Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS16509.roa
File: AS16509.roa (raw, json)
Hash identifier: y9OoVA1vyk+c4gN7KqOa7KBlzpVgfmDcijUCyw1sfeM=
Subject key identifier: 90:FB:CA:51:4B:BD:EA:F5:96:4C:41:40:93:1F:FB:31:6D:7B:3B:8E
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 197D1A56368942E622EC760CF58CCBCBA8D1CDE4
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS16509.roa
Signing time: Wed 12 Mar 2025 05:23:20 +0000
ROA not before: Wed 12 Mar 2025 05:18:20 +0000
ROA not after: Wed 11 Mar 2026 05:23:20 +0000
asID: 16509
IP address blocks: 140.233.128.0/19 maxlen: 24
145.223.64.0/24 maxlen: 24
145.223.65.0/24 maxlen: 24
146.103.60.0/24 maxlen: 24
146.103.62.0/23 maxlen: 24
148.135.180.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:7d:1a:56:36:89:42:e6:22:ec:76:0c:f5:8c:cb:cb:a8:d1:cd:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Mar 12 05:18:20 2025 GMT
Not After : Mar 11 05:23:20 2026 GMT
Subject: CN=90FBCA514BBDEAF5964C4140931FFB316D7B3B8E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:8b:d0:33:6d:92:86:8a:5f:eb:e6:3e:9a:c5:
12:ff:85:c5:92:ec:ff:55:1d:60:dd:de:d9:2c:05:
df:97:04:e6:66:14:21:2e:e7:94:bf:e0:97:78:d1:
3a:99:8d:6a:0c:33:a2:90:68:42:15:a5:23:17:d7:
0f:63:b4:c9:7a:31:9d:04:da:f5:ad:0a:1a:8c:b5:
a9:7d:7c:8e:9c:af:3b:4b:e1:f9:40:f4:6b:8d:64:
93:1a:17:5f:dd:30:ca:8f:a0:d7:d4:14:eb:6c:29:
a1:87:16:e3:04:4d:27:ef:d0:0b:b1:95:5a:aa:9e:
97:6f:17:a0:f4:a3:f0:a0:a4:98:ae:5a:e5:cb:31:
90:60:3a:80:bc:a0:7e:bb:c2:ed:d8:33:5c:3f:d8:
5d:16:6b:3d:34:df:7f:28:97:fb:37:5e:3a:53:41:
14:e1:83:94:71:5a:20:17:d8:73:d5:59:3e:79:04:
10:ee:42:37:a0:f7:2c:83:a6:1b:aa:d8:a1:40:e5:
af:5d:78:c6:5b:c9:59:4b:5c:3b:8b:2d:e1:79:c3:
65:6f:b6:c7:ef:8e:d1:2b:38:73:13:dc:ab:dd:61:
ee:95:1d:e7:ff:d8:de:de:7e:2e:04:40:ed:68:2d:
26:b0:c3:83:ce:cf:d0:d6:7c:f0:9e:f8:14:de:e2:
b2:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:FB:CA:51:4B:BD:EA:F5:96:4C:41:40:93:1F:FB:31:6D:7B:3B:8E
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS16509.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.233.128.0/19
145.223.64.0/23
146.103.60.0/24
146.103.62.0/23
148.135.180.0/24
Signature Algorithm: sha256WithRSAEncryption
58:89:9c:52:a1:bc:0d:5f:0f:60:f3:28:a4:7a:61:3f:bc:eb:
e8:1c:97:d2:c9:c4:b5:67:da:40:41:14:52:15:f4:98:bb:e4:
fd:26:a8:02:c5:54:d0:30:e8:dc:6a:7c:f1:bb:f5:15:88:5b:
1f:66:76:57:51:01:90:79:5a:cb:99:f1:33:8f:9e:02:11:9a:
ad:ad:33:24:62:4d:37:9d:ce:be:25:e6:4f:06:59:4f:e4:cd:
a8:6e:37:e9:c2:7c:40:71:1f:e9:f9:cc:6b:a7:75:00:28:a6:
7f:e0:9e:6d:18:17:5e:28:96:c3:48:2e:fd:c5:4f:78:a7:0c:
96:8e:0f:f4:c2:74:2f:0b:e6:b6:09:fe:a4:8b:db:22:3e:d5:
79:b5:89:c4:ad:0c:7c:a4:ac:36:4e:d5:1d:bf:66:72:39:50:
a4:e9:a0:91:a0:23:60:15:d0:bf:2a:1f:a1:69:ab:95:fa:9f:
e2:53:01:05:87:35:bd:be:b7:c5:6a:1e:a1:15:44:8d:80:d0:
37:5f:1f:cc:c4:15:3a:6b:04:05:7d:77:42:08:a3:12:06:de:
c0:33:5c:54:19:5a:2e:57:cb:b9:27:2a:d1:5d:a1:17:0c:aa:
56:83:c3:eb:e6:56:6e:ca:a4:3a:da:27:99:1d:a2:c5:91:b3:
67:4a:3c:2a
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgIUGX0aVjaJQuYi7HYM9YzLy6jRzeQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi
MjQ2YmZjYzAeFw0yNTAzMTIwNTE4MjBaFw0yNjAzMTEwNTIzMjBaMDMxMTAvBgNV
BAMTKDkwRkJDQTUxNEJCREVBRjU5NjRDNDE0MDkzMUZGQjMxNkQ3QjNCOEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhi9AzbZKGil/r5j6axRL/hcWS
7P9VHWDd3tksBd+XBOZmFCEu55S/4Jd40TqZjWoMM6KQaEIVpSMX1w9jtMl6MZ0E
2vWtChqMtal9fI6crztL4flA9GuNZJMaF1/dMMqPoNfUFOtsKaGHFuMETSfv0Aux
lVqqnpdvF6D0o/CgpJiuWuXLMZBgOoC8oH67wu3YM1w/2F0Waz00338ol/s3XjpT
QRThg5RxWiAX2HPVWT55BBDuQjeg9yyDphuq2KFA5a9deMZbyVlLXDuLLeF5w2Vv
tsfvjtErOHMT3KvdYe6VHef/2N7efi4EQO1oLSaww4POz9DWfPCe+BTe4rLPAgMB
AAGjggIhMIICHTAdBgNVHQ4EFgQUkPvKUUu96vWWTEFAkx/7MW17O44wHwYDVR0j
BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy
NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK
R3Y4dy5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt
NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTMTY1MDkucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwNwYIKwYBBQUHAQcBAf8EKDAmMCQEAgABMB4DBAWM6YAD
BAGR30ADBACSZzwDBAGSZz4DBACUh7QwDQYJKoZIhvcNAQELBQADggEBAFiJnFKh
vA1fD2DzKKR6YT+86+gcl9LJxLVn2kBBFFIV9Ji75P0mqALFVNAw6NxqfPG79RWI
Wx9mdldRAZB5WsuZ8TOPngIRmq2tMyRiTTedzr4l5k8GWU/kzahuN+nCfEBxH+n5
zGundQAopn/gnm0YF14olsNILv3FT3inDJaOD/TCdC8L5rYJ/qSL2yI+1Xm1icSt
DHykrDZO1R2/ZnI5UKTpoJGgI2AV0L8qH6Fpq5X6n+JTAQWHNb2+t8VqHqEVRI2A
0DdfH8zEFTprBAV9d0IIoxIG3sAzXFQZWi5Xy7knKtFdoRcMqlaDw+vmVm7KpDra
J5kdosWRs2dKPCo=
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:34:23 2025 by rpki-client on console.sobornost.net