Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS200676.roa
File: AS200676.roa (raw, json)
Hash identifier: wcGbXDsBaFQ/ZHD4JjTaqVqNChswAucZmR4bo28Vkw8=
Subject key identifier: 20:A0:34:E9:EC:A5:28:00:89:79:DB:73:B3:67:2D:14:B8:D1:F9:77
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 53555E9B4CBFC659680C3CA4D6F3903BA4D64C82
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS200676.roa
Signing time: Thu 03 Jul 2025 15:51:39 +0000
ROA not before: Thu 03 Jul 2025 15:46:39 +0000
ROA not after: Thu 02 Jul 2026 15:51:39 +0000
asID: 200676
IP address blocks: 94.24.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 17:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:55:5e:9b:4c:bf:c6:59:68:0c:3c:a4:d6:f3:90:3b:a4:d6:4c:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Jul 3 15:46:39 2025 GMT
Not After : Jul 2 15:51:39 2026 GMT
Subject: CN=20A034E9ECA528008979DB73B3672D14B8D1F977
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:4e:80:f5:b1:6a:c8:f7:1c:90:f9:a7:58:79:
27:19:29:4f:ed:a8:37:10:84:c4:2a:d8:f8:fc:62:
2b:f2:0d:d6:da:d0:a9:7a:be:46:97:fa:0d:11:61:
78:74:58:ca:93:7d:09:22:66:88:f5:2a:5b:92:18:
4f:83:93:68:00:4a:30:22:43:97:17:a7:cc:12:46:
36:4d:19:35:21:62:28:b3:a4:72:28:1b:a9:d5:c8:
bd:e2:d9:67:12:da:8b:c9:e7:db:37:dd:f9:f0:fd:
92:44:0c:29:24:b4:22:a5:3e:5a:f1:a9:df:71:d7:
dd:a2:2d:1a:06:fa:69:21:de:60:30:03:8b:f4:8d:
3d:3d:f6:3a:7c:e9:b3:0c:78:d9:7a:87:be:38:17:
e1:55:70:0c:e6:2d:a0:77:1f:f0:bf:b8:d1:07:0a:
b1:ae:df:87:05:63:77:fe:f7:c6:9c:1b:72:32:bc:
fb:31:96:95:b0:b8:a9:1e:a7:ab:79:90:40:18:21:
78:b5:51:e1:9d:3a:a0:ba:7e:0e:e3:6f:48:57:cd:
21:15:30:ac:ea:13:98:29:18:5a:e3:81:a0:51:26:
8f:aa:6b:6a:29:cb:3d:a0:ff:b5:be:58:04:5a:74:
03:71:ad:00:c2:8a:ea:62:09:56:7a:be:8d:99:ce:
a3:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:A0:34:E9:EC:A5:28:00:89:79:DB:73:B3:67:2D:14:B8:D1:F9:77
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS200676.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.24.108.0/24
Signature Algorithm: sha256WithRSAEncryption
45:ba:15:35:79:fe:9f:f1:7f:77:f1:8b:71:c5:73:8a:ec:0f:
58:29:33:f1:00:0e:d6:2b:c5:75:2a:6c:a9:ab:a2:c3:ab:cd:
b8:35:11:be:36:c7:6d:2a:53:34:58:db:a4:b6:ff:03:de:21:
04:16:b3:b6:90:f2:52:41:f4:20:2e:81:52:a6:e0:71:2d:85:
67:15:78:db:ef:c8:a6:2b:46:3a:d3:9c:a3:27:10:2e:8a:3d:
9c:ab:83:f4:ca:fb:25:2c:06:20:b0:4e:3d:55:0d:83:59:24:
9c:49:4b:56:ba:e4:7f:00:20:c2:b4:a6:a4:d5:07:64:75:3d:
db:f7:72:42:eb:5a:06:b2:c6:4a:74:2f:ea:37:24:54:47:5d:
b9:bb:64:43:36:32:df:90:7b:56:a9:7a:f4:7f:54:a4:d7:e4:
5a:30:d3:9b:26:3f:86:01:f7:3d:c2:b4:f8:fb:26:af:41:9d:
94:ad:21:02:f7:a3:d3:ae:ca:40:cf:41:0a:26:64:b5:08:e7:
e7:31:df:65:ba:da:cf:bc:b6:c9:17:a6:37:f4:60:e3:d6:fe:
8b:6e:45:da:56:65:6c:92:09:25:da:f0:c1:16:87:72:2d:b3:
75:02:a9:6f:f6:97:e6:76:4e:fb:e9:fc:c6:58:db:b5:62:04:
79:5b:30:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 22:09:17 2025 by rpki-client