Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS40264.roa
File: AS40264.roa (raw, json)
Hash identifier: xo0LS8w3/newRQgOGQYGEklU4vAf2VBZD/DWQ9gZaXA=
Subject key identifier: C0:41:D7:86:59:E1:4B:97:CB:8D:E0:C7:25:87:A4:58:29:95:AD:85
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 359900B4292B270371960686CF394ABCD5201FBC
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS40264.roa
Signing time: Thu 13 Feb 2025 12:10:16 +0000
ROA not before: Thu 13 Feb 2025 12:05:16 +0000
ROA not after: Thu 12 Feb 2026 12:10:16 +0000
asID: 40264
IP address blocks: 82.27.4.0/22 maxlen: 22
82.27.12.0/22 maxlen: 22
82.29.16.0/22 maxlen: 22
82.29.32.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:99:00:b4:29:2b:27:03:71:96:06:86:cf:39:4a:bc:d5:20:1f:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Feb 13 12:05:16 2025 GMT
Not After : Feb 12 12:10:16 2026 GMT
Subject: CN=C041D78659E14B97CB8DE0C72587A4582995AD85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c1:25:a1:13:07:41:52:12:56:1f:ea:dc:f1:
8a:df:60:66:a1:e8:f4:7c:69:86:52:11:f3:e9:e1:
d8:5e:b0:84:9d:da:75:23:0c:d5:c5:ab:0e:f0:57:
fc:99:9c:ac:d8:33:1c:3d:a4:72:ac:bc:5f:cf:05:
7a:cf:38:a0:fc:ef:77:18:da:4f:17:0a:6b:75:61:
61:5c:e1:4a:93:2e:96:15:f7:b9:31:7e:3e:07:09:
79:44:e1:5e:fb:99:4a:a3:5b:4c:a1:ef:83:b9:55:
e5:31:ea:1d:46:06:b5:ad:7e:19:b0:84:0c:2b:09:
ad:88:b3:ce:22:d6:e8:89:d3:d1:c7:2a:e1:e0:ef:
f4:a0:e5:70:28:d2:27:01:7a:4b:c1:d4:f5:0d:d0:
65:26:b9:e8:b8:b7:9c:20:45:21:b5:15:bf:63:de:
07:3f:a1:0a:b7:31:30:8a:48:28:c9:a2:81:fb:f4:
21:64:aa:9a:73:cd:7d:fc:56:d8:16:17:44:08:58:
8a:d0:61:01:f5:57:d1:3b:b8:4d:5f:6c:ce:b6:6f:
9d:56:86:27:24:0d:ee:5c:ae:13:b2:ff:4f:18:74:
c9:4c:e9:c9:94:5d:ff:05:a9:b7:5c:71:ba:0d:2c:
3b:6c:8e:1f:81:11:c5:e2:d6:40:e1:b9:57:14:83:
ea:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:41:D7:86:59:E1:4B:97:CB:8D:E0:C7:25:87:A4:58:29:95:AD:85
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS40264.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.27.4.0/22
82.27.12.0/22
82.29.16.0/22
82.29.32.0/22
Signature Algorithm: sha256WithRSAEncryption
59:12:5a:eb:3e:cf:eb:32:31:fd:c0:ef:eb:85:89:c9:78:33:
d0:6b:78:49:e4:2e:f8:16:b3:90:b9:32:7e:61:4c:0c:26:5e:
7e:30:da:69:d4:bf:49:7e:82:e7:01:4d:74:5e:2a:22:1f:01:
76:7e:03:10:de:4d:31:c3:50:4c:81:b9:f0:81:82:e4:73:91:
8d:d3:4b:bb:a6:16:ef:c4:a9:72:e6:f5:04:96:cb:85:d4:fc:
d6:98:4f:99:76:a3:2a:66:5f:38:22:56:05:ab:c7:a1:e2:df:
a5:91:70:a9:96:da:c0:90:ad:c6:10:dc:fc:ff:61:77:34:6c:
65:1f:e4:2f:1f:f5:ff:eb:e3:d3:12:50:76:4e:af:37:4b:f1:
29:bf:f1:de:0f:7c:94:f2:44:e8:46:68:87:dc:2e:7e:4c:38:
bc:1d:68:dd:d8:34:c9:fd:28:68:f1:08:7f:3d:f3:6a:56:9e:
5e:42:d7:7b:56:f0:1b:1d:17:64:6b:d0:40:db:39:b6:c5:45:
28:41:d3:b5:c3:a8:f4:14:c4:44:32:89:b2:49:98:44:51:c9:
49:8a:31:03:e5:c3:3e:22:1b:22:ff:35:77:55:0a:0f:3d:1f:
7c:ea:e7:0f:3a:2e:d4:b6:0b:3a:7f:d7:0e:07:dd:46:81:39:
8e:6e:5d:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:34:27 2025 by rpki-client on console.sobornost.net