Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS200019.roa
File: AS200019.roa (raw, json)
Hash identifier: p76i8J+90dBdRl9+uLNHUV5VtdtxSZh2i70orbQydwU=
Subject key identifier: 24:81:33:86:B1:C8:C8:C7:00:46:0D:A7:65:62:AB:80:3F:FB:28:8C
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 652023CAB1D4BBB1449DFAF81ECDECA821BA70D5
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS200019.roa
Signing time: Wed 05 Feb 2025 09:28:16 +0000
ROA not before: Wed 05 Feb 2025 09:23:16 +0000
ROA not after: Wed 04 Feb 2026 09:28:16 +0000
asID: 200019
IP address blocks: 82.26.194.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:20:23:ca:b1:d4:bb:b1:44:9d:fa:f8:1e:cd:ec:a8:21:ba:70:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Feb 5 09:23:16 2025 GMT
Not After : Feb 4 09:28:16 2026 GMT
Subject: CN=24813386B1C8C8C700460DA76562AB803FFB288C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a4:4d:9e:70:76:27:ec:3c:91:fd:3f:98:66:
5f:8e:91:df:74:c7:49:2e:b5:24:82:48:3d:9d:0e:
0a:e0:f2:c9:85:f1:4d:29:bb:48:d3:ce:aa:ba:59:
89:56:25:79:7a:0b:f6:65:cc:fe:5f:47:c9:2f:a9:
97:3b:23:6c:b0:84:ad:f9:9d:a9:2b:0d:14:fb:bd:
3c:6c:07:cc:af:68:c9:a1:3a:af:33:7f:68:0c:77:
75:85:97:1a:16:76:2f:16:84:2d:07:cc:99:f3:a4:
be:a9:ca:7d:c5:35:e0:3c:10:f5:3f:14:f1:19:a7:
d8:f0:a8:80:e9:fe:10:79:8f:82:f1:1a:35:f8:09:
4c:bf:2e:e7:3e:0b:ba:62:a8:3e:11:81:c5:01:93:
42:84:3b:c4:e6:34:77:88:ed:88:95:d2:01:78:1b:
1d:43:55:fd:63:f2:8d:68:5c:ca:e8:70:28:01:d9:
4e:54:28:e8:d3:fa:8d:e7:be:2a:78:af:4f:4a:9a:
4c:b0:0c:fe:da:df:32:22:25:1b:8a:b4:dc:1c:a6:
2c:6a:1b:28:b8:fe:be:6e:b1:de:4b:d6:75:19:2c:
0b:8f:aa:87:db:af:be:48:77:2b:20:f7:39:9f:36:
f5:10:80:6c:73:2f:27:90:dc:7b:16:45:89:01:18:
e2:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:81:33:86:B1:C8:C8:C7:00:46:0D:A7:65:62:AB:80:3F:FB:28:8C
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS200019.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.26.194.0/24
Signature Algorithm: sha256WithRSAEncryption
78:17:04:d3:5b:6d:9c:a9:71:6f:5b:26:94:e8:e9:b4:b1:a7:
64:ef:4d:9a:4c:c1:c6:3c:71:79:77:dd:78:cb:32:b5:bd:87:
fc:80:80:6a:b5:e2:34:49:26:0d:d3:c9:e2:b7:d2:e2:ec:5e:
fa:7b:9d:e6:4c:0f:3e:60:52:2a:39:fc:f6:9e:83:3f:aa:f9:
30:3e:35:4b:58:b5:13:2c:4b:cb:91:6a:e8:5b:12:cd:9a:6b:
2f:3d:3e:64:c0:73:c5:7a:31:47:b0:38:f3:f2:2b:48:cd:6a:
9d:f5:b7:3b:67:0d:cc:65:31:c1:62:ee:76:17:c9:60:9c:a8:
17:ad:22:73:a9:f4:f4:48:23:50:9c:79:5a:77:df:78:65:a5:
c4:45:45:db:05:da:9c:91:ef:21:1b:15:df:6d:08:e6:e0:da:
0d:b8:52:4f:84:73:7e:1d:e0:f5:8e:93:52:81:a6:85:69:50:
69:a1:3b:54:a0:07:eb:c7:21:f6:18:a6:2c:5c:29:4c:ae:5b:
a4:bf:7b:79:00:27:99:5d:54:a4:2a:bc:5e:61:a9:d6:bd:cb:
c1:e6:5a:95:91:13:cd:fe:74:ca:1e:c3:ef:c6:dd:2f:83:87:
a6:09:54:dc:bf:55:1c:79:ed:5a:eb:e9:9a:dc:7f:bf:a8:be:
4a:ad:07:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 8 04:58:42 2025 by rpki-client on console.sobornost.net