Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS11404.roa
File: AS11404.roa (raw, json)
Hash identifier: f7XOHY9AkuwdK63V6z8uybLQHmkwQJUNoEz/yduf8OU=
Subject key identifier: AF:FA:D4:AC:AE:12:E4:94:AC:BC:9A:BA:FB:C7:18:D3:36:68:37:04
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 3BE0314A7A6277AD822373DFF1E6C91B57188596
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS11404.roa
Signing time: Mon 31 Mar 2025 08:22:25 +0000
ROA not before: Mon 31 Mar 2025 08:17:25 +0000
ROA not after: Mon 30 Mar 2026 08:22:25 +0000
asID: 11404
IP address blocks: 82.21.100.0/24 maxlen: 24
82.21.102.0/24 maxlen: 24
82.21.104.0/22 maxlen: 24
82.21.115.0/24 maxlen: 24
82.21.120.0/24 maxlen: 24
82.21.121.0/24 maxlen: 24
82.21.137.0/24 maxlen: 24
82.21.145.0/24 maxlen: 24
82.21.164.0/24 maxlen: 24
82.21.167.0/24 maxlen: 24
82.22.76.0/24 maxlen: 24
82.22.80.0/24 maxlen: 24
82.22.81.0/24 maxlen: 24
82.22.83.0/24 maxlen: 24
82.22.84.0/24 maxlen: 24
82.22.88.0/24 maxlen: 24
82.22.90.0/24 maxlen: 24
82.22.91.0/24 maxlen: 24
82.22.92.0/24 maxlen: 24
82.22.94.0/24 maxlen: 24
82.22.95.0/24 maxlen: 24
82.22.97.0/24 maxlen: 24
82.22.98.0/24 maxlen: 24
82.22.100.0/24 maxlen: 24
82.22.101.0/24 maxlen: 24
82.22.103.0/24 maxlen: 24
82.22.104.0/24 maxlen: 24
82.22.106.0/24 maxlen: 24
82.22.107.0/24 maxlen: 24
82.22.109.0/24 maxlen: 24
82.22.110.0/24 maxlen: 24
82.22.112.0/24 maxlen: 24
82.22.113.0/24 maxlen: 24
82.22.115.0/24 maxlen: 24
82.22.128.0/21 maxlen: 24
82.22.140.0/24 maxlen: 24
82.22.148.0/22 maxlen: 24
82.22.152.0/22 maxlen: 24
82.22.159.0/24 maxlen: 24
82.22.201.0/24 maxlen: 24
82.24.20.0/24 maxlen: 24
82.24.23.0/24 maxlen: 24
82.24.32.0/24 maxlen: 24
82.24.49.0/24 maxlen: 24
82.24.53.0/24 maxlen: 24
82.24.56.0/24 maxlen: 24
82.24.62.0/24 maxlen: 24
82.25.0.0/22 maxlen: 24
82.27.32.0/20 maxlen: 24
82.27.48.0/20 maxlen: 24
82.27.64.0/20 maxlen: 24
82.27.136.0/21 maxlen: 24
82.27.168.0/21 maxlen: 24
82.29.22.0/24 maxlen: 24
82.29.24.0/24 maxlen: 24
82.29.25.0/24 maxlen: 24
82.29.66.0/24 maxlen: 24
82.29.89.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:e0:31:4a:7a:62:77:ad:82:23:73:df:f1:e6:c9:1b:57:18:85:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Mar 31 08:17:25 2025 GMT
Not After : Mar 30 08:22:25 2026 GMT
Subject: CN=AFFAD4ACAE12E494ACBC9ABAFBC718D336683704
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b6:06:dd:c4:b9:a1:c5:66:09:41:dc:90:a7:
58:01:d8:68:61:24:70:a4:fb:fc:78:f5:8c:94:f6:
31:5c:75:17:2c:4b:93:a0:8a:1c:d6:3c:08:bb:1a:
