Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS216409.roa
File: AS216409.roa (raw, json)
Hash identifier: n4wln7i02eA/diTUmoEs2S5tGACDfOx/wGD8uFdTk9w=
Subject key identifier: AD:E8:52:38:1D:20:78:AE:97:8A:E6:48:60:A1:23:BA:A1:4B:2B:DA
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 2500FC8A7FCF432DE3EBF335446A7C86E6429248
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS216409.roa
Signing time: Mon 17 Mar 2025 19:40:18 +0000
ROA not before: Mon 17 Mar 2025 19:35:18 +0000
ROA not after: Mon 16 Mar 2026 19:40:18 +0000
asID: 216409
IP address blocks: 94.24.109.0/24 maxlen: 24
2a05:dfc0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 09:24:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:00:fc:8a:7f:cf:43:2d:e3:eb:f3:35:44:6a:7c:86:e6:42:92:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Mar 17 19:35:18 2025 GMT
Not After : Mar 16 19:40:18 2026 GMT
Subject: CN=ADE852381D2078AE978AE64860A123BAA14B2BDA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ba:84:6d:0b:93:b4:2e:bd:6a:17:17:7c:2c:
40:34:90:a4:2f:28:3f:fd:73:bc:18:56:b2:fa:6e:
00:57:66:a0:34:7a:02:dd:a4:8d:ff:fd:98:ce:59:
02:3c:bf:dc:90:e4:23:1f:84:68:26:e9:54:5d:cd:
91:96:4d:f0:26:ca:07:bf:e9:72:80:ae:a8:76:43:
86:a5:68:26:96:db:7a:ec:57:a1:dc:df:d1:e7:78:
a8:d4:c4:2e:b2:f7:b9:7f:4c:05:8b:bd:6d:57:1a:
fc:13:8e:34:15:3f:ba:b4:a8:cc:07:ae:85:bf:5b:
e9:58:c7:c5:87:d0:4b:45:05:3f:f6:5e:e5:78:5c:
ba:7d:75:40:cb:88:59:2d:9e:b3:9f:b3:23:74:4c:
eb:a2:df:7e:0a:7d:66:7a:bb:57:5e:d9:81:f1:d5:
63:b8:23:80:98:b5:2b:ea:9c:fb:b5:7d:2f:76:12:
9a:57:1d:36:82:8a:fd:69:82:33:ca:33:a3:fb:06:
99:92:aa:d8:7c:2f:ef:10:d6:53:f1:6f:4d:38:08:
73:4e:fa:a2:8d:12:e9:db:8e:c1:68:fc:a3:f2:66:
ea:af:8b:0e:86:cb:89:11:41:8a:1d:0a:4d:b6:e4:
ef:25:36:5e:c3:75:c0:e0:86:00:c7:cd:c7:6f:e2:
48:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:E8:52:38:1D:20:78:AE:97:8A:E6:48:60:A1:23:BA:A1:4B:2B:DA
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS216409.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.24.109.0/24
IPv6:
2a05:dfc0::/32
Signature Algorithm: sha256WithRSAEncryption
7e:c9:bf:7d:d4:90:f2:07:08:00:2e:0b:f1:be:13:77:c7:74:
29:18:90:d6:1b:73:1a:4f:03:ee:9a:0b:74:3e:f3:b1:5b:7c:
a6:de:2a:24:ec:d9:89:6f:bb:db:5e:c3:1f:0e:63:13:fa:91:
2e:90:16:32:44:14:d7:c1:4a:fa:55:e4:ee:69:59:71:9e:92:
