Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS16276.roa
File: AS16276.roa (raw, json)
Hash identifier: br7gmvOSPoW83v/mVwBcaAvHL+3OSSz/8RUDvnK7I0U=
Subject key identifier: A8:2E:CB:04:36:47:E9:7A:CE:EC:41:72:AB:02:04:91:98:AF:7E:03
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 5030FCAD222373EF5B71C75BB60218F5D9695747
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS16276.roa
Signing time: Tue 26 Nov 2024 15:55:14 +0000
ROA not before: Tue 26 Nov 2024 15:50:14 +0000
ROA not after: Tue 25 Nov 2025 15:55:14 +0000
asID: 16276
IP address blocks: 92.113.13.0/24 maxlen: 24
92.113.67.0/24 maxlen: 24
92.113.74.0/24 maxlen: 24
92.113.77.0/24 maxlen: 24
92.113.80.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:30:fc:ad:22:23:73:ef:5b:71:c7:5b:b6:02:18:f5:d9:69:57:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Nov 26 15:50:14 2024 GMT
Not After : Nov 25 15:55:14 2025 GMT
Subject: CN=A82ECB043647E97ACEEC4172AB02049198AF7E03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:bc:70:38:6c:f9:f9:33:bc:7c:34:91:d6:22:
89:75:f4:2b:11:6a:e1:ad:0b:a4:10:bc:bb:f4:b6:
df:62:fe:5d:5f:9b:98:b4:17:60:30:d5:54:3e:52:
12:c8:28:43:fc:f0:88:5d:2c:7f:07:af:93:89:52:
4c:bf:62:75:69:c9:ac:3b:3a:8c:f5:65:a7:26:f3:
a6:93:fd:ed:ef:cd:82:80:5f:66:de:b9:c3:ab:a0:
10:de:cb:cb:67:cb:d6:10:ce:a7:9f:01:ce:ce:72:
0d:b9:3e:56:5d:b2:0b:0b:71:f9:81:a4:d6:9f:26:
1f:25:db:ae:af:25:e4:02:8a:48:04:c2:48:2e:07:
78:cd:f1:f3:fe:9f:f6:0d:82:c7:b0:32:75:4f:9f:
6f:f8:d4:53:c4:1b:cf:00:6e:ae:d1:4a:24:94:6e:
b8:4f:68:ee:d0:fa:81:23:84:ff:14:fb:76:2a:1a:
cc:57:65:73:4a:fa:da:3a:7f:b6:76:45:f8:9e:a8:
04:40:18:9c:40:8d:b9:80:c0:ef:9b:f7:e0:f4:a7:
69:36:c2:39:a9:88:5d:6f:de:13:34:6d:a4:67:2c:
6e:7a:a1:e4:29:a6:16:4f:28:1e:fc:f5:23:0e:0a:
7c:8a:93:b2:7d:65:99:0b:9b:e8:cc:f1:ee:c9:39:
56:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:2E:CB:04:36:47:E9:7A:CE:EC:41:72:AB:02:04:91:98:AF:7E:03
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS16276.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.113.13.0/24
92.113.67.0/24
92.113.74.0/24
92.113.77.0/24
92.113.80.0/24
Signature Algorithm: sha256WithRSAEncryption
68:34:4a:7e:27:56:07:4c:7f:87:ad:8a:88:b9:10:0d:f4:6a:
f6:20:54:20:47:23:78:2f:9e:c9:ea:a2:d1:21:62:f7:38:8d:
c6:ee:fc:94:1c:6f:2e:f3:ad:38:71:79:0a:0b:de:42:e1:cd:
7c:cf:ee:a9:e4:bc:91:78:b2:04:96:a0:b4:08:53:9a:c5:6c:
15:52:67:e2:fe:7e:53:d5:f5:e7:cf:4e:b5:17:d0:d3:04:19:
1f:3c:91:a1:a4:0d:51:dc:43:75:6c:30:d1:14:25:d0:83:d8:
dc:b0:ff:e9:b6:a8:5a:b2:37:90:3d:46:a7:3d:5f:32:78:68:
72:de:31:46:04:37:b6:41:8a:e6:db:69:ad:6d:d3:3a:49:8b:
b7:2a:e7:d2:5a:0f:91:65:91:25:66:fb:c4:d1:0c:29:85:c4:
8e:16:e6:5c:24:9d:ee:c6:67:fb:74:07:87:56:9a:af:3e:c9:
87:88:6e:8c:ad:4b:b5:f4:8c:72:96:b3:74:b1:05:81:75:84:
24:a5:02:cd:44:b5:d9:31:bc:f9:37:3a:2e:4b:b8:3b:72:91:
86:a2:1e:f7:b8:a2:de:ff:38:0e:6c:4e:3e:64:2b:4e:24:5b:
8a:d8:3e:a4:1b:32:74:e2:58:2d:f3:bd:7d:a3:fb:05:5f:7f:
a3:0e:c6:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:02:06 2025 by rpki-client