Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS29802.roa
File: AS29802.roa (raw, json)
Hash identifier: k5BGRLfLvdmWzTDn37yGOE1Q06lfGnAaz7vqXwX7LjU=
Subject key identifier: 3E:F6:94:CB:06:22:61:6B:5A:CD:D8:3D:8E:50:18:E8:51:34:64:A1
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 30305D00A0B132448BF077A849BF18D28104D215
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS29802.roa
Signing time: Mon 27 Jan 2025 13:29:29 +0000
ROA not before: Mon 27 Jan 2025 13:24:29 +0000
ROA not after: Mon 26 Jan 2026 13:29:29 +0000
asID: 29802
IP address blocks: 82.21.67.0/24 maxlen: 24
82.21.74.0/24 maxlen: 24
82.21.93.0/24 maxlen: 24
82.21.103.0/24 maxlen: 24
82.21.110.0/24 maxlen: 24
82.21.113.0/24 maxlen: 24
82.21.119.0/24 maxlen: 24
82.21.122.0/24 maxlen: 24
82.21.124.0/24 maxlen: 24
82.21.132.0/24 maxlen: 24
82.21.139.0/24 maxlen: 24
82.21.140.0/24 maxlen: 24
82.21.143.0/24 maxlen: 24
82.21.148.0/24 maxlen: 24
82.21.152.0/24 maxlen: 24
82.21.155.0/24 maxlen: 24
82.21.157.0/24 maxlen: 24
82.21.163.0/24 maxlen: 24
82.21.188.0/24 maxlen: 24
82.24.92.0/22 maxlen: 24
82.24.96.0/22 maxlen: 24
82.24.116.0/22 maxlen: 24
82.24.128.0/22 maxlen: 24
82.24.132.0/22 maxlen: 24
82.24.136.0/22 maxlen: 24
82.24.140.0/22 maxlen: 24
82.24.148.0/22 maxlen: 24
82.24.152.0/22 maxlen: 24
82.24.156.0/22 maxlen: 24
82.24.160.0/22 maxlen: 24
82.24.164.0/22 maxlen: 24
82.24.168.0/22 maxlen: 24
82.24.176.0/22 maxlen: 24
82.24.196.0/22 maxlen: 24
82.25.146.0/23 maxlen: 24
82.25.148.0/23 maxlen: 24
82.25.150.0/23 maxlen: 24
82.25.152.0/23 maxlen: 24
82.25.154.0/23 maxlen: 24
82.25.156.0/23 maxlen: 24
82.25.158.0/23 maxlen: 24
82.25.162.0/23 maxlen: 24
82.25.164.0/23 maxlen: 24
82.25.166.0/23 maxlen: 24
82.25.168.0/23 maxlen: 24
82.25.170.0/23 maxlen: 24
82.25.172.0/23 maxlen: 24
82.25.176.0/23 maxlen: 24
82.25.178.0/23 maxlen: 24
82.25.182.0/23 maxlen: 24
82.25.188.0/23 maxlen: 24
82.26.176.0/21 maxlen: 24
82.26.184.0/21 maxlen: 24
2a13:9500:3::/48 maxlen: 48
2a13:9500:6::/48 maxlen: 48
2a13:9500:7::/48 maxlen: 48
2a13:9500:8::/48 maxlen: 48
2a13:9500:9::/48 maxlen: 48
2a13:9500:a::/48 maxlen: 48
2a13:9500:b::/48 maxlen: 48
2a13:9500:c::/48 maxlen: 48
2a13:9500:d::/48 maxlen: 48
2a13:9500:e::/48 maxlen: 48
2a13:9500:f::/48 maxlen: 48
2a13:9500:10::/48 maxlen: 48
