Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS21859.roa
File: AS21859.roa (raw, json)
Hash identifier: cEcWBz+HFAEb4rpIwQZ8RzDfPHC6g6uqpDHLuA3t5B0=
Subject key identifier: 78:20:AC:2E:F5:5D:AD:4F:54:14:45:65:9C:E7:87:27:57:FF:81:E7
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 2CD22D2EFC86DD5E8DFB699CD00F5AACCBA54648
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS21859.roa
Signing time: Wed 05 Feb 2025 15:32:36 +0000
ROA not before: Wed 05 Feb 2025 15:27:36 +0000
ROA not after: Wed 04 Feb 2026 15:32:36 +0000
asID: 21859
IP address blocks: 82.26.77.0/24 maxlen: 24
82.26.89.0/24 maxlen: 24
82.26.165.0/24 maxlen: 24
82.26.172.0/24 maxlen: 24
82.27.204.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:d2:2d:2e:fc:86:dd:5e:8d:fb:69:9c:d0:0f:5a:ac:cb:a5:46:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Feb 5 15:27:36 2025 GMT
Not After : Feb 4 15:32:36 2026 GMT
Subject: CN=7820AC2EF55DAD4F541445659CE7872757FF81E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:7f:63:6f:38:56:8a:1b:72:98:58:d8:b2:d3:
76:74:c1:ea:bf:99:07:6f:15:aa:39:86:09:ee:44:
50:b7:b1:4f:c9:df:3e:6e:15:ef:e2:b5:74:ed:78:
6e:cb:f5:68:23:78:8e:04:bc:f6:c5:50:a4:76:cb:
9f:14:41:ad:40:97:a4:14:08:bb:1e:8b:21:ab:c8:
74:e5:41:79:83:25:90:0f:d4:e1:bf:2e:bd:54:4a:
22:e3:8f:12:25:64:bb:76:0b:df:c8:42:f3:a8:71:
75:a9:64:c2:84:2f:59:c1:89:59:18:d5:3f:13:ce:
08:21:87:df:41:28:f7:c7:43:4f:31:4d:e3:b4:01:
6e:2e:b2:89:9c:05:ae:d4:75:46:f3:fb:51:ea:07:
e7:89:17:ed:59:28:da:c3:1e:b1:ce:73:99:f4:ad:
e1:ae:60:19:6b:dc:39:b3:ec:fc:48:cc:70:ab:24:
f6:5e:0f:4f:89:cb:c5:2d:e0:25:6f:0d:54:c3:c9:
73:fb:1e:37:12:9c:97:c8:4b:90:73:db:76:d3:16:
32:f3:39:96:b4:bf:b1:e5:8e:df:67:83:4d:5b:46:
c0:4c:3a:33:92:76:aa:20:62:c5:5f:9e:dc:80:40:
1d:cd:ea:0c:a4:b2:1c:5a:ef:59:f2:e6:7b:4d:53:
8c:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:20:AC:2E:F5:5D:AD:4F:54:14:45:65:9C:E7:87:27:57:FF:81:E7
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS21859.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.26.77.0/24
82.26.89.0/24
82.26.165.0/24
82.26.172.0/24
82.27.204.0/24
Signature Algorithm: sha256WithRSAEncryption
64:68:48:21:49:f1:2b:2e:b7:a0:3f:33:84:73:7d:0f:45:ff:
a0:e2:ed:19:6d:82:0a:8d:5c:5a:a8:09:14:6d:c7:96:4d:e2:
fa:0e:b1:02:06:d0:e3:d1:55:84:88:6d:89:1a:86:ba:b7:55:
f8:17:0b:a7:26:91:a3:16:65:bb:d5:14:fc:dd:8a:50:44:2b:
88:84:92:43:d6:62:29:c2:dc:62:d3:28:74:75:55:96:a2:c0:
cc:7e:3b:5e:7e:fe:a7:62:d1:a3:7d:6c:0d:10:10:d7:f7:0c:
69:d3:59:4e:ac:b7:a0:08:88:b9:7c:18:95:5f:55:db:a9:d9:
e8:3c:f7:34:eb:86:98:0b:8d:63:bb:91:d1:49:6e:cc:f5:7e:
af:d0:0e:39:81:52:cd:ba:b1:5f:53:c8:0e:91:83:b6:a7:57:
ce:db:b4:8d:ce:cc:40:96:99:5b:4d:ca:77:5c:2d:fe:91:f4:
80:db:f2:ac:7d:12:32:69:01:a5:a7:28:32:5c:ed:9d:a6:d9:
75:3c:a6:5d:81:66:83:dd:4e:52:ef:5f:04:6f:d3:1a:26:a5:
46:0a:8f:2b:66:48:6b:f3:b1:ca:80:28:9c:93:96:1d:bb:4b:
01:0b:7f:3f:ae:cd:3c:5e:65:1b:5e:2a:a5:10:9d:4c:8c:a3:
7a:c7:99:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 8 04:58:42 2025 by rpki-client on console.sobornost.net