Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS201086.roa
File: AS201086.roa (raw, json)
Hash identifier: Lk6QmLrx0FJQH2mMKqCO1XC52VVCcgSjuMug+tEsY1I=
Subject key identifier: 49:E7:BC:CB:1D:F1:DE:69:BC:97:5E:C3:9A:A6:CD:34:FD:94:F1:55
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 4D669F085415476B0FA7B04A0C4E3B348A64D949
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS201086.roa
Signing time: Mon 24 Feb 2025 11:05:41 +0000
ROA not before: Mon 24 Feb 2025 11:00:41 +0000
ROA not after: Mon 23 Feb 2026 11:05:41 +0000
asID: 201086
IP address blocks: 82.21.225.0/24 maxlen: 24
82.23.199.0/24 maxlen: 24
82.23.215.0/24 maxlen: 24
82.25.223.0/24 maxlen: 24
82.26.231.0/24 maxlen: 24
82.29.209.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:66:9f:08:54:15:47:6b:0f:a7:b0:4a:0c:4e:3b:34:8a:64:d9:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Feb 24 11:00:41 2025 GMT
Not After : Feb 23 11:05:41 2026 GMT
Subject: CN=49E7BCCB1DF1DE69BC975EC39AA6CD34FD94F155
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:33:d3:06:3a:52:fd:97:54:c2:b8:6d:01:e2:
37:3b:63:e2:61:9c:2a:4e:44:f3:c8:5a:9e:f1:a0:
eb:a3:6b:70:0c:85:70:b8:60:6c:28:71:91:f1:d5:
85:f9:51:bd:f8:74:7e:8a:2c:a3:4c:47:44:6a:d0:
d0:ff:82:ab:7d:7b:d1:02:20:d5:4a:6a:3f:c3:de:
28:e1:f8:81:7c:c7:82:80:12:3b:37:f5:d2:85:24:
0b:d4:14:16:7f:1c:25:83:23:c2:5e:b6:d7:b8:ef:
e1:3c:5c:d0:c7:db:da:fe:c3:c1:ee:56:2b:16:31:
4a:50:a3:85:b1:2d:07:88:85:ea:e5:ee:ec:b9:61:
db:e5:35:24:2d:8f:44:13:67:a4:18:c8:83:c4:a0:
37:76:1a:8e:5b:e0:79:19:59:e5:4a:72:90:59:49:
c8:88:83:b4:43:50:39:91:98:d8:a3:d7:3d:e7:03:
24:69:05:cf:9b:a9:c3:f4:a1:8c:69:fe:36:72:37:
22:b1:54:7b:10:fb:85:23:5e:91:42:1d:f6:2d:80:
75:13:fc:51:d1:66:dc:1b:b2:63:cf:3e:25:cb:6b:
04:bd:3f:7f:6c:7b:31:26:7e:d1:67:2f:a1:cc:e9:
48:cd:2b:9b:7a:4d:d2:ab:f5:a6:ca:91:13:da:29:
29:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:E7:BC:CB:1D:F1:DE:69:BC:97:5E:C3:9A:A6:CD:34:FD:94:F1:55
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS201086.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.225.0/24
82.23.199.0/24
82.23.215.0/24
82.25.223.0/24
82.26.231.0/24
82.29.209.0/24
Signature Algorithm: sha256WithRSAEncryption
64:1b:39:16:d3:3c:44:a6:b9:fd:a3:07:5f:12:f5:68:ea:2e:
78:a8:75:1d:a8:f6:e7:97:a6:25:b9:2e:5e:a1:04:fa:c1:f5:
a2:ee:22:96:69:7f:aa:b1:e5:48:bc:11:bd:92:05:c2:69:4f:
4c:f7:6b:85:62:a6:6f:d6:a8:1f:e7:c2:a6:5a:9a:9e:69:c6:
5e:03:c6:72:14:a2:1f:b8:8e:52:59:eb:2d:60:31:51:46:93:
b8:1b:ec:b7:93:9b:42:78:f1:16:4f:da:95:d1:58:47:ba:47:
46:ff:69:ef:1e:69:d5:08:29:2b:04:15:5a:40:70:15:3a:16:
e9:fe:a8:77:58:ec:d3:8e:f1:60:5e:52:6e:a2:9c:27:fd:2e:
8d:14:93:fe:6c:44:f6:9e:df:39:1c:7e:8a:ad:47:cf:b1:a7:
81:c2:e4:84:3f:66:68:c6:35:a9:5a:24:7a:3c:43:b0:80:0a:
ec:bf:6c:1f:4d:f4:69:47:de:7d:81:42:1a:99:8c:cd:55:6e:
13:41:a2:ab:14:07:b6:45:34:13:ed:7d:a6:c5:9f:c3:6a:d6:
3b:b1:c7:ff:5f:70:d0:d6:fc:e6:ea:95:75:e4:4f:38:81:cc:
d0:95:36:44:4e:f1:3e:21:24:c9:9b:e5:34:b0:88:9e:76:fd:
eb:9c:cf:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 8 04:58:42 2025 by rpki-client on console.sobornost.net