Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS16509.roa
File: AS16509.roa (raw, json)
Hash identifier: 5HF6s2E+avIZeUO/TCoPA9hBCdrIE3kAXyvZutI3kzo=
Subject key identifier: C1:49:C9:42:87:FE:8F:C7:8A:AC:7E:45:6A:DA:B8:C8:11:CA:C1:79
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 108C39C7CE775308674CEBAFB0BF62AE6DFB88AD
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS16509.roa
Signing time: Fri 24 Jan 2025 11:58:13 +0000
ROA not before: Fri 24 Jan 2025 11:53:13 +0000
ROA not after: Fri 23 Jan 2026 11:58:13 +0000
asID: 16509
IP address blocks: 193.111.117.0/24 maxlen: 24
193.142.18.0/24 maxlen: 24
193.164.10.0/24 maxlen: 24
194.5.147.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:8c:39:c7:ce:77:53:08:67:4c:eb:af:b0:bf:62:ae:6d:fb:88:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Jan 24 11:53:13 2025 GMT
Not After : Jan 23 11:58:13 2026 GMT
Subject: CN=C149C94287FE8FC78AAC7E456ADAB8C811CAC179
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:64:eb:6f:ad:e1:b6:a2:aa:a3:6e:36:9a:2f:
c4:91:8a:10:ab:d7:3f:aa:22:ed:d3:dd:21:34:42:
b8:8a:ab:13:4d:69:28:11:d2:ce:af:72:be:de:93:
86:a2:81:b2:68:e8:46:43:d9:a5:3e:df:98:ed:93:
1d:66:1e:d4:be:a1:4d:32:1f:e7:ae:bf:44:62:a5:
61:78:3f:6c:21:58:0d:e8:d5:06:17:1e:39:1a:b0:
d8:98:28:b8:bd:f9:ee:08:3e:d5:ca:f0:55:8f:ef:
14:cd:fd:e0:6e:75:be:cf:59:b7:b1:6f:21:f8:04:
44:11:f4:10:da:b8:b1:72:58:84:09:dd:1c:74:86:
ee:11:7b:b4:68:9f:62:9e:f0:d4:6f:56:40:57:bc:
36:80:4d:1d:6f:52:4c:45:af:4d:e7:d3:e5:75:29:
3e:1d:ec:88:64:eb:8c:82:1b:eb:31:e6:59:be:96:
b0:fe:b6:c3:bc:7b:5a:06:e4:81:0d:24:2d:b7:7d:
51:47:fa:f2:28:c0:bc:eb:cc:c3:ff:ba:0d:75:99:
80:a5:20:00:03:ea:ca:64:65:2c:e1:52:e3:2f:a9:
0a:bb:7b:73:2a:f7:fe:0c:0c:a0:3e:f6:24:2d:78:
6a:59:a5:37:70:0a:5d:21:ef:37:6b:a7:d6:fb:89:
fe:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:49:C9:42:87:FE:8F:C7:8A:AC:7E:45:6A:DA:B8:C8:11:CA:C1:79
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS16509.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.111.117.0/24
193.142.18.0/24
193.164.10.0/24
194.5.147.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:02:ef:73:76:f2:5d:aa:e1:67:b9:4e:b8:dc:ab:d7:8b:bf:
25:fe:f1:db:32:02:fa:a9:af:c1:c2:c8:eb:98:fc:c8:be:d3:
65:5f:94:7f:fb:e8:dd:05:fb:3f:76:4c:42:4e:78:6b:94:14:
a1:bd:1a:89:f6:16:91:d7:14:98:8a:dc:5d:6d:d3:c9:f3:17:
a2:79:0b:ff:b6:2b:1d:17:f3:06:da:60:ac:9b:d8:29:4a:64:
0c:22:04:a0:3d:cf:97:91:79:da:8f:c8:23:40:95:31:5f:f7:
73:75:d6:17:bb:4d:05:03:a4:c3:00:ad:35:9c:5f:fb:71:d8:
5b:de:56:49:38:0e:43:00:f3:ca:49:10:8f:6c:d8:62:0e:30:
26:c5:f2:73:b4:99:dc:d8:77:d0:99:a8:b8:0e:bf:60:79:43:
92:52:91:31:b4:86:2f:ee:02:57:68:35:51:50:0e:66:b5:8d:
80:df:ba:c5:4d:6b:47:1b:02:22:5e:7a:8d:98:d8:4b:c3:43:
ee:da:99:18:56:fa:2f:3c:dc:c4:a3:96:a8:a0:0f:96:8c:25:
4b:15:3d:50:76:cb:78:9f:8a:c0:6f:8e:88:34:84:f6:c6:8c:
9f:29:f2:54:b8:17:27:4c:95:e1:54:97:25:7f:71:46:8c:b0:
45:23:74:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:20:10 2025 by rpki-client