Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214654.roa
File: AS214654.roa (raw, json)
Hash identifier: 26OS0lVIuWBpL36V6r/YNhm6bdhcjbbALgguOaJKq0I=
Subject key identifier: 80:7A:DF:7A:3F:02:80:33:0C:AF:C4:5A:F5:DC:8E:1C:D0:44:47:41
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 1155604BC22B7D133F414B71C1DE3DDE0C008298
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214654.roa
Signing time: Mon 07 Apr 2025 07:49:47 +0000
ROA not before: Mon 07 Apr 2025 07:44:47 +0000
ROA not after: Mon 06 Apr 2026 07:49:47 +0000
asID: 214654
IP address blocks: 82.26.87.0/24 maxlen: 24
82.26.91.0/24 maxlen: 24
82.26.93.0/24 maxlen: 24
82.26.94.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:55:60:4b:c2:2b:7d:13:3f:41:4b:71:c1:de:3d:de:0c:00:82:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Apr 7 07:44:47 2025 GMT
Not After : Apr 6 07:49:47 2026 GMT
Subject: CN=807ADF7A3F0280330CAFC45AF5DC8E1CD0444741
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:24:79:e5:9b:74:f8:34:be:24:04:cb:fe:4e:
77:b8:82:58:44:d1:f7:6f:23:f7:55:03:7d:4f:25:
32:a1:68:36:08:e2:6c:f1:10:b7:e1:a7:5e:41:78:
ca:e0:05:49:67:6c:9e:65:39:11:79:a2:40:c1:30:
37:3e:da:4f:32:b6:89:a3:34:e5:9d:f4:ed:65:17:
9f:59:17:2d:86:09:38:21:5c:09:da:60:00:97:c5:
04:93:fa:6d:99:93:18:27:f6:bb:a2:32:6d:30:e3:
99:8f:af:97:60:35:f2:0b:0c:c9:79:4a:2a:34:d4:
00:55:69:cb:53:52:1d:c0:a2:40:b3:dd:44:07:e0:
f5:18:a5:39:94:b1:08:48:8b:23:49:e3:34:89:03:
a5:55:86:ef:e2:7c:ef:ab:9b:d7:43:54:d2:19:d9:
88:a7:60:b6:0e:fa:ee:95:13:58:0c:0e:a8:bb:52:
55:1d:ca:33:ed:6e:4e:5a:24:4e:e4:18:4a:e2:af:
c6:05:d8:ea:91:79:08:1e:e0:2c:41:96:88:26:8b:
f7:c2:8c:96:b1:3e:2f:9d:76:f5:ed:1a:23:0e:0b:
2e:b4:c0:5e:d5:a7:76:a1:1b:ad:27:81:69:6d:c9:
c4:df:f2:99:86:80:e0:48:bc:6f:0c:3d:d1:7b:b9:
f2:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:7A:DF:7A:3F:02:80:33:0C:AF:C4:5A:F5:DC:8E:1C:D0:44:47:41
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214654.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.26.87.0/24
82.26.91.0/24
82.26.93.0-82.26.94.255
Signature Algorithm: sha256WithRSAEncryption
08:0f:ba:c0:ad:9d:a2:24:19:d2:a6:5c:a6:6e:8e:87:6f:fe:
2e:e2:fd:95:15:bd:f7:40:7a:25:5d:47:ee:9f:44:97:0b:05:
6d:09:6a:63:09:48:9a:41:d2:02:e3:71:d3:d0:2b:0f:96:06:
d9:90:19:3a:ae:34:1c:02:32:e6:92:16:0f:d1:80:e6:72:8b:
0b:c4:37:13:cb:0e:c3:b8:b4:92:8d:d9:d2:59:2b:74:92:82:
08:3f:10:09:55:6f:97:3d:07:27:48:70:9c:9f:1f:bb:b3:71:
cb:62:ac:85:cb:74:8b:f6:01:0c:46:03:60:f8:c1:7a:16:f1:
10:ac:49:eb:eb:dd:ff:d1:47:60:34:63:31:9f:c2:90:91:39:
f8:2f:a7:e3:99:78:89:c4:1d:6f:31:79:4f:67:26:4b:84:dc:
28:8f:c6:d8:5d:43:04:0f:db:19:d7:89:2c:aa:a5:35:c7:32:
ff:d8:b1:fb:2f:d3:c2:b0:65:fd:46:71:1d:d4:89:b7:57:fb:
a1:da:0d:27:89:cc:e2:d2:0f:89:bb:66:c7:ec:d3:b2:0a:81:
9d:de:cd:d6:c0:fd:b8:bd:19:86:75:b4:c9:ea:97:81:0e:c2:
b9:84:c0:28:2f:bb:34:79:4b:c5:c1:8e:da:ed:90:11:e7:dc:
fc:6d:89:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:34:27 2025 by rpki-client on console.sobornost.net