c2:f5:90:4d:91:08:4f:6f:b3:cc:13:3f:dc:43:c6:
cc:8d:9f:54:c8:30:77:c5:a2:97:94:77:c6:8f:d5:
e8:66:6f:5d:0b:c0:1a:ad:43:48:c8:8d:4e:94:9b:
f5:d4:d1:e6:cd:38:43:45:0f:ce:2e:0e:6b:e6:50:
4b:c2:8e:36:05:d1:cc:bd:da:db:27:32:74:9f:e6:
bd:6e:40:f6:c6:99:59:db:4a:4b:0f:c4:a8:99:b3:
d4:d4:ba:5f:09:f1:88:96:6e:c5:71:a1:96:ab:cc:
66:da:15:e3:4d:72:24:76:3d:a9:30:a6:b7:88:8c:
09:d5:0a:64:33:a0:92:8e:75:a3:4b:86:74:b4:7a:
a7:11:ad:de:20:13:00:ef:e5:0f:21:19:90:4f:2e:
58:ac:c1:5c:0d:ab:a2:53:1e:e9:d0:a8:73:13:42:
55:ab:70:70:6c:9a:a9:7a:ae:de:16:05:6d:7e:db:
e4:88:53:23:3a:f5:23:99:4f:22:05:3b:26:8e:97:
73:76:18:a0:92:b9:49:d8:de:a5:89:90:06:2a:c0:
78:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:FA:D4:AC:AE:12:E4:94:AC:BC:9A:BA:FB:C7:18:D3:36:68:37:04
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS11404.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.100.0/24
82.21.102.0/24
82.21.104.0/22
82.21.115.0/24
82.21.120.0/23
82.21.137.0/24
82.21.145.0/24
82.21.164.0/24
82.21.167.0/24
82.22.76.0/24
82.22.80.0/23
82.22.83.0-82.22.84.255
82.22.88.0/24
82.22.90.0-82.22.92.255
82.22.94.0/23
82.22.97.0-82.22.98.255
82.22.100.0/23
82.22.103.0-82.22.104.255
82.22.106.0/23
82.22.109.0-82.22.110.255
82.22.112.0/23
82.22.115.0/24
82.22.128.0/21
82.22.140.0/24
82.22.148.0-82.22.155.255
82.22.159.0/24
82.22.201.0/24
82.24.20.0/24
82.24.23.0/24
82.24.32.0/24
82.24.49.0/24
82.24.53.0/24
82.24.56.0/24
82.24.62.0/24
82.25.0.0/22
82.27.32.0-82.27.79.255
82.27.136.0/21
82.27.168.0/21
82.29.22.0/24
82.29.24.0/23
82.29.66.0/24
82.29.89.0/24
Signature Algorithm: sha256WithRSAEncryption
69:20:23:ce:59:d7:34:00:1b:31:b3:09:5b:3d:76:f7:d8:dc:
9a:a3:19:b3:80:20:0a:49:48:25:fa:7d:ff:ad:91:87:7a:14:
f2:30:54:4d:af:c3:b3:c7:de:8c:fc:36:d3:c9:6b:11:ab:52:
dd:60:f3:c4:26:f4:15:96:17:d0:8b:10:92:7d:1c:65:a7:ff:
22:e6:1e:b9:05:14:2b:fe:60:f7:67:ad:d1:9d:f5:6e:41:69:
ed:e7:02:6b:26:89:e0:01:c9:90:15:04:6b:eb:15:8b:d4:fb:
15:60:fa:4a:19:77:ef:de:4f:dd:40:e2:5f:15:55:e1:8d:11:
83:6f:81:36:3e:10:4a:61:04:bc:bb:39:7e:75:b5:3c:89:ca:
e9:71:47:98:81:a5:ed:69:c4:93:4f:70:b1:4b:1a:f1:48:84:
24:04:f7:b3:ba:f1:3c:8e:fe:09:e9:57:a6:60:7a:1f:23:89:
93:46:36:6a:f8:0c:4b:27:21:77:2b:a2:e5:02:36:30:98:6e:
24:ea:ad:d2:bf:58:5b:52:98:7a:64:04:3a:c1:7b:79:5c:32:
50:19:25:8e:45:64:95:24:5c:38:86:2b:8b:05:b5:fb:c6:2e:
2e:19:13:56:f0:a9:36:08:2e:4c:b5:d7:af:71:5a:fa:62:b5:
ba:e6:09:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:34:27 2025 by rpki-client on console.sobornost.net