Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS212027.roa
File: AS212027.roa (raw, json)
Hash identifier: LkPrwwL7X+C1IovdJKEvwX0or5rbUO5FvePgENFxV+c=
Subject key identifier: 76:06:66:72:0A:43:B2:D6:B8:F1:05:29:BC:F4:4F:A7:11:61:3E:A3
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 2E5BC34104268D1AB5A525F4007C925137E82674
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS212027.roa
Signing time: Tue 18 Feb 2025 15:41:02 +0000
ROA not before: Tue 18 Feb 2025 15:36:02 +0000
ROA not after: Tue 17 Feb 2026 15:41:02 +0000
asID: 212027
IP address blocks: 82.26.134.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:5b:c3:41:04:26:8d:1a:b5:a5:25:f4:00:7c:92:51:37:e8:26:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Feb 18 15:36:02 2025 GMT
Not After : Feb 17 15:41:02 2026 GMT
Subject: CN=760666720A43B2D6B8F10529BCF44FA711613EA3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:0c:35:ca:4e:aa:e3:4c:c9:df:e2:25:0e:69:
f4:ef:bf:d1:0f:ac:5f:a6:b6:36:81:75:5f:f8:ba:
c0:8b:a3:b5:d3:de:84:c2:78:15:9c:93:3e:03:e5:
5c:d2:a2:d3:4f:ab:85:57:49:af:08:f8:55:40:71:
c3:1b:38:e7:8e:fe:a1:c3:bb:16:86:57:b2:1d:ca:
76:87:b4:5e:6e:f4:2d:5a:71:f4:90:d7:6f:18:d6:
85:a9:b1:48:18:7c:61:79:1f:5e:1e:cb:53:2f:29:
24:2b:79:36:2b:6f:b8:85:d8:71:55:ec:b8:86:a3:
3f:23:1b:b6:ef:c1:92:06:58:de:84:c7:0e:38:19:
eb:37:b2:db:c9:d2:20:d6:b3:44:5d:37:17:31:bb:
46:3e:bf:47:94:30:c5:5c:73:ff:25:e9:ae:58:77:
fe:0e:35:ec:4a:4a:9f:9e:3a:bc:d9:10:7a:db:4f:
34:d6:0f:1e:1d:7e:66:d0:fa:90:ea:a7:a4:d3:96:
48:05:22:d1:41:9d:72:98:0a:cf:94:b3:39:4c:16:
8e:39:cb:e6:b7:87:34:e6:ee:7c:67:85:9a:f1:1f:
ec:35:4b:f8:70:02:41:b8:f5:13:d1:01:b0:82:95:
a7:fb:2f:d5:99:12:13:83:65:de:73:e6:44:3d:80:
66:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:06:66:72:0A:43:B2:D6:B8:F1:05:29:BC:F4:4F:A7:11:61:3E:A3
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS212027.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.26.134.0/24
Signature Algorithm: sha256WithRSAEncryption
76:c8:63:ff:6a:35:fb:e1:d3:4c:ad:f1:a7:1d:ed:9c:95:c9:
25:3d:b9:8b:c5:b9:64:69:27:fb:45:1b:72:86:aa:8f:78:3c:
ec:83:29:2e:20:ba:1d:b1:e0:57:5e:ef:6f:5a:db:db:31:00:
ef:fa:0c:b9:02:f0:7a:1d:5f:9d:94:b8:4e:59:6e:c6:99:84:
25:15:4e:3b:c2:fd:e3:5b:50:c5:c7:21:73:9c:3f:13:d2:e0:
fe:3f:3e:7a:af:b0:51:d1:55:de:57:92:03:02:0c:50:e7:bd:
d4:7a:eb:21:68:e4:c8:4a:46:e8:6f:71:b4:1a:d0:ff:e1:33:
81:fb:4f:54:c7:6f:a8:18:55:0d:89:c2:dc:96:02:28:53:22:
08:30:e6:5d:27:7d:2e:3f:4f:13:22:f8:8f:38:4b:94:25:4a:
a3:68:50:2c:7f:00:3d:61:42:c0:0b:48:e2:e9:a5:0d:c9:f0:
cd:fc:ff:fa:75:bc:5f:73:69:96:60:f8:0a:97:56:c9:2b:99:
b9:c4:5c:4c:71:50:d4:b8:9d:6d:f6:d3:ac:02:59:79:ef:3c:
10:fe:54:22:90:26:b1:0f:5d:b9:9f:80:66:20:d8:1d:06:00:
6a:e2:b0:04:0b:1a:1f:5d:4f:3d:5c:01:ab:8d:d7:6f:2a:f2:
5b:b3:7c:4b
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIULlvDQQQmjRq1pSX0AHySUTfoJnQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNTAyMTgxNTM2MDJaFw0yNjAyMTcxNTQxMDJaMDMxMTAvBgNV
BAMTKDc2MDY2NjcyMEE0M0IyRDZCOEYxMDUyOUJDRjQ0RkE3MTE2MTNFQTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbDDXKTqrjTMnf4iUOafTvv9EP
rF+mtjaBdV/4usCLo7XT3oTCeBWckz4D5VzSotNPq4VXSa8I+FVAccMbOOeO/qHD
uxaGV7IdynaHtF5u9C1acfSQ128Y1oWpsUgYfGF5H14ey1MvKSQreTYrb7iF2HFV
7LiGoz8jG7bvwZIGWN6Exw44Ges3stvJ0iDWs0RdNxcxu0Y+v0eUMMVcc/8l6a5Y
d/4ONexKSp+eOrzZEHrbTzTWDx4dfmbQ+pDqp6TTlkgFItFBnXKYCs+UszlMFo45
y+a3hzTm7nxnhZrxH+w1S/hwAkG49RPRAbCClaf7L9WZEhODZd5z5kQ9gGYVAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUdgZmcgpDsta48QUpvPRPpxFhPqMwHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjEyMDI3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUhqG
MA0GCSqGSIb3DQEBCwUAA4IBAQB2yGP/ajX74dNMrfGnHe2clcklPbmLxblkaSf7
RRtyhqqPeDzsgykuILodseBXXu9vWtvbMQDv+gy5AvB6HV+dlLhOWW7GmYQlFU47
wv3jW1DFxyFznD8T0uD+Pz56r7BR0VXeV5IDAgxQ573UeushaOTISkbob3G0GtD/
4TOB+09Ux2+oGFUNicLclgIoUyIIMOZdJ30uP08TIviPOEuUJUqjaFAsfwA9YULA
C0ji6aUNyfDN/P/6dbxfc2mWYPgKl1bJK5m5xFxMcVDUuJ1t9tOsAll57zwQ/lQi
kCaxD125n4BmINgdBgBq4rAECxofXU89XAGrjddvKvJbs3xL
-----END CERTIFICATE-----
Generated at Sat Mar 8 04:58:42 2025 by rpki-client on console.sobornost.net