Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS36530.roa
File: AS36530.roa (raw, json)
Hash identifier: K1avGVnIpae52sIyTm/zU7LD4OLmZj+UJrNE5qH3Ykg=
Subject key identifier: 68:85:0B:A8:FF:53:58:35:3E:F9:71:1D:DE:25:55:D3:23:27:22:F2
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 3672A559E3833C757223642348CC7AD1F23B16DD
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS36530.roa
Signing time: Wed 12 Mar 2025 16:37:13 +0000
ROA not before: Wed 12 Mar 2025 16:32:13 +0000
ROA not after: Wed 11 Mar 2026 16:37:13 +0000
asID: 36530
IP address blocks: 82.26.72.0/23 maxlen: 24
82.26.78.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:72:a5:59:e3:83:3c:75:72:23:64:23:48:cc:7a:d1:f2:3b:16:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Mar 12 16:32:13 2025 GMT
Not After : Mar 11 16:37:13 2026 GMT
Subject: CN=68850BA8FF5358353EF9711DDE2555D3232722F2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:1a:41:b3:b8:c3:10:de:69:8d:63:c1:6f:d0:
07:ff:f2:a2:57:57:2c:c7:32:56:a0:7b:ec:97:98:
74:f8:e0:25:7f:cc:7c:53:e0:a3:db:90:76:3d:0c:
d3:af:44:a6:6a:4f:11:1b:7b:2d:65:93:9e:7e:eb:
6a:7a:9b:22:77:28:1c:82:88:d7:42:5c:ac:41:c1:
63:0b:b2:48:fc:37:75:ab:68:a6:97:a3:7c:4a:b4:
d1:75:cc:3d:5b:a1:e4:93:a3:07:5e:cd:b1:f0:07:
75:ca:54:72:de:9e:6a:38:34:9b:e6:2d:22:b5:5a:
9c:a5:6c:43:ee:ee:55:79:ce:b6:3a:5d:1d:56:81:
3e:97:0f:17:5c:b3:62:0e:d7:e1:97:60:14:52:af:
da:56:b7:a1:9f:29:44:a8:2e:22:ec:93:ea:a8:28:
06:69:af:de:90:d3:23:7a:81:4a:ee:b6:bc:c7:12:
80:bb:6a:27:0c:82:d8:29:a3:bf:1a:52:e5:6a:c7:
5f:96:80:0b:38:fc:89:70:4f:6a:2b:3c:9b:86:f6:
24:38:2e:26:ae:a0:6b:dd:8f:42:e6:8f:da:cf:f0:
34:1a:1f:aa:8d:d4:6a:de:5c:d4:70:d2:49:b9:0e:
5f:ee:a3:df:a5:60:b1:2a:1b:73:76:05:3e:ee:e2:
69:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:85:0B:A8:FF:53:58:35:3E:F9:71:1D:DE:25:55:D3:23:27:22:F2
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS36530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.26.72.0/23
82.26.78.0/23
Signature Algorithm: sha256WithRSAEncryption
31:f5:80:30:ab:dd:70:9b:7a:de:f5:f8:c4:2d:74:00:c2:52:
14:3b:68:5c:46:7b:02:2d:a0:f9:91:a9:39:63:94:49:fc:78:
7d:a1:73:93:52:e9:78:8d:5f:27:5f:e0:b6:c0:a1:6d:a0:73:
05:b3:2c:3b:cc:1c:c2:94:a7:0d:da:84:dd:ba:e5:0a:5d:c8:
9a:9c:49:86:f7:89:16:96:aa:45:50:20:80:b5:b7:70:77:9b:
85:c8:bd:91:f6:97:46:6e:f1:c5:e7:4f:47:5e:88:1d:9a:6b:
c6:c4:b6:c6:ef:e2:f6:f1:9d:25:91:5f:dd:65:38:c7:c9:3f:
22:2b:ea:7a:fa:63:9c:47:2a:6c:b2:17:8d:32:0b:e3:91:06:
05:91:fe:a5:44:38:d4:79:63:a6:93:31:63:9d:46:73:11:d3:
ed:07:9f:05:72:64:e4:1d:19:48:1c:d7:73:da:e9:c4:21:e4:
11:a6:19:08:82:76:be:8c:80:55:7e:7c:9d:c7:dc:b3:5a:35:
f4:51:d8:03:b4:f2:46:c1:cf:bd:6d:b1:da:74:69:9a:f0:c9:
d3:23:be:aa:1d:fe:29:16:ce:f7:e6:c6:d2:4b:85:0d:79:52:
95:ff:f7:7d:49:1d:25:02:96:77:b0:27:0b:bb:d0:18:84:46:
0c:3d:15:cb
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgIUNnKlWeODPHVyI2QjSMx60fI7Ft0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNTAzMTIxNjMyMTNaFw0yNjAzMTExNjM3MTNaMDMxMTAvBgNV
BAMTKDY4ODUwQkE4RkY1MzU4MzUzRUY5NzExRERFMjU1NUQzMjMyNzIyRjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUGkGzuMMQ3mmNY8Fv0Af/8qJX
VyzHMlage+yXmHT44CV/zHxT4KPbkHY9DNOvRKZqTxEbey1lk55+62p6myJ3KByC
iNdCXKxBwWMLskj8N3WraKaXo3xKtNF1zD1boeSTowdezbHwB3XKVHLenmo4NJvm
LSK1WpylbEPu7lV5zrY6XR1WgT6XDxdcs2IO1+GXYBRSr9pWt6GfKUSoLiLsk+qo
KAZpr96Q0yN6gUrutrzHEoC7aicMgtgpo78aUuVqx1+WgAs4/IlwT2orPJuG9iQ4
LiauoGvdj0Lmj9rP8DQaH6qN1GreXNRw0km5Dl/uo9+lYLEqG3N2BT7u4mnlAgMB
AAGjggIPMIICCzAdBgNVHQ4EFgQUaIULqP9TWDU++XEd3iVV0yMnIvIwHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMzY1MzAucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwDBAFSGkgD
BAFSGk4wDQYJKoZIhvcNAQELBQADggEBADH1gDCr3XCbet71+MQtdADCUhQ7aFxG
ewItoPmRqTljlEn8eH2hc5NS6XiNXydf4LbAoW2gcwWzLDvMHMKUpw3ahN265Qpd
yJqcSYb3iRaWqkVQIIC1t3B3m4XIvZH2l0Zu8cXnT0deiB2aa8bEtsbv4vbxnSWR
X91lOMfJPyIr6nr6Y5xHKmyyF40yC+ORBgWR/qVEONR5Y6aTMWOdRnMR0+0HnwVy
ZOQdGUgc13Pa6cQh5BGmGQiCdr6MgFV+fJ3H3LNaNfRR2AO08kbBz71tsdp0aZrw
ydMjvqod/ikWzvfmxtJLhQ15UpX/931JHSUClnewJwu70BiERgw9Fcs=
-----END CERTIFICATE-----
Generated at Sun Apr 6 09:30:52 2025 by rpki-client