Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS212238.roa
File: AS212238.roa (raw, json)
Hash identifier: +U5siMA4LNOwkUs5j2xzf5dOSrVQMhMzfc9PBjx4MzI=
Subject key identifier: E6:F2:F8:93:AE:06:B1:3A:1C:E1:69:54:D1:8E:D8:0F:16:F2:81:BF
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 44B92ADAD42C7A6B5EEA93D811E79E8EFB1AFA
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS212238.roa
Signing time: Wed 09 Apr 2025 22:22:16 +0000
ROA not before: Wed 09 Apr 2025 22:17:16 +0000
ROA not after: Wed 08 Apr 2026 22:22:16 +0000
asID: 212238
IP address blocks: 82.21.56.0/24 maxlen: 24
82.21.59.0/24 maxlen: 24
82.21.68.0/24 maxlen: 24
82.21.70.0/24 maxlen: 24
82.21.87.0/24 maxlen: 24
82.21.108.0/24 maxlen: 24
82.21.133.0/24 maxlen: 24
82.21.141.0/24 maxlen: 24
82.21.142.0/24 maxlen: 24
82.21.151.0/24 maxlen: 24
82.21.158.0/24 maxlen: 24
82.21.159.0/24 maxlen: 24
82.21.168.0/24 maxlen: 24
82.21.175.0/24 maxlen: 24
82.21.189.0/24 maxlen: 24
82.21.191.0/24 maxlen: 24
82.21.193.0/24 maxlen: 24
82.21.242.0/24 maxlen: 24
82.21.243.0/24 maxlen: 24
82.22.65.0/24 maxlen: 24
82.22.79.0/24 maxlen: 24
82.22.85.0/24 maxlen: 24
82.22.87.0/24 maxlen: 24
82.22.147.0/24 maxlen: 24
82.22.242.0/24 maxlen: 24
82.22.243.0/24 maxlen: 24
82.22.253.0/24 maxlen: 24
82.23.17.0/24 maxlen: 24
82.23.18.0/24 maxlen: 24
82.23.21.0/24 maxlen: 24
82.23.22.0/24 maxlen: 24
82.23.37.0/24 maxlen: 24
82.23.38.0/24 maxlen: 24
82.23.119.0/24 maxlen: 24
82.23.120.0/24 maxlen: 24
82.23.121.0/24 maxlen: 24
82.23.122.0/24 maxlen: 24
82.23.126.0/24 maxlen: 24
82.23.229.0/24 maxlen: 24
82.23.232.0/24 maxlen: 24
82.23.233.0/24 maxlen: 24
82.23.243.0/24 maxlen: 24
82.24.34.0/24 maxlen: 24
82.24.46.0/24 maxlen: 24
82.24.182.0/24 maxlen: 24
82.24.239.0/24 maxlen: 24
82.24.243.0/24 maxlen: 24
82.24.253.0/24 maxlen: 24
82.25.52.0/22 maxlen: 22
82.25.243.0/24 maxlen: 24
82.25.253.0/24 maxlen: 24
82.26.150.0/23 maxlen: 23
82.26.157.0/24 maxlen: 24
82.26.237.0/24 maxlen: 24
82.26.243.0/24 maxlen: 24
82.26.253.0/24 maxlen: 24
82.27.11.0/24 maxlen: 24
82.27.225.0/24 maxlen: 24
82.27.238.0/24 maxlen: 24
82.27.243.0/24 maxlen: 24
82.27.253.0/24 maxlen: 24
82.29.43.0/24 maxlen: 24
82.29.44.0/24 maxlen: 24
82.29.50.0/24 maxlen: 24
82.29.92.0/24 maxlen: 24
82.29.94.0/24 maxlen: 24
82.29.96.0/24 maxlen: 24
82.29.97.0/24 maxlen: 24
82.29.100.0/24 maxlen: 24
82.29.101.0/24 maxlen: 24
82.29.109.0/24 maxlen: 24
82.29.202.0/24 maxlen: 24
82.29.233.0/24 maxlen: 24
82.29.242.0/24 maxlen: 24
82.29.243.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:b9:2a:da:d4:2c:7a:6b:5e:ea:93:d8:11:e7:9e:8e:fb:1a:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Apr 9 22:17:16 2025 GMT
Not After : Apr 8 22:22:16 2026 GMT
Subject: CN=E6F2F893AE06B13A1CE16954D18ED80F16F281BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:8b:f7:20:47:11:eb:5b:2b:71:b7:a7:8d:91:
