Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS11878.roa
File: AS11878.roa (raw, json)
Hash identifier: uKpWLsUUAQ6vktFyFFgi+1AsrjJs5nRkoMieUv8iZfc=
Subject key identifier: 80:0D:D6:6C:2E:89:57:71:33:09:74:FB:E4:08:0E:A9:33:17:9C:C3
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 65945DBA57C74904D4E40CFF0892E3DF7210CF7B
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS11878.roa
Signing time: Tue 11 Feb 2025 00:22:11 +0000
ROA not before: Tue 11 Feb 2025 00:17:11 +0000
ROA not after: Tue 10 Feb 2026 00:22:11 +0000
asID: 11878
IP address blocks: 82.26.166.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:94:5d:ba:57:c7:49:04:d4:e4:0c:ff:08:92:e3:df:72:10:cf:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Feb 11 00:17:11 2025 GMT
Not After : Feb 10 00:22:11 2026 GMT
Subject: CN=800DD66C2E895771330974FBE4080EA933179CC3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:7b:ad:4e:57:f6:2e:1e:c7:40:a9:6f:b0:35:
b8:93:cb:24:27:de:59:85:28:9d:55:6e:1e:8f:65:
fd:0e:a9:62:38:0c:a6:26:57:3e:fc:46:70:ad:e2:
cb:1e:25:51:cc:63:3f:74:22:00:10:a0:79:6b:39:
23:d5:8b:36:9f:af:10:dd:c4:25:6e:96:a1:f6:d4:
16:07:fc:27:96:93:6d:5e:3b:ed:4e:bd:00:02:f2:
bd:0d:83:ca:79:66:2a:ce:b4:f1:57:0a:82:2b:fe:
46:74:a7:25:ea:a5:d4:dd:e2:64:60:71:61:ae:2e:
a1:e8:3c:c3:14:d2:da:bc:24:84:04:55:ec:f7:7a:
52:71:6d:ab:33:18:58:8b:4d:c2:13:93:56:90:f8:
3f:f2:e4:7e:21:15:1a:29:2a:6b:e2:31:73:a5:e2:
b2:66:a9:ca:2e:20:47:c2:30:7b:13:22:55:ea:25:
58:53:8a:c6:2f:05:13:7c:24:37:2e:4c:02:d8:f6:
fd:f9:22:0a:5e:c3:52:77:d1:64:af:79:ec:1c:4a:
b9:40:78:ea:a4:b0:ea:4a:76:30:d0:d6:64:fc:4e:
e3:a3:77:56:70:ba:bd:e0:28:fc:61:51:e5:c5:b0:
c9:a2:ee:d3:01:32:9e:05:ab:09:63:34:f4:01:a5:
16:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:0D:D6:6C:2E:89:57:71:33:09:74:FB:E4:08:0E:A9:33:17:9C:C3
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS11878.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.26.166.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:49:88:1b:fd:26:1e:89:31:bb:c7:5a:65:64:55:89:de:d8:
f5:0e:cc:d0:c7:e2:ab:d7:92:d5:97:2d:fd:67:d9:5b:aa:56:
59:b4:34:1a:94:57:2f:e4:50:88:9c:24:08:2f:ed:7f:77:82:
d5:cd:51:dc:ba:64:15:f9:bc:c2:a6:1c:db:a1:95:4c:50:2c:
36:d5:91:19:52:25:73:e5:15:c2:6f:83:aa:84:64:b9:70:4d:
c9:7d:c8:31:46:3a:57:2f:55:dd:7a:7a:96:90:86:1b:01:b9:
36:cb:ed:78:45:d2:7e:4e:39:e0:26:04:6d:03:4a:5f:10:91:
e3:3f:04:af:4a:37:78:0e:1c:76:cd:07:ee:9b:4d:8b:83:6e:
c4:22:ff:99:7f:dc:dc:1b:44:2b:4c:19:28:54:d0:c3:40:b5:
03:c5:50:39:57:9c:06:58:78:0a:ec:69:b2:28:b5:de:6f:7f:
11:1d:c8:d2:fc:08:e4:88:31:03:1e:49:67:4c:09:92:d5:9b:
88:c9:c7:94:1b:66:67:3a:cb:c9:78:ae:a8:69:44:08:0d:a9:
e3:28:0b:58:bd:92:e9:df:b1:9c:02:54:b7:12:f3:93:de:d0:
98:2f:e9:a4:0c:af:b0:0e:24:bf:cd:d9:9e:9c:7a:48:33:7c:
a4:aa:32:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:03:09 2025 by rpki-client