Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS212238.roa
File: AS212238.roa (raw, json)
Hash identifier: IrxNulPjhRHs2QpwvGkCzR+jTP3+rAJv06rrnXA5fs4=
Subject key identifier: 2F:2B:AE:81:E3:DF:2E:B3:77:2F:BA:FD:32:A7:40:D6:A4:FD:F9:54
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 2F52E242805D6F211D6285215D3366257CAD91B8
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS212238.roa
Signing time: Thu 10 Apr 2025 00:00:20 +0000
ROA not before: Wed 09 Apr 2025 23:55:20 +0000
ROA not after: Thu 09 Apr 2026 00:00:20 +0000
asID: 212238
IP address blocks: 96.62.96.0/23 maxlen: 23
96.62.111.0/24 maxlen: 24
96.62.127.0/24 maxlen: 24
96.62.214.0/24 maxlen: 24
140.233.172.0/22 maxlen: 22
140.233.178.0/23 maxlen: 24
140.233.188.0/23 maxlen: 24
146.103.35.0/24 maxlen: 24
146.103.45.0/24 maxlen: 24
146.103.51.0/24 maxlen: 24
147.79.31.0/24 maxlen: 24
148.135.183.0/24 maxlen: 24
148.135.195.0/24 maxlen: 24
150.241.200.0/23 maxlen: 23
150.241.242.0/24 maxlen: 24
150.241.243.0/24 maxlen: 24
150.241.251.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:52:e2:42:80:5d:6f:21:1d:62:85:21:5d:33:66:25:7c:ad:91:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Apr 9 23:55:20 2025 GMT
Not After : Apr 9 00:00:20 2026 GMT
Subject: CN=2F2BAE81E3DF2EB3772FBAFD32A740D6A4FDF954
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b8:ee:2e:81:44:8b:90:71:c4:cc:a6:ba:ae:
d9:6f:fd:8f:39:38:98:de:93:9d:a9:33:ee:64:1a:
78:d2:32:d5:97:86:e6:7a:48:1a:c0:fa:7f:14:80:
41:52:ac:34:e4:92:f8:ec:ce:08:c7:b4:1d:a0:9c:
26:e7:81:65:f7:29:e1:0f:6b:7e:ee:39:d7:e5:0f:
bc:6f:5c:35:16:08:11:ea:6a:0f:9d:e4:41:bf:0e:
24:8a:6e:31:f2:0d:ee:62:f9:f8:1b:89:ca:10:05:
6b:78:92:a9:47:65:3e:8b:11:9b:4a:ad:7d:ad:61:
11:46:c2:73:7c:ac:b0:00:4f:bf:23:ff:0a:17:74:
cb:d9:13:95:e7:d8:12:1f:ad:58:c8:d3:37:c2:5f:
aa:70:2d:5b:49:a8:f0:ca:f7:46:cf:68:b9:d7:f6:
cf:93:af:2c:f5:9f:30:d9:08:ac:72:0e:28:2d:bb:
db:1a:fb:88:d7:31:03:23:44:0e:97:99:ba:d1:4b:
d7:be:9f:96:7f:a2:6d:dd:6e:64:18:d6:da:4d:59:
e3:c8:3b:07:0c:a7:82:1d:3b:d8:e2:08:16:bb:01:
23:78:ef:4b:0e:de:f6:1b:4b:02:8b:16:4e:fd:b4:
c8:70:50:00:e2:e1:62:e2:4a:6a:79:ca:78:46:da:
25:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:2B:AE:81:E3:DF:2E:B3:77:2F:BA:FD:32:A7:40:D6:A4:FD:F9:54
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS212238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.62.96.0/23
96.62.111.0/24
96.62.127.0/24
96.62.214.0/24
140.233.172.0/22
140.233.178.0/23
140.233.188.0/23
146.103.35.0/24
146.103.45.0/24
146.103.51.0/24
147.79.31.0/24
148.135.183.0/24
148.135.195.0/24
150.241.200.0/23
150.241.242.0/23
150.241.251.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:8a:78:e0:de:93:c0:d1:d5:b7:3f:90:92:a5:c2:d3:39:27:
32:dd:91:2b:75:09:33:2a:b1:20:76:44:16:f7:7d:4a:3c:8e:
d1:1e:f6:7f:27:df:08:49:64:70:fd:77:17:82:04:10:e1:14:
1c:8d:5c:3e:6f:17:32:1d:75:c5:a7:82:d2:39:37:b5:3e:b5:
98:6c:5d:7f:70:d7:99:f4:11:77:a2:ee:f5:2b:8c:e0:9a:9e:
90:f0:e2:16:0e:99:71:b5:56:63:e0:b1:af:91:78:64:e3:c0:
27:db:a6:04:9e:eb:48:ed:95:88:34:e6:89:ef:fc:ec:f6:cb:
16:d5:fd:24:87:1b:1c:2c:62:04:d7:c0:42:55:66:2f:d9:ed:
85:66:86:ff:b3:49:80:ce:9a:3b:12:18:50:55:59:68:8b:ea:
a0:a7:d3:d1:96:e5:2b:45:0d:89:30:48:9a:1f:08:a1:d0:44:
93:24:2f:cd:a3:a5:c4:83:d5:90:97:83:30:a8:13:79:f0:65:
25:52:10:41:c1:84:c1:17:4b:fd:43:f0:b0:e7:6d:02:46:16:
45:fc:19:78:a1:60:b8:b2:36:3a:41:e4:83:17:f0:1a:b6:61:
25:c0:65:ba:49:e4:d7:11:5e:45:cd:38:69:73:b2:1b:1f:90:
e0:9d:67:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:34:23 2025 by rpki-client on console.sobornost.net