d3:d3:1d:2c:7f:6d:3e:2d:fe:26:
45:a3:ea:13:9c:23:dc:73:59:e2:5e:c4:99:4a:9d:19:55:9f:
f3:02:51:4d:98:f2:08:62:be:7a:a2:34:7b:2e:c4:c7:63:b1:
2c:e9:30:f3:14:d2:65:11:6c:76:62:d4:04:7a:a6:2a:72:f7:
b8:d1:0b:9b:61:3f:3a:d7:7b:19:82:30:6d:5c:02:a7:62:ce:
cf:84:77:f4:4c:56:fb:36:26:16:60:40:30:3b:51:43:4e:7f:
68:b7:0f:71:26:24:02:a9:ae:ab:69:af:d9:6b:4e:17:c8:0e:
90:d1:90:32:ba:c5:c8:3f:52:16:78:33:b8:ee:e6:2c:5c:68:
f1:72:db:9b:0b:bb:bd:61:87:b8:c8:24:39:2b:07:b1:0b:73:
86:59:87:ca:e0:e6:7e:8e:0f:04:8e:be:58:87:b1:fb:85:9a:
a1:66:6f:de:b8:2c:60:19:e5:e8:d2:1c:36:68:8d:e5:4c:7f:
2f:3e:ce:9a:27:b5:84:00:91:ba:31:06:fd:66:29:6b:73:ef:
c2:63:74:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:17:06 2025 by rpki-client