Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS212238.roa
File: AS212238.roa (raw, json)
Hash identifier: ShWNGs6sl8XBYgV/4wpAG99HD8X9piUmUCmJ8BMAdJc=
Subject key identifier: FE:3A:7B:B9:FE:3C:3E:DD:D4:A8:2F:78:13:D1:91:C8:1E:41:F8:B7
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 1B6086D6876E6047B3F3A55C97B2513DAF02C417
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS212238.roa
Signing time: Tue 21 Jan 2025 09:45:05 +0000
ROA not before: Tue 21 Jan 2025 09:40:05 +0000
ROA not after: Tue 20 Jan 2026 09:45:05 +0000
asID: 212238
IP address blocks: 96.62.180.0/22 maxlen: 22
96.62.184.0/22 maxlen: 22
96.62.192.0/22 maxlen: 22
96.62.214.0/24 maxlen: 24
96.62.232.0/22 maxlen: 22
140.233.178.0/23 maxlen: 24
140.233.188.0/23 maxlen: 24
146.103.10.0/24 maxlen: 24
146.103.45.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:60:86:d6:87:6e:60:47:b3:f3:a5:5c:97:b2:51:3d:af:02:c4:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jan 21 09:40:05 2025 GMT
Not After : Jan 20 09:45:05 2026 GMT
Subject: CN=FE3A7BB9FE3C3EDDD4A82F7813D191C81E41F8B7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:7d:54:8b:e6:a1:75:fb:80:71:48:9c:15:2d:
71:03:cb:72:e2:1e:02:28:5b:48:8a:db:df:79:66:
e0:20:dd:ff:23:16:dc:a0:c5:c3:9a:c9:6d:69:34:
2d:c1:d0:81:a3:8e:13:e1:35:3f:d8:f3:3e:58:2e:
05:49:3e:9c:08:6c:23:d1:db:d9:23:69:7d:8c:65:
51:d8:5b:b5:97:be:ba:58:16:ce:0b:08:45:b7:31:
f6:6f:89:53:36:0c:ac:15:cc:50:7c:4d:8c:ea:9e:
44:dc:46:86:2c:ec:87:b9:2b:bc:16:29:b6:ce:91:
44:62:8d:63:0a:c4:19:73:bc:26:2b:69:a5:b4:4f:
79:81:49:9a:9d:66:16:65:6e:e1:fa:4c:ab:a8:ee:
75:ab:04:ef:c7:0b:a6:22:ea:33:1b:54:e7:e6:37:
37:a5:a8:c2:47:55:04:6d:38:ea:d8:30:83:69:01:
cc:29:30:78:f5:83:51:bc:cb:5e:03:b8:f1:94:8f:
44:f5:6f:61:68:c5:66:c1:59:63:d3:9d:d6:fc:25:
53:30:cb:52:7e:7f:eb:18:90:00:34:4d:07:0b:28:
57:58:5e:29:a0:59:83:50:cc:ff:0e:8b:82:41:cf:
15:aa:b9:7a:51:ff:36:fc:56:da:95:df:2a:93:6a:
4f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:3A:7B:B9:FE:3C:3E:DD:D4:A8:2F:78:13:D1:91:C8:1E:41:F8:B7
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS212238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.62.180.0-96.62.187.255
96.62.192.0/22
96.62.214.0/24
96.62.232.0/22
140.233.178.0/23
140.233.188.0/23
146.103.10.0/24
146.103.45.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:c3:81:e1:f1:62:82:74:ef:fd:62:5c:0e:41:c9:6b:00:6c:
38:63:ea:01:8e:92:29:58:4a:22:8c:cb:9a:ce:d4:ce:a9:a6:
97:1a:f0:39:e4:e2:82:f1:c3:1d:2e:0b:d4:83:c4:f4:8a:92:
83:5c:65:b4:41:4a:d8:ec:03:ce:28:b4:9b:d5:0c:0a:ca:2b:
59:83:17:65:1c:10:0c:e6:73:38:62:26:68:dd:74:d4:b8:64:
f7:72:e2:8b:33:ab:90:e3:22:e2:8e:a0:61:4f:34:2d:57:69:
f4:d7:aa:05:55:13:b0:96:8a:70:3e:22:c8:4b:5a:9f:4a:9c:
c8:04:29:b7:d4:ad:18:25:96:1b:02:84:b6:d9:3c:1c:8a:79:
7a:b5:24:6f:a1:42:3a:db:02:79:96:d8:da:5a:6b:04:35:c1:
3c:c6:63:b5:28:50:90:2b:21:63:4e:b6:24:53:df:84:d1:5a:
ad:01:d5:b1:ba:d8:4c:68:09:bf:11:cb:54:85:b0:68:f5:c4:
38:0b:12:44:af:5d:77:12:e3:9e:aa:fd:55:fa:df:5b:63:54:
d1:5b:db:c9:80:f6:12:71:59:52:1a:dc:d2:2a:f4:54:e8:17:
2a:d1:15:8c:5d:97:da:eb:f7:4a:f8:81:3e:44:de:4e:5a:e9:
76:e7:42:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:53:09 2025 by rpki-client