Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS216472.roa
File: AS216472.roa (raw, json)
Hash identifier: 4wvGePnEOf9sVIOfvM2SIIpDCpU9hMnwO79uyAFMhNs=
Subject key identifier: 48:75:00:CE:21:CD:73:10:A9:05:DB:EF:BF:13:0B:67:37:3F:54:FB
Certificate issuer: /CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Certificate serial: 1B3756238CDE89E7FA3152E5A11D7346B4E9D433
Authority key identifier: 70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS216472.roa
Signing time: Tue 03 Feb 2026 10:17:09 +0000
ROA not before: Tue 03 Feb 2026 10:12:09 +0000
ROA not after: Tue 02 Feb 2027 10:17:09 +0000
asID: 216472
IP address blocks: 139.28.48.0/24 maxlen: 24
139.28.49.0/24 maxlen: 24
185.254.55.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:37:56:23:8c:de:89:e7:fa:31:52:e5:a1:1d:73:46:b4:e9:d4:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Validity
Not Before: Feb 3 10:12:09 2026 GMT
Not After : Feb 2 10:17:09 2027 GMT
Subject: CN=487500CE21CD7310A905DBEFBF130B67373F54FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ae:f6:46:fe:d1:42:bd:a8:b7:7d:34:72:73:
36:b1:cd:6f:ae:f6:26:02:8c:97:ec:51:87:28:5e:
e3:6c:fd:e9:0c:fa:ae:f6:27:25:64:6b:02:3c:14:
0b:e2:cf:ff:b7:64:39:58:e6:78:55:e4:a1:ee:4a:
10:d3:88:89:03:f3:2b:a5:3f:98:d2:9b:e1:c1:d2:
d7:1c:a6:4b:ac:8b:a8:af:4f:4d:0d:6d:f4:7d:6f:
80:d1:7b:54:13:24:1a:b8:81:8d:fe:33:6a:c8:65:
43:eb:ba:d1:d5:9e:e8:6a:57:f6:22:7b:e3:51:0c:
16:88:da:0b:b3:ab:be:3d:91:55:d9:6c:c3:ef:67:
47:d3:b2:79:c3:bd:c4:06:64:6e:8d:2e:78:aa:bf:
b4:3a:19:07:7c:b2:67:c1:9d:8e:25:30:88:bd:62:
7a:2f:14:88:a7:6a:5e:7b:fe:75:bb:9f:02:77:1b:
0b:b0:bd:78:b4:dc:c5:11:ae:bf:e3:9f:d3:34:c9:
81:bd:62:a8:f5:3d:50:3f:c0:72:d7:f4:63:21:f7:
12:e5:f0:64:f3:ef:94:aa:8b:84:28:bb:8c:7e:3c:
89:09:fc:a2:a0:da:d4:98:ba:6f:53:2e:0b:46:b1:
a0:db:c3:f4:42:21:7c:dd:62:2b:4d:d4:19:bb:55:
55:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:75:00:CE:21:CD:73:10:A9:05:DB:EF:BF:13:0B:67:37:3F:54:FB
X509v3 Authority Key Identifier:
keyid:70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS216472.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.28.48.0/23
185.254.55.0/24
Signature Algorithm: sha256WithRSAEncryption
04:a4:c4:ba:a2:22:bc:ba:39:63:ff:4d:62:37:f7:e5:3b:c6:
fd:62:62:92:fa:3e:94:3a:63:4e:21:97:65:a2:57:32:16:89:
92:2e:6a:a6:70:b6:20:88:7f:18:2b:4b:a0:01:1f:0d:88:39:
90:a5:b0:d1:53:12:88:1d:d8:d0:4b:c1:8a:a2:7a:32:fd:85:
18:95:12:11:24:eb:a4:26:bd:37:a7:e2:e8:2c:8b:1a:e6:d2:
43:78:c6:22:de:66:54:1c:7c:d6:16:11:f3:9c:4b:00:3c:b3:
fe:55:be:19:72:ce:c8:66:64:b8:d0:90:48:ac:ea:41:a0:09:
6d:54:9a:94:06:68:c6:9b:72:23:d9:4d:16:4e:db:47:8a:c3:
81:be:1f:0d:96:e5:cb:1a:d1:36:f6:d0:d9:04:fb:56:2b:17:
b5:28:4f:ab:09:34:d0:b6:3b:47:a5:2f:35:45:d2:08:a6:4a:
7a:7a:68:b2:00:7f:d7:58:b3:4e:7a:dc:d6:52:1f:a3:20:b5:
5a:7c:4d:d0:c1:c5:9c:8e:fd:06:da:90:ce:82:4b:09:2f:6b:
22:34:9c:88:7c:a2:92:85:3e:f3:0c:2c:af:e4:d9:1a:5e:7b:
18:04:29:89:c4:17:fc:2d:50:ea:3a:4f:8f:fb:50:43:6f:25:
4e:73:c7:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:32:36 2026 by rpki-client