Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS212150.roa
File: AS212150.roa (raw, json)
Hash identifier: NLFVKrhnmqXjVt9BJ5eMn7y9S6jumjCvOOK1jQOh5eE=
Subject key identifier: 39:C3:E1:E8:52:9E:30:64:17:3E:51:92:C2:93:85:0D:2F:5A:24:B3
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 103F21CD9224116E12F3C9FBF5539CAD72CCF4B7
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS212150.roa
Signing time: Mon 07 Apr 2025 00:01:57 +0000
ROA not before: Sun 06 Apr 2025 23:56:57 +0000
ROA not after: Mon 06 Apr 2026 00:01:57 +0000
asID: 212150
IP address blocks: 82.21.8.0/24 maxlen: 24
82.21.65.0/24 maxlen: 24
82.21.75.0/24 maxlen: 24
82.21.149.0/24 maxlen: 24
82.22.190.0/24 maxlen: 24
82.22.205.0/24 maxlen: 24
82.26.152.0/24 maxlen: 24
82.26.169.0/24 maxlen: 24
82.29.38.0/24 maxlen: 24
82.29.74.0/24 maxlen: 24
82.29.88.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:3f:21:cd:92:24:11:6e:12:f3:c9:fb:f5:53:9c:ad:72:cc:f4:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Apr 6 23:56:57 2025 GMT
Not After : Apr 6 00:01:57 2026 GMT
Subject: CN=39C3E1E8529E3064173E5192C293850D2F5A24B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:33:e3:3a:f6:05:76:ec:2a:cb:79:67:58:a8:
8d:fa:71:5e:93:f1:e7:5f:46:b4:a7:9f:23:84:c1:
ca:15:f6:5d:d6:96:37:d7:d8:ee:b6:b8:9f:15:82:
a5:b4:f1:8b:aa:a2:b1:3f:f8:92:b9:d9:1c:5f:b9:
8d:e9:ca:0f:f7:db:56:b8:2d:bd:58:46:16:66:71:
84:a0:ba:80:45:e3:7c:9a:2a:6e:44:9f:42:b0:02:
0d:f9:2b:ef:30:12:91:92:d0:ed:8f:64:5f:87:ea:
29:81:dd:34:b2:85:08:a5:cd:1d:ec:a2:bd:0c:11:
1f:ca:4d:83:9a:1a:12:28:dc:a4:03:b8:9b:e3:ba:
ed:7c:d8:d6:87:3d:38:34:96:aa:4e:21:12:7e:bf:
ae:4e:63:02:b5:ff:98:00:b9:52:76:aa:9a:ef:18:
ec:0b:cd:8f:08:25:05:0a:4b:fc:1b:6c:f1:23:93:
8e:cd:78:f2:73:3c:c3:4b:56:24:01:37:7e:f9:fd:
31:59:07:1d:2d:aa:96:6f:d8:fc:8b:6e:62:fc:a0:
57:a6:7f:65:f6:1c:0f:ab:b5:a9:e8:17:54:85:91:
d4:11:05:90:d4:96:26:07:08:09:a0:3f:0e:0c:39:
fe:5c:6f:74:97:ad:20:5a:35:08:bc:a5:6f:c3:f6:
7a:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:C3:E1:E8:52:9E:30:64:17:3E:51:92:C2:93:85:0D:2F:5A:24:B3
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS212150.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.8.0/24
82.21.65.0/24
82.21.75.0/24
82.21.149.0/24
82.22.190.0/24
82.22.205.0/24
82.26.152.0/24
82.26.169.0/24
82.29.38.0/24
82.29.74.0/24
82.29.88.0/24
Signature Algorithm: sha256WithRSAEncryption
94:97:0b:ee:04:11:84:eb:af:eb:03:9a:74:9b:76:ba:d1:ad:
e2:12:cb:e5:ba:f1:80:d0:9d:d7:f2:23:50:fe:cf:7d:de:39:
6b:6a:67:e2:12:87:8e:c8:be:d6:6b:40:66:57:89:a2:c0:5b:
de:c1:6c:b4:51:6d:ba:b8:ec:38:54:fb:fd:c6:34:9d:f6:fd:
e2:90:98:7d:db:8a:a5:a7:f7:8b:79:a5:6a:47:9f:7b:76:9d:
85:8b:1f:33:26:71:7f:95:3d:4b:03:8f:ef:d5:a6:75:2f:b3:
53:1e:13:4f:87:68:6c:d2:9c:23:9c:45:39:0d:99:13:17:b0:
b2:66:1d:a7:32:eb:21:3d:f5:77:ae:85:81:f0:ed:67:90:3c:
09:a7:58:fd:62:a2:ce:0a:9a:3f:b6:0d:c6:60:5e:44:9f:9a:
37:9d:91:e9:e6:f2:cd:cc:55:dc:c4:b6:5a:20:d4:df:5c:97:
1c:0e:dd:16:d9:25:56:9a:45:89:33:db:cc:ca:0e:3b:32:59:
8b:87:b7:1a:53:3f:81:5b:a2:4f:82:6f:8e:83:57:94:10:3b:
54:0b:b5:98:ad:c0:98:bf:1f:9d:e9:63:7e:fe:d8:21:0a:b4:
1d:40:e0:51:61:7b:cc:5c:14:8e:93:86:bc:3f:95:0b:64:c2:
f5:f8:44:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:34:27 2025 by rpki-client on console.sobornost.net