5d:5b:ec:08:2d:d5:b8:0c:b6:b1:1d:45:4d:1a:8d:
59:af:8c:5f:02:3d:a2:42:ef:6a:10:63:b4:96:e6:
1d:a2:40:4d:42:74:36:fe:b5:58:7b:18:26:51:63:
74:76:aa:c6:a8:5e:0e:0b:f2:aa:28:ef:05:da:47:
d8:f4:d5:2a:34:f3:35:83:7b:b7:8a:2c:5f:08:05:
5f:01:60:96:a9:d6:ad:dd:ab:33:a8:e4:c9:a6:40:
63:58:59:20:b2:30:05:cd:3b:a1:0a:7b:66:7b:0d:
02:d7:6a:13:2f:4b:cd:a0:ac:1e:27:4a:d8:8e:98:
50:d7:e9:23:42:95:ee:b0:bf:81:24:d4:a3:26:45:
84:6a:32:c9:2f:14:f0:6e:fc:3f:4b:6e:fd:18:b0:
a2:12:82:65:53:29:09:4e:30:c3:06:04:89:ac:24:
9b:04:ee:c1:ac:ca:a3:70:54:f7:d1:3d:47:5d:69:
ff:de:8b:05:aa:d2:28:c0:13:2f:b6:f1:f0:8b:6c:
de:d3:2f:e3:3b:b9:a7:f8:f2:16:f7:e6:1c:ae:7a:
60:8e:77:11:01:a7:75:54:1d:c3:53:dc:c4:3f:6b:
86:65:5a:f6:74:4f:84:75:93:3d:ea:5a:c6:ef:29:
6d:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:F2:F8:93:AE:06:B1:3A:1C:E1:69:54:D1:8E:D8:0F:16:F2:81:BF
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS212238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.56.0/24
82.21.59.0/24
82.21.68.0/24
82.21.70.0/24
82.21.87.0/24
82.21.108.0/24
82.21.133.0/24
82.21.141.0-82.21.142.255
82.21.151.0/24
82.21.158.0/23
82.21.168.0/24
82.21.175.0/24
82.21.189.0/24
82.21.191.0/24
82.21.193.0/24
82.21.242.0/23
82.22.65.0/24
82.22.79.0/24
82.22.85.0/24
82.22.87.0/24
82.22.147.0/24
82.22.242.0/23
82.22.253.0/24
82.23.17.0-82.23.18.255
82.23.21.0-82.23.22.255
82.23.37.0-82.23.38.255
82.23.119.0-82.23.122.255
82.23.126.0/24
82.23.229.0/24
82.23.232.0/23
82.23.243.0/24
82.24.34.0/24
82.24.46.0/24
82.24.182.0/24
82.24.239.0/24
82.24.243.0/24
82.24.253.0/24
82.25.52.0/22
82.25.243.0/24
82.25.253.0/24
82.26.150.0/23
82.26.157.0/24
82.26.237.0/24
82.26.243.0/24
82.26.253.0/24
82.27.11.0/24
82.27.225.0/24
82.27.238.0/24
82.27.243.0/24
82.27.253.0/24
82.29.43.0-82.29.44.255
82.29.50.0/24
82.29.92.0/24
82.29.94.0/24
82.29.96.0/23
82.29.100.0/23
82.29.109.0/24
82.29.202.0/24
82.29.233.0/24
82.29.242.0/23
Signature Algorithm: sha256WithRSAEncryption
57:b3:e0:48:eb:d4:62:e1:50:0c:6d:6e:dd:70:43:cf:95:28:
e9:87:db:2f:a6:33:94:11:7a:2e:55:63:0f:7b:b0:1f:f9:e6:
ca:09:6d:b2:94:92:78:fb:d1:d0:69:98:ca:4c:a5:8a:1c:17:
ae:9b:6f:44:f1:16:f9:88:52:90:df:29:9e:42:d1:30:bb:fc:
01:b4:7c:b1:af:0c:b2:7c:f6:53:6f:e9:ec:aa:c4:ba:c8:d5:
74:81:95:16:81:9b:08:65:8e:7d:50:c5:51:35:c0:1f:50:ba:
16:60:07:70:34:fc:c5:04:d6:2e:5d:27:5a:f5:45:b2:0c:66:
47:5d:cb:57:cd:e4:1a:69:50:af:b0:53:b2:7b:d0:fe:27:a5:
79:71:17:c3:6e:70:a1:d5:6d:93:9d:b7:c5:1e:2b:34:5a:19:
ef:1b:5a:06:1f:8b:d1:9c:13:20:61:9a:2b:5a:07:54:f8:5c:
94:2a:c5:fd:9e:8a:40:ec:16:97:60:b5:1e:da:df:c0:8b:20:
9c:49:2b:bf:ed:bb:04:d4:81:6e:2e:45:89:16:f5:6e:6d:08:
13:60:2a:4e:24:37:e9:f4:a5:88:c1:0f:46:fd:e8:34:5c:ff:
f9:f8:3b:e2:03:05:d7:71:b4:1b:26:77:fb:67:00:4f:dc:c0:
8c:8d:4b:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:34:27 2025 by rpki-client on console.sobornost.net