Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS206575.roa
File: AS206575.roa (raw, json)
Hash identifier: bKPHR2uPAgEKQPLuMR34HzkRJCxWz38HZ5JyMAB+dvY=
Subject key identifier: 4B:DC:55:F5:60:C4:97:44:14:C5:A7:7F:E3:29:25:6D:71:42:28:A5
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 0C448DAE03699AC115FD6A8E7073E14311C502A8
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS206575.roa
Signing time: Fri 28 Mar 2025 12:17:20 +0000
ROA not before: Fri 28 Mar 2025 12:12:20 +0000
ROA not after: Fri 27 Mar 2026 12:17:20 +0000
asID: 206575
IP address blocks: 82.21.209.0/24 maxlen: 24
82.21.211.0/24 maxlen: 24
82.21.221.0/24 maxlen: 24
82.22.209.0/24 maxlen: 24
82.22.226.0/24 maxlen: 24
82.23.211.0/24 maxlen: 24
82.23.221.0/24 maxlen: 24
82.24.215.0/24 maxlen: 24
82.24.217.0/24 maxlen: 24
82.24.232.0/24 maxlen: 24
82.25.226.0/24 maxlen: 24
82.25.231.0/24 maxlen: 24
82.26.213.0/24 maxlen: 24
82.27.219.0/24 maxlen: 24
82.29.212.0/24 maxlen: 24
82.29.219.0/24 maxlen: 24
82.29.222.0/24 maxlen: 24
82.29.224.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:44:8d:ae:03:69:9a:c1:15:fd:6a:8e:70:73:e1:43:11:c5:02:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Mar 28 12:12:20 2025 GMT
Not After : Mar 27 12:17:20 2026 GMT
Subject: CN=4BDC55F560C4974414C5A77FE329256D714228A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:6d:c3:82:f4:5f:23:7e:14:fb:b5:63:49:68:
c3:f9:e2:ca:38:f4:1f:13:3f:ac:dd:21:66:35:8b:
ea:1d:38:cb:0f:ab:f1:da:78:05:34:df:41:82:bf:
b3:61:58:e9:b1:7c:e5:2a:b5:6e:f2:d1:cd:9c:2c:
f5:a8:ae:04:8c:9a:b7:0a:bb:99:23:32:58:5a:f7:
e4:00:e1:a7:fd:e7:d2:42:d3:53:7b:ce:ae:5c:61:
09:e0:1c:01:2c:b4:c4:e4:6a:07:86:53:df:7f:ae:
3f:08:f4:cd:16:37:b4:49:07:ca:cf:0c:67:1e:5c:
0e:08:7d:13:38:16:1d:85:a5:00:96:d3:5d:96:df:
aa:49:dd:79:16:8d:a8:c7:29:7d:00:85:44:65:e9:
5a:a2:e9:71:0d:45:1e:9c:fd:fc:6a:ba:d2:13:4f:
73:70:cd:6d:f3:f5:4d:93:5e:1d:ac:dd:f8:ff:56:
99:e3:8c:db:38:90:c7:6a:99:a6:98:86:02:ed:51:
2e:01:61:c6:21:ca:ea:ff:b6:0d:2a:03:eb:04:6f:
bb:c1:6a:fd:99:75:fa:a7:e0:66:7c:f1:bb:06:0f:
f3:f3:b5:0a:cc:cc:b5:19:e5:c8:15:99:2c:2f:8e:
bd:47:20:14:53:ac:d0:3d:8c:6d:59:ee:0c:55:dc:
d3:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:DC:55:F5:60:C4:97:44:14:C5:A7:7F:E3:29:25:6D:71:42:28:A5
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS206575.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.209.0/24
82.21.211.0/24
82.21.221.0/24
82.22.209.0/24
82.22.226.0/24
82.23.211.0/24
82.23.221.0/24
82.24.215.0/24
82.24.217.0/24
82.24.232.0/24
82.25.226.0/24
82.25.231.0/24
82.26.213.0/24
82.27.219.0/24
82.29.212.0/24
82.29.219.0/24
82.29.222.0/24
82.29.224.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:ab:37:88:82:08:56:06:44:ff:bf:35:e4:f0:1b:b6:da:6b:
04:ba:d6:60:bf:d6:3b:b0:ea:58:72:31:36:10:03:ac:b3:82:
38:d2:9a:1f:46:4b:d1:a9:b2:bf:cb:76:90:a0:69:22:5e:ff:
66:60:1b:19:c3:cb:28:41:a6:80:86:be:a6:f6:16:da:c7:62:
88:0b:12:fa:4f:fe:8a:91:fd:dc:9f:d6:3d:9f:2b:76:64:b8:
31:d1:bc:0b:42:dc:9c:48:c1:63:03:04:2c:1b:71:1d:c3:f9:
95:14:12:76:31:4a:2e:c1:7b:42:ae:d1:ff:cb:03:d1:82:f6:
a0:69:fc:d1:00:4f:b6:bb:9f:a4:f7:d2:80:35:e9:ae:ca:15:
4d:2f:de:e8:e1:e3:23:89:b0:5d:62:be:c1:b2:d6:54:01:c0:
9d:6d:73:8a:e9:13:06:ba:93:39:53:fe:97:45:2a:fb:08:8a:
ad:be:bb:92:dd:c9:a4:fc:ef:ad:d2:b1:03:48:60:4b:f3:b4:
e9:49:ed:83:dc:20:03:a8:6f:48:9f:1a:f6:81:f2:e1:06:8f:
38:fc:b7:37:85:b2:ba:32:11:92:01:10:aa:02:e9:25:6e:90:
a9:d6:db:36:24:dd:0c:85:92:be:42:c3:8c:76:da:6e:d1:b7:
4c:b7:bd:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 00:42:37 2025 by rpki-client on console.sobornost.net