Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS16276.roa
File: AS16276.roa (raw, json)
Hash identifier: E7dZXPOSZleQF7/ZTsBDB0GX7bpVvemI3jzyIbpMGT8=
Subject key identifier: C4:09:DE:89:7F:A7:74:E7:DA:C4:43:E1:0E:2E:09:20:BB:19:13:78
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 2841D1D5C67281BF05118C8FC6C26A4D29A80E91
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS16276.roa
Signing time: Fri 17 Jan 2025 07:13:26 +0000
ROA not before: Fri 17 Jan 2025 07:08:26 +0000
ROA not after: Fri 16 Jan 2026 07:13:26 +0000
asID: 16276
IP address blocks: 146.103.49.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:41:d1:d5:c6:72:81:bf:05:11:8c:8f:c6:c2:6a:4d:29:a8:0e:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jan 17 07:08:26 2025 GMT
Not After : Jan 16 07:13:26 2026 GMT
Subject: CN=C409DE897FA774E7DAC443E10E2E0920BB191378
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d5:d6:66:dd:f4:4a:68:49:81:6d:c0:92:36:
b4:d5:92:c8:46:aa:83:6b:af:df:0d:0e:ce:9a:61:
05:fe:6f:96:4c:7e:ac:41:5f:71:00:29:b6:14:79:
26:67:73:fb:12:21:c5:d0:5c:f2:1f:1a:c1:6c:2f:
62:74:9e:a5:38:c7:f4:4a:0f:7c:aa:bc:42:9a:54:
48:fe:0f:79:b5:bc:1c:ef:1e:ee:94:e8:c1:59:45:
74:94:36:eb:1c:82:c9:ad:d9:49:9f:6d:0a:7f:9a:
56:23:13:1b:dc:74:d3:8d:ce:85:02:ff:f7:67:98:
19:ed:bb:5b:83:91:47:8a:58:ce:33:5c:7d:8c:bf:
67:ea:7d:cc:c8:22:d6:ca:7f:bc:68:ac:4c:b2:d1:
17:e7:d7:9c:37:8d:dc:ec:8c:1a:1b:9b:af:b0:1c:
d9:dd:fb:33:50:5c:b8:95:3e:2e:42:70:32:a3:64:
02:fb:d7:de:8a:49:f3:94:7e:19:22:08:f6:f6:15:
2b:37:4f:b8:6b:e3:d8:13:dd:6a:0f:ec:76:77:98:
90:b0:22:fd:a9:6b:31:f6:40:66:85:c0:69:00:6d:
cb:3b:e9:18:5d:78:12:0c:97:84:b1:a3:88:75:10:
20:d6:69:be:da:f4:47:35:74:3e:fd:1b:05:a9:54:
3b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:09:DE:89:7F:A7:74:E7:DA:C4:43:E1:0E:2E:09:20:BB:19:13:78
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS16276.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.103.49.0/24
Signature Algorithm: sha256WithRSAEncryption
53:cb:95:47:9e:6b:d7:67:dc:20:2c:c6:95:52:d8:fb:29:c5:
f8:a0:b3:e0:09:98:7b:86:2d:8c:1d:30:04:dd:fe:19:46:a1:
13:df:b4:89:1d:c2:7b:1f:45:2c:3d:ce:14:aa:30:07:3c:e7:
6c:82:db:32:8f:dc:98:c5:c3:f2:f3:e3:82:b4:99:5c:ee:b1:
4c:9d:d3:86:87:b5:0a:45:a9:91:ba:4a:75:43:78:a9:55:1f:
2b:2e:12:60:58:ba:ef:36:c1:31:8b:ce:39:7c:79:60:0f:56:
53:85:a4:39:d2:df:ff:62:60:4a:6e:96:54:f3:c3:1d:f4:00:
69:eb:6d:85:8d:8b:89:d1:2c:0d:1c:b9:c1:56:b5:75:a9:5c:
bd:78:d3:87:3b:ce:5e:ec:1b:0c:70:38:f3:02:54:50:88:07:
92:0b:b8:34:1f:3f:7f:02:15:0b:4e:69:9d:7b:14:69:03:dc:
54:0e:77:8a:36:ea:e6:cf:fd:dd:f3:2c:08:e4:09:8a:1b:8f:
75:a2:6e:e0:31:35:a9:2a:43:c9:6c:71:6c:2c:06:02:59:51:
d5:f3:f7:ba:01:d7:df:96:ac:68:f3:5c:5c:5e:46:18:f3:82:
17:8a:bd:aa:24:00:53:c6:8d:c8:c0:20:58:7b:7f:0f:ae:1b:
4d:11:cd:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:20:49 2025 by rpki-client