2a13:9500:1c::/48 maxlen: 48
2a13:9500:1d::/48 maxlen: 48
2a13:9500:1e::/48 maxlen: 48
2a13:9500:1f::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:30:5d:00:a0:b1:32:44:8b:f0:77:a8:49:bf:18:d2:81:04:d2:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jan 27 13:24:29 2025 GMT
Not After : Jan 26 13:29:29 2026 GMT
Subject: CN=3EF694CB0622616B5ACDD83D8E5018E8513464A1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:67:c0:6a:cb:f8:ff:bb:b3:f3:0a:ae:87:18:
5c:65:e6:54:39:27:19:7e:2a:b0:54:d4:25:ea:a2:
3a:61:9e:0e:6c:65:af:50:3b:91:5d:e0:4d:25:d5:
2f:14:78:97:79:c0:5e:dc:37:d1:b8:cf:3e:df:20:
56:de:35:0e:61:6d:40:a7:4c:e9:68:e5:15:99:fc:
e4:86:d8:1d:75:f1:2b:07:c0:27:17:e5:79:00:72:
33:9c:16:80:6a:a0:1d:d2:ba:ca:e0:ad:e5:a3:fc:
f1:e7:cb:cc:e5:07:8c:26:c4:52:6b:cc:fc:68:3c:
93:7f:cf:07:56:b5:98:cd:a3:54:f7:4d:4a:b4:54:
95:a2:64:3f:2e:60:86:74:d6:7b:be:4f:81:a4:dc:
3d:18:3b:9a:1a:73:b4:49:c4:7e:de:8f:67:fa:4e:
f0:b4:24:0e:e6:09:28:86:2d:6a:b2:43:4e:b7:77:
7f:c7:12:23:12:02:17:e4:6b:1a:c4:25:49:e4:fc:
fe:56:74:3f:90:3f:37:b9:c8:fe:2b:b9:92:a4:b1:
2d:25:34:e4:99:0c:52:a8:f2:05:22:d5:25:f9:36:
3c:a1:24:31:c1:01:50:cc:3b:e7:dc:f4:a6:85:99:
17:22:3a:c2:64:16:a9:4c:37:f7:86:f5:68:1f:34:
89:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:F6:94:CB:06:22:61:6B:5A:CD:D8:3D:8E:50:18:E8:51:34:64:A1
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS29802.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.67.0/24
82.21.74.0/24
82.21.93.0/24
82.21.103.0/24
82.21.110.0/24
82.21.113.0/24
82.21.119.0/24
82.21.122.0/24
82.21.124.0/24
82.21.132.0/24
82.21.139.0-82.21.140.255
82.21.143.0/24
82.21.148.0/24
82.21.152.0/24
82.21.155.0/24
82.21.157.0/24
82.21.163.0/24
82.21.188.0/24
82.24.92.0-82.24.99.255
82.24.116.0/22
82.24.128.0/20
82.24.148.0-82.24.171.255
82.24.176.0/22
82.24.196.0/22
82.25.146.0-82.25.159.255
82.25.162.0-82.25.173.255
82.25.176.0/22
82.25.182.0/23
82.25.188.0/23
82.26.176.0/20
IPv6:
2a13:9500:3::/48
2a13:9500:6::-2a13:9500:10:ffff:ffff:ffff:ffff:ffff
2a13:9500:1c::/46
Signature Algorithm: sha256WithRSAEncryption
7a:78:e5:80:92:e4:6e:0d:96:29:fd:11:7b:09:bb:a3:ab:8a:
68:a9:fb:06:ce:b4:97:36:0c:eb:bb:e1:74:5b:1c:cb:6a:d1:
83:4d:95:cc:e8:08:80:47:ba:7a:e9:5a:6e:b5:74:50:65:da:
10:91:90:64:f8:86:e6:5c:fb:c3:84:5f:a6:81:70:de:6b:f6:
e3:be:72:23:0a:b3:ab:45:85:df:88:13:b2:86:84:1f:28:09:
d7:78:c3:66:f5:3b:22:4a:b3:2a:7b:f0:57:d4:8c:82:7c:e6:
4d:fd:9d:da:3e:a6:9f:d2:cb:3a:34:f4:93:cd:dd:06:85:86:
1e:bd:3f:6a:cf:ab:d3:86:3f:9c:0d:cb:2d:0b:03:29:13:14:
d9:0d:b0:f7:17:88:49:6f:67:c5:5f:83:b5:94:16:a7:67:fb:
d0:98:9c:3b:54:f6:2c:a0:98:e6:e1:85:45:fb:56:41:e1:41:
c8:94:70:96:c0:fa:67:47:0e:85:95:ce:6c:1c:3f:94:38:56:
59:ae:6c:1f:b9:e4:b1:14:31:6f:a1:16:aa:4b:03:5a:be:eb:
57:52:02:28:b2:a6:2a:76:d4:b6:19:1f:46:ba:30:b1:2d:d8:
dc:58:c8:1b:1a:23:93:be:4d:a1:a3:7a:ac:7f:a0:b6:dc:e6:
2a:ce:8f:a6
-----BEGIN CERTIFICATE-----
MIIGCzCCBPOgAwIBAgIUMDBdAKCxMkSL8HeoSb8Y0oEE0hUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNTAxMjcxMzI0MjlaFw0yNjAxMjYxMzI5MjlaMDMxMTAvBgNV
BAMTKDNFRjY5NENCMDYyMjYxNkI1QUNERDgzRDhFNTAxOEU4NTEzNDY0QTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7Z8Bqy/j/u7PzCq6HGFxl5lQ5
Jxl+KrBU1CXqojphng5sZa9QO5Fd4E0l1S8UeJd5wF7cN9G4zz7fIFbeNQ5hbUCn
TOlo5RWZ/OSG2B118SsHwCcX5XkAcjOcFoBqoB3SusrgreWj/PHny8zlB4wmxFJr
zPxoPJN/zwdWtZjNo1T3TUq0VJWiZD8uYIZ01nu+T4Gk3D0YO5oac7RJxH7ej2f6
TvC0JA7mCSiGLWqyQ063d3/HEiMSAhfkaxrEJUnk/P5WdD+QPze5yP4ruZKksS0l
NOSZDFKo8gUi1SX5NjyhJDHBAVDMO+fc9KaFmRciOsJkFqlMN/eG9WgfNIldAgMB
AAGjggMVMIIDETAdBgNVHQ4EFgQUPvaUywYiYWtazdg9jlAY6FE0ZKEwHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjk4MDIucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwggEpBggrBgEFBQcBBwEB/wSCARgwggEUMIHjBAIAATCB
3AMEAFIVQwMEAFIVSgMEAFIVXQMEAFIVZwMEAFIVbgMEAFIVcQMEAFIVdwMEAFIV
egMEAFIVfAMEAFIVhDAMAwQAUhWLAwQAUhWMAwQAUhWPAwQAUhWUAwQAUhWYAwQA
UhWbAwQAUhWdAwQAUhWjAwQAUhW8MAwDBAJSGFwDBAJSGGADBAJSGHQDBARSGIAw
DAMEAlIYlAMEAlIYqAMEAlIYsAMEAlIYxDAMAwQBUhmSAwQFUhmAMAwDBAFSGaID
BAFSGawDBAJSGbADBAFSGbYDBAFSGbwDBARSGrAwLAQCAAIwJgMHACoTlQAAAzAS
AwcBKhOVAAAGAwcAKhOVAAAQAwcCKhOVAAAcMA0GCSqGSIb3DQEBCwUAA4IBAQB6
eOWAkuRuDZYp/RF7Cbujq4poqfsGzrSXNgzru+F0WxzLatGDTZXM6AiAR7p66Vpu
tXRQZdoQkZBk+IbmXPvDhF+mgXDea/bjvnIjCrOrRYXfiBOyhoQfKAnXeMNm9Tsi
SrMqe/BX1IyCfOZN/Z3aPqaf0ss6NPSTzd0GhYYevT9qz6vThj+cDcstCwMpExTZ
DbD3F4hJb2fFX4O1lBanZ/vQmJw7VPYsoJjm4YVF+1ZB4UHIlHCWwPpnRw6Flc5s
HD+UOFZZrmwfueSxFDFvoRaqSwNavutXUgIosqYqdtS2GR9GujCxLdjcWMgbGiOT
vk2ho3qsf6C23OYqzo+m
-----END CERTIFICATE-----
Generated at Fri Apr 25 18:17:39 2025 by rpki-client