fa:81:67:98:dc:50:6e:7a:2c:72:0b:21:5d:fa:b9:56:27:e7:
c8:73:3e:15:65:b3:5f:d7:56:06:4d:14:7d:f2:6d:81:59:61:
14:61:64:23:d8:a2:66:bd:51:d7:a3:64:fc:a9:9b:87:2b:0a:
47:25:b3:e7:5d:31:53:53:0c:fe:a1:14:b4:67:69:b2:0d:b1:
79:5e:e8:6b:2e:2e:00:f5:3a:e3:2f:24:82:05:81:67:60:d1:
73:a6:be:d8:aa:81:41:cd:20:2d:7c:b1:10:4a:10:22:16:87:
b7:33:0d:6a:72:f9:23:50:48:55:06:3b:0f:af:58:a6:b1:c1:
18:25:a0:78:1d:51:ca:3a:3e:9f:a0:73:98:c5:cd:09:cf:67:
6e:9e:db:09:86:88:02:69:f5:5d:64:9a:44:7e:37:d2:2d:fa:
2f:f6:1e:32:1d:be:23:9b:4d:61:16:f6:9a:61:a5:43:13:56:
02:83:71:20
-----BEGIN CERTIFICATE-----
MIIE9DCCA9ygAwIBAgIUJQD8in/PQy3j6/M1RGp8huZCkkgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzk5NDM4ZjFiMTc2MmFlZWY4YTM1Y2Y0ZTZjYmFlOTc2
OTliZDAyMDAeFw0yNTAzMTcxOTM1MThaFw0yNjAzMTYxOTQwMThaMDMxMTAvBgNV
BAMTKEFERTg1MjM4MUQyMDc4QUU5NzhBRTY0ODYwQTEyM0JBQTE0QjJCREEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCuoRtC5O0Lr1qFxd8LEA0kKQv
KD/9c7wYVrL6bgBXZqA0egLdpI3//ZjOWQI8v9yQ5CMfhGgm6VRdzZGWTfAmyge/
6XKArqh2Q4alaCaW23rsV6Hc39HneKjUxC6y97l/TAWLvW1XGvwTjjQVP7q0qMwH
roW/W+lYx8WH0EtFBT/2XuV4XLp9dUDLiFktnrOfsyN0TOui334KfWZ6u1de2YHx
1WO4I4CYtSvqnPu1fS92EppXHTaCiv1pgjPKM6P7BpmSqth8L+8Q1lPxb004CHNO
+qKNEunbjsFo/KPyZuqviw6Gy4kRQYodCk225O8lNl7DdcDghgDHzcdv4kgXAgMB
AAGjggH+MIIB+jAdBgNVHQ4EFgQUrehSOB0geK6XiuZIYKEjuqFLK9owHwYDVR0j
BBgwFoAUeZQ48bF2Ku74o1z05suul2mb0CAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi83OTk0MzhGMUIx
NzYyQUVFRjhBMzVDRjRFNkNCQUU5NzY5OUJEMDIwLmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZVpRNDhiRjJLdTc0bzF6MDVzdXVsMm1iMENBLmNlcjBwBggrBgEF
BQcBCwRkMGIwYAYIKwYBBQUHMAuGVHJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv
cmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5ZC8yL0FT
MjE2NDA5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQAXhhtMA0EAgACMAcDBQAqBd/AMA0GCSqGSIb3DQEB
CwUAA4IBAQB+yb991JDyBwgALgvxvhN3x3QpGJDWG3MaTwPumgt0PvOxW3ym3iok
7NmJb7vbXsMfDmMT+pEukBYyRBTXwUr6VeTuaVlxnpL6gWeY3FBueixyCyFd+rlW
J+fIcz4VZbNf11YGTRR98m2BWWEUYWQj2KJmvVHXo2T8qZuHKwpHJbPnXTFTUwz+
oRS0Z2myDbF5XuhrLi4A9TrjLySCBYFnYNFzpr7YqoFBzSAtfLEQShAiFoe3Mw1q
cvkjUEhVBjsPr1imscEYJaB4HVHKOj6foHOYxc0Jz2duntsJhogCafVdZJpEfjfS
Lfov9h4yHb4jm01hFvaaYaVDE1YCg3Eg
-----END CERTIFICATE-----
Generated at Fri Apr 4 17:41:25 2025 by rpki-client