Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS212238.roa
File: AS212238.roa (raw, json)
Hash identifier: r3BiCX6DqBegXjnN4NPMCCFs1RPl00qOxy4jCMm6ns0=
Subject key identifier: 5A:12:E0:6D:7B:2C:E7:53:42:C0:C3:1F:95:F7:2B:0B:42:8E:6D:69
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 169FB42C6CA68883469324F33B94A0FFAAAE07EE
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS212238.roa
Signing time: Wed 08 Jan 2025 12:02:13 +0000
ROA not before: Wed 08 Jan 2025 11:57:13 +0000
ROA not after: Wed 07 Jan 2026 12:02:13 +0000
asID: 212238
IP address blocks: 46.202.249.0/24 maxlen: 24
46.202.250.0/24 maxlen: 24
46.203.0.0/24 maxlen: 24
46.203.7.0/24 maxlen: 24
46.203.34.0/24 maxlen: 24
46.203.40.0/24 maxlen: 24
46.203.73.0/24 maxlen: 24
46.203.79.0/24 maxlen: 24
46.203.103.0/24 maxlen: 24
46.203.115.0/24 maxlen: 24
46.203.147.0/24 maxlen: 24
46.203.154.0/24 maxlen: 24
46.203.157.0/24 maxlen: 24
46.203.185.0/24 maxlen: 24
46.203.190.0/24 maxlen: 24
46.203.195.0/24 maxlen: 24
91.124.129.0/24 maxlen: 24
91.124.144.0/24 maxlen: 24
91.124.187.0/24 maxlen: 24
92.112.57.0/24 maxlen: 24
92.112.92.0/24 maxlen: 24
92.112.137.0/24 maxlen: 24
92.112.143.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:9f:b4:2c:6c:a6:88:83:46:93:24:f3:3b:94:a0:ff:aa:ae:07:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Jan 8 11:57:13 2025 GMT
Not After : Jan 7 12:02:13 2026 GMT
Subject: CN=5A12E06D7B2CE75342C0C31F95F72B0B428E6D69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7b:b9:f9:63:8e:e9:9a:93:52:ed:65:4a:16:
c0:75:a8:3b:b4:fa:ca:b4:2a:4b:5f:2e:23:32:0d:
b1:c4:2b:2d:1d:cf:36:33:24:76:60:46:50:7c:01:
6c:4a:e9:6f:77:15:2a:85:ee:e4:07:d1:52:9d:22:
b6:5f:16:bd:6e:9e:80:dd:6e:65:b3:8e:53:10:15:
76:19:b4:a5:12:8a:8a:30:55:c1:fb:6d:ce:d9:5c:
a7:57:31:07:9d:68:6d:95:47:1f:38:ae:b3:03:6e:
9f:6a:f0:d9:25:d8:13:84:b7:3b:f8:38:cf:4e:6b:
fc:79:3b:d2:e1:63:be:5a:a7:6f:a6:b6:50:ae:9a:
e1:f4:d6:72:f7:c5:ce:b7:65:b9:d8:76:24:e8:d8:
18:39:41:a2:2a:77:c3:d9:ea:03:52:21:7c:2d:7c:
35:24:7a:ac:df:d9:9c:a0:bc:5b:a6:e8:7e:8c:8e:
92:0d:ea:74:d1:80:3d:96:de:c6:b3:53:ed:9c:d3:
e8:79:b4:e9:b8:0b:f2:fb:6c:cd:59:30:53:82:37:
29:a9:57:eb:d6:62:82:bf:e2:bf:34:1e:df:06:24:
f3:b9:3e:d7:02:58:cc:fa:b6:f5:56:c9:fa:16:90:
4c:53:fb:a8:83:2e:ed:ee:24:df:27:d2:a1:34:7f:
99:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:12:E0:6D:7B:2C:E7:53:42:C0:C3:1F:95:F7:2B:0B:42:8E:6D:69
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS212238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.202.249.0-46.202.250.255
46.203.0.0/24
46.203.7.0/24
46.203.34.0/24
46.203.40.0/24
46.203.73.0/24
46.203.79.0/24
46.203.103.0/24
46.203.115.0/24
46.203.147.0/24
46.203.154.0/24
46.203.157.0/24
46.203.185.0/24
46.203.190.0/24
46.203.195.0/24
91.124.129.0/24
91.124.144.0/24
91.124.187.0/24
92.112.57.0/24
92.112.92.0/24
92.112.137.0/24
92.112.143.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:e4:84:30:45:4c:df:cf:30:e1:25:f0:72:9e:ea:3c:b1:43:
43:4f:de:54:cb:37:a5:a1:86:39:22:5a:7a:7b:51:69:74:2e:
8a:3a:dd:e3:2b:72:79:6d:35:e6:36:8f:c6:24:de:ec:1b:d7:
23:4c:02:08:2b:c9:bb:b4:46:06:23:58:ca:64:d9:c3:c8:0a:
fe:fb:68:c1:fa:e3:29:72:30:c9:0a:e3:9f:6f:60:e3:e0:61:
b9:c0:28:7d:d6:55:b0:8b:72:b9:7f:8a:06:7f:54:a1:7e:2f:
4d:a0:83:07:f1:ee:73:fc:35:34:d1:c1:05:06:77:ba:9c:17:
de:dd:29:23:54:bd:3a:9d:d0:c8:9b:29:b4:e1:bc:5c:87:d1:
85:a7:91:62:cb:ee:75:00:d2:f9:ce:52:c7:6f:21:9a:66:9b:
6a:61:20:7a:81:a1:8d:f7:4d:89:e7:d6:e0:4d:17:9a:5f:4c:
bf:74:59:0a:4f:b3:09:9b:dd:a6:5f:ad:3b:81:95:e9:36:b0:
0a:0c:cd:d2:12:01:cb:d1:8e:f5:b4:56:05:77:e9:a6:70:af:
1f:ad:19:ef:28:95:63:a8:fe:bd:0c:38:49:e9:33:ae:51:3c:
7d:07:3a:7d:6c:df:7f:e0:32:80:9e:86:cf:b8:fe:65:4f:e2:
6c:40:03:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:04:36 2025 by rpki-client