Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS216183.roa
File: AS216183.roa (raw, json)
Hash identifier: ykzU0dgyuSYa0BDSvBxfmI8y6RQ77HM+VSNRH4fr/vI=
Subject key identifier: D5:AC:23:AF:DC:AF:FB:C1:56:5E:9A:4F:5C:C9:FD:6D:DE:77:DE:5B
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 404A544220AC0D4AC831EAF6E9474EB630982369
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS216183.roa
Signing time: Mon 17 Mar 2025 14:53:58 +0000
ROA not before: Mon 17 Mar 2025 14:48:58 +0000
ROA not after: Mon 16 Mar 2026 14:53:58 +0000
asID: 216183
IP address blocks: 141.11.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:4a:54:42:20:ac:0d:4a:c8:31:ea:f6:e9:47:4e:b6:30:98:23:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Mar 17 14:48:58 2025 GMT
Not After : Mar 16 14:53:58 2026 GMT
Subject: CN=D5AC23AFDCAFFBC1565E9A4F5CC9FD6DDE77DE5B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:93:1f:32:6c:92:24:ed:28:c6:f9:05:2d:26:
32:c5:bd:7d:c4:18:67:ca:96:96:bc:30:38:00:e2:
35:5a:08:46:29:15:39:33:92:0c:7b:57:8f:9b:0f:
16:33:76:73:76:67:da:41:13:0e:48:e6:b5:b6:3f:
f5:e8:71:47:d2:53:69:fe:7a:46:9f:51:b8:2e:e6:
70:cb:41:4e:24:a7:93:18:06:82:77:1b:18:13:07:
6d:a7:48:b2:f1:1b:3f:16:93:c5:89:20:0a:fb:58:
4d:43:40:29:02:c1:29:d8:e5:fd:dd:75:aa:2c:03:
5c:78:d3:86:14:eb:6b:72:2a:64:3b:09:73:3b:79:
27:93:70:84:4a:b1:aa:90:96:f8:39:2f:e4:37:e5:
07:15:34:c5:28:cd:26:3e:74:f2:44:9e:64:ab:51:
96:ca:a4:e1:9d:2e:f7:3a:bd:9a:3a:11:77:00:44:
72:f2:85:7f:8b:f0:7b:ae:70:e8:f3:d1:da:48:67:
2b:56:56:9e:1f:f2:44:19:d4:7d:6f:3b:db:93:fa:
32:00:eb:17:80:18:a2:77:e6:aa:64:4c:ff:4f:82:
3d:23:30:c8:7d:bd:d5:67:63:3a:2b:88:a1:a3:5b:
25:ec:d7:39:bc:ee:32:75:6a:86:fc:2d:10:f3:0a:
f2:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:AC:23:AF:DC:AF:FB:C1:56:5E:9A:4F:5C:C9:FD:6D:DE:77:DE:5B
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS216183.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.127.0/24
Signature Algorithm: sha256WithRSAEncryption
75:b6:c7:97:9d:92:e6:21:79:ba:95:5c:ac:34:1e:13:e1:cb:
a4:04:c1:ae:c4:2c:d0:2a:dd:3f:55:da:1f:31:a2:8c:8b:36:
df:1f:35:cd:14:bf:2d:7f:f2:e6:fd:4e:10:a6:65:74:20:00:
ac:36:45:60:dc:d0:85:53:c6:aa:03:9c:74:4a:65:11:d3:66:
d2:f0:7d:30:67:ad:a0:49:67:59:bd:ea:a0:21:63:56:7e:5a:
a1:47:3b:39:24:dc:e1:70:f2:93:7e:02:2b:24:fd:27:5f:17:
4a:13:04:b0:2d:50:a0:3e:89:b5:1c:01:64:46:9b:3a:eb:be:
39:42:2d:97:d4:f2:a4:76:34:9b:5b:fd:fb:46:51:fc:cd:99:
bf:5b:03:ef:f1:01:f0:af:d8:cf:3d:62:c0:7c:37:dc:d3:fd:
27:8d:71:97:da:d2:99:67:0a:78:62:f7:4a:2b:ce:64:41:94:
74:70:1f:fd:8c:2c:45:e3:c0:c9:2f:67:6b:4a:cd:cc:22:7d:
c3:59:57:41:00:37:8f:2a:cb:6e:bb:c2:24:5a:ce:6c:73:27:
5e:f5:61:eb:37:27:4b:41:03:e0:29:17:98:4d:7d:19:e1:56:
e1:9e:18:fc:71:12:c2:d9:74:4b:7a:ed:f3:b8:43:11:c5:6d:
6c:20:00:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:26:34 2025 by rpki-client