Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS216409.roa
File: AS216409.roa (raw, json)
Hash identifier: FdCrvy4vrjzkzPPFHnju7PSanKE9V44UrWV2OMts2Vg=
Subject key identifier: 3D:2A:6B:F8:A6:D6:7C:EB:F4:FF:66:B7:8B:39:FB:73:A2:77:DA:94
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 43C22DDDA2E0C898C7C0033368185D569C950910
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS216409.roa
Signing time: Thu 03 Jul 2025 15:51:28 +0000
ROA not before: Thu 03 Jul 2025 15:46:28 +0000
ROA not after: Thu 02 Jul 2026 15:51:28 +0000
asID: 216409
IP address blocks: 94.24.109.0/24 maxlen: 24
206.53.2.0/24 maxlen: 24
206.53.3.0/24 maxlen: 24
2a05:dfc0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 17:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:c2:2d:dd:a2:e0:c8:98:c7:c0:03:33:68:18:5d:56:9c:95:09:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Jul 3 15:46:28 2025 GMT
Not After : Jul 2 15:51:28 2026 GMT
Subject: CN=3D2A6BF8A6D67CEBF4FF66B78B39FB73A277DA94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8d:2e:14:3e:9c:5e:6c:d7:7b:ee:54:43:20:
d2:b0:0d:d9:d8:f4:f3:d1:44:58:8d:00:41:fe:b7:
d9:98:6d:a4:96:5e:8f:c2:25:73:b1:86:87:12:c2:
3c:ee:f5:ff:21:9e:f1:cb:df:03:f8:63:d7:0d:92:
06:04:74:a5:7f:6c:55:2f:69:37:c2:99:c4:f8:3a:
8b:51:80:05:1a:45:43:e6:d8:4a:c3:e7:b1:e0:c6:
5c:25:88:b4:29:a1:fe:18:1d:80:da:92:24:a6:6e:
9a:52:55:5b:1b:6b:d5:f4:37:c5:e5:48:ec:ea:4a:
e0:d2:ca:e2:0f:de:34:4f:f1:ae:96:93:4d:93:a9:
a8:88:ad:18:1d:c1:7c:dd:c5:5e:de:52:80:18:31:
25:54:64:9b:bf:51:6a:e0:a1:6c:0c:1d:d1:51:e6:
6f:f4:da:a9:70:76:0c:34:2d:77:98:57:34:ec:c0:
a6:b3:4c:6d:54:ae:14:3f:44:99:a3:79:be:e9:2b:
94:b9:48:05:2f:a0:b5:c0:12:dc:c0:61:43:20:7d:
1d:84:0c:d8:07:bc:f6:a8:1c:98:e1:31:95:d9:93:
06:b1:80:be:49:af:c4:6b:65:6e:44:a9:20:d8:73:
b5:dd:5d:ee:81:dd:43:ff:48:11:77:bd:18:0e:75:
8a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:2A:6B:F8:A6:D6:7C:EB:F4:FF:66:B7:8B:39:FB:73:A2:77:DA:94
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS216409.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.24.109.0/24
206.53.2.0/23
IPv6:
2a05:dfc0::/32
Signature Algorithm: sha256WithRSAEncryption
ae:24:bf:12:5b:a4:22:7a:fc:d3:f4:9e:93:17:e6:a6:08:5d:
7f:39:8c:2c:21:46:d7:cf:80:6f:b8:a4:37:76:86:5b:22:23:
f0:e5:09:02:da:59:26:01:da:19:fd:0f:17:cd:e7:a9:db:73:
cf:e4:54:6e:da:ed:34:ea:71:d4:3b:9c:db:ee:ed:b2:b9:39:
f6:72:ad:9d:b3:c1:a4:46:e6:00:e0:be:4c:e2:df:ac:f7:e2:
e3:e9:15:c2:dc:73:b9:1a:5a:4c:62:ef:7b:91:72:39:73:58:
b9:58:a5:a4:cc:2c:c2:93:ab:9c:18:52:20:fb:12:5b:d3:b9:
b9:79:1c:59:17:f3:22:8d:8d:08:99:fc:65:39:ff:04:32:9f:
37:a4:28:c6:a0:72:27:c4:8e:35:8f:ea:8a:24:13:41:21:b1:
e4:e5:13:80:6a:78:b3:94:d6:9f:38:d8:b5:5b:26:26:94:0a:
da:ed:67:a6:d1:bf:af:82:64:f2:09:2b:f8:1f:c5:2a:65:34:
5b:ee:25:4e:d7:94:78:8d:44:b4:51:b1:18:ce:c3:88:70:bd:
2b:30:0f:7b:15:02:69:03:5f:7b:01:f9:93:9a:16:2a:33:95:
c4:45:1c:7c:3d:a3:05:8f:ed:72:fe:2f:14:fa:3f:47:57:02:
6e:9d:66:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 22:19:17 2025 by rpki-client