Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS26042.roa
File: AS26042.roa (raw, json)
Hash identifier: fNJxHfXx93kWwcQnGjdK7bx/KVBH1sOplhFGaSA2oPo=
Subject key identifier: 72:C8:2F:E5:46:3E:8A:D9:A4:5E:74:67:7E:F2:5C:D5:6D:8D:87:25
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 7D93FDF2A0148BF2738CD21CF540B093EEC73C46
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS26042.roa
Signing time: Wed 17 Jan 2024 10:53:26 +0000
ROA not before: Wed 17 Jan 2024 10:48:26 +0000
ROA not after: Wed 15 Jan 2025 10:53:26 +0000
asID: 26042
IP address blocks: 191.96.204.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:93:fd:f2:a0:14:8b:f2:73:8c:d2:1c:f5:40:b0:93:ee:c7:3c:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Jan 17 10:48:26 2024 GMT
Not After : Jan 15 10:53:26 2025 GMT
Subject: CN=72C82FE5463E8AD9A45E74677EF25CD56D8D8725
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:dc:93:e8:ce:fb:e6:88:70:50:df:3e:55:69:
d9:f7:bf:f5:b3:96:e9:35:d8:1d:26:54:71:67:b3:
22:bb:79:26:e0:ad:58:56:e3:14:3c:22:3a:5e:b6:
03:56:b4:54:79:59:72:65:84:21:e8:c5:01:4d:d2:
60:ae:4d:1e:b8:28:73:0e:17:ef:cb:03:0e:90:3e:
d9:c4:5c:f4:19:08:98:ec:c8:67:ee:91:b2:c5:c2:
ae:a5:97:c2:1e:f9:d8:15:1d:03:7c:d9:73:66:71:
38:43:eb:9c:13:28:9f:a0:fc:8b:b4:b0:f6:62:f7:
25:f5:25:76:45:f7:b7:59:eb:0a:71:29:07:f0:6b:
98:a0:55:46:07:dd:92:55:b7:c2:9e:5d:fd:56:1c:
c0:17:f7:0f:f9:65:65:9d:24:90:38:ac:2b:ff:01:
28:45:87:db:5f:72:87:1a:7a:9c:0d:0f:85:23:3e:
02:fb:7c:4c:5f:da:d8:47:69:50:56:53:0f:e9:2c:
6e:62:53:b5:bc:90:d1:c0:7d:82:04:a8:36:af:81:
6b:b5:68:e7:8a:a0:85:39:1a:bf:11:d1:34:45:bd:
b9:10:01:43:c4:62:df:74:9e:53:fc:1d:8e:2d:2c:
fb:6a:35:9d:3f:11:54:07:2d:58:25:27:62:bd:42:
94:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:C8:2F:E5:46:3E:8A:D9:A4:5E:74:67:7E:F2:5C:D5:6D:8D:87:25
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS26042.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.96.204.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:df:e1:0d:ad:e1:fe:ba:53:6e:a5:1c:ef:bf:54:2f:ad:6d:
11:8e:d9:1e:66:1e:74:a0:11:33:51:9c:5b:d6:9a:e4:dc:5d:
df:75:a9:ca:91:43:ff:32:79:5a:8a:f7:6d:b5:d6:ce:64:77:
50:6f:63:6e:9e:af:dc:65:22:98:10:e3:8f:53:d4:13:e7:b9:
3f:e6:f5:fa:ef:de:33:99:c2:6a:f0:ea:b4:1f:4f:21:ae:9b:
3a:99:17:97:d6:61:fc:7a:03:63:d4:9f:8c:0c:0c:81:da:aa:
53:59:b7:6b:90:42:6c:9d:73:b7:ef:37:44:4b:bf:06:78:e2:
13:25:66:7f:9c:02:ef:8c:81:80:39:b5:30:6d:9d:42:01:38:
7b:e4:0b:80:88:cf:88:9f:a5:5d:63:05:10:40:71:9c:04:53:
86:f4:20:aa:fb:1d:43:df:1e:94:7f:bc:49:5d:39:45:84:13:
10:21:25:76:b2:79:2e:94:c4:7f:f4:76:80:68:f9:70:31:4e:
83:37:c9:0a:8d:b1:b0:ea:b7:24:38:02:61:1e:ea:11:b1:63:
ea:c4:59:74:8e:43:2f:1c:0e:59:6c:fe:f6:76:ff:b1:0e:8f:
df:4c:b3:cd:30:84:1f:a6:9f:88:5a:a3:63:8f:c1:3d:fb:5e:
9b:93:cc:55
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgIUfZP98qAUi/JzjNIc9UCwk+7HPEYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh
NDFiYmEwYTAeFw0yNDAxMTcxMDQ4MjZaFw0yNTAxMTUxMDUzMjZaMDMxMTAvBgNV
BAMTKDcyQzgyRkU1NDYzRThBRDlBNDVFNzQ2NzdFRjI1Q0Q1NkQ4RDg3MjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt3JPozvvmiHBQ3z5Vadn3v/Wz
luk12B0mVHFnsyK7eSbgrVhW4xQ8IjpetgNWtFR5WXJlhCHoxQFN0mCuTR64KHMO
F+/LAw6QPtnEXPQZCJjsyGfukbLFwq6ll8Ie+dgVHQN82XNmcThD65wTKJ+g/Iu0
sPZi9yX1JXZF97dZ6wpxKQfwa5igVUYH3ZJVt8KeXf1WHMAX9w/5ZWWdJJA4rCv/
AShFh9tfcocaepwND4UjPgL7fExf2thHaVBWUw/pLG5iU7W8kNHAfYIEqDavgWu1
aOeKoIU5Gr8R0TRFvbkQAUPEYt90nlP8HY4tLPtqNZ0/EVQHLVglJ2K9QpQTAgMB
AAGjggIJMIICBTAdBgNVHQ4EFgQUcsgv5UY+itmkXnRnfvJc1W2NhyUwHwYDVR0j
BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj
NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR
YnVnby5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt
NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTMjYwNDIucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC/YMww
DQYJKoZIhvcNAQELBQADggEBAGvf4Q2t4f66U26lHO+/VC+tbRGO2R5mHnSgETNR
nFvWmuTcXd91qcqRQ/8yeVqK92211s5kd1BvY26er9xlIpgQ449T1BPnuT/m9frv
3jOZwmrw6rQfTyGumzqZF5fWYfx6A2PUn4wMDIHaqlNZt2uQQmydc7fvN0RLvwZ4
4hMlZn+cAu+MgYA5tTBtnUIBOHvkC4CIz4ifpV1jBRBAcZwEU4b0IKr7HUPfHpR/
vEldOUWEExAhJXayeS6UxH/0doBo+XAxToM3yQqNsbDqtyQ4AmEe6hGxY+rEWXSO
Qy8cDlls/vZ2/7EOj99Ms80whB+mn4hao2OPwT37XpuTzFU=
-----END CERTIFICATE-----
Generated at Sat Apr 5 04:30:21 2025 by rpki-client