Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS212238.roa
File: AS212238.roa (raw, json)
Hash identifier: zQAU8dI8/tp8cALgNM/8hkQqxt7iT0UhxO+3mfupocQ=
Subject key identifier: 48:B2:1F:C5:A7:C6:AC:17:EC:1F:26:4F:B8:14:E7:78:4A:F1:90:BF
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 638BFB2D9CFC35DD62C6767E144A4A71413DF3E7
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS212238.roa
Signing time: Thu 10 Apr 2025 08:54:33 +0000
ROA not before: Thu 10 Apr 2025 08:49:33 +0000
ROA not after: Thu 09 Apr 2026 08:54:33 +0000
asID: 212238
IP address blocks: 46.202.249.0/24 maxlen: 24
46.202.250.0/24 maxlen: 24
46.203.0.0/24 maxlen: 24
46.203.7.0/24 maxlen: 24
46.203.34.0/24 maxlen: 24
46.203.40.0/24 maxlen: 24
46.203.73.0/24 maxlen: 24
46.203.79.0/24 maxlen: 24
46.203.103.0/24 maxlen: 24
46.203.115.0/24 maxlen: 24
46.203.147.0/24 maxlen: 24
46.203.154.0/24 maxlen: 24
46.203.157.0/24 maxlen: 24
46.203.158.0/24 maxlen: 24
46.203.185.0/24 maxlen: 24
46.203.188.0/24 maxlen: 24
46.203.189.0/24 maxlen: 24
46.203.190.0/24 maxlen: 24
46.203.195.0/24 maxlen: 24
46.203.204.0/24 maxlen: 24
46.203.250.0/24 maxlen: 24
46.203.251.0/24 maxlen: 24
91.124.7.0/24 maxlen: 24
91.124.8.0/24 maxlen: 24
91.124.9.0/24 maxlen: 24
91.124.10.0/24 maxlen: 24
91.124.11.0/24 maxlen: 24
91.124.13.0/24 maxlen: 24
91.124.24.0/24 maxlen: 24
91.124.31.0/24 maxlen: 24
91.124.33.0/24 maxlen: 24
91.124.129.0/24 maxlen: 24
91.124.139.0/24 maxlen: 24
91.124.144.0/24 maxlen: 24
91.124.187.0/24 maxlen: 24
91.124.221.0/24 maxlen: 24
92.112.53.0/24 maxlen: 24
92.112.57.0/24 maxlen: 24
92.112.92.0/24 maxlen: 24
92.112.137.0/24 maxlen: 24
92.112.143.0/24 maxlen: 24
95.134.179.0/24 maxlen: 24
95.134.185.0/24 maxlen: 24
95.134.212.0/24 maxlen: 24
95.135.39.0/24 maxlen: 24
95.135.41.0/24 maxlen: 24
95.135.59.0/24 maxlen: 24
95.135.101.0/24 maxlen: 24
95.135.105.0/24 maxlen: 24
95.135.239.0/24 maxlen: 24
95.135.240.0/24 maxlen: 24
95.135.241.0/24 maxlen: 24
95.135.254.0/24 maxlen: 24
95.135.255.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:8b:fb:2d:9c:fc:35:dd:62:c6:76:7e:14:4a:4a:71:41:3d:f3:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Apr 10 08:49:33 2025 GMT
Not After : Apr 9 08:54:33 2026 GMT
Subject: CN=48B21FC5A7C6AC17EC1F264FB814E7784AF190BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ab:86:ee:8f:8f:81:1f:61:76:38:77:a2:d1:
bb:46:a3:59:b3:58:5a:1d:4f:5a:dd:e7:48:45:1e:
03:09:24:a4:37:d7:d2:66:39:aa:7b:07:ee:2a:90:
1f:20:1a:23:22:6b:61:4e:f0:9e:d8:db:16:d5:f3:
c0:83:cf:15:ae:d1:bc:d4:12:6a:1f:b5:3d:47:d1:
a9:6a:32:c0:98:c6:a4:e6:9b:4b:f3:22:65:98:58:
91:60:a1:10:cc:a7:99:42:e4:49:03:a0:cd:03:dd:
fa:a3:51:6f:1b:4f:0f:e7:72:ec:da:82:24:20:58:
ba:cd:16:fb:27:45:4d:4a:df:d6:c0:e4:e5:74:e5:
82:da:67:84:17:4f:02:0c:de:d6:49:7e:7e:b8:ce:
0e:9b:45:73:06:37:14:35:20:32:a8:83:78:2e:28:
e1:3f:f1:14:53:5d:49:61:99:f8:41:7a:f2:54:15:
dc:c1:87:c9:bd:77:26:ce:97:d4:03:46:61:09:2b:
ce:57:d3:fd:49:4e:0f:74:46:19:3b:a7:ba:de:cd:
83:8a:31:cb:09:30:fb:55:ba:17:ec:9b:f6:13:1e:
56:02:f8:64:0a:d4:89:f6:77:e9:b5:46:5f:1d:f3:
89:30:49:3a:a7:8b:a5:a9:3a:45:28:4b:3c:c5:43:
10:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:B2:1F:C5:A7:C6:AC:17:EC:1F:26:4F:B8:14:E7:78:4A:F1:90:BF
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS212238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.202.249.0-46.202.250.255
46.203.0.0/24
46.203.7.0/24
46.203.34.0/24
46.203.40.0/24
46.203.73.0/24
46.203.79.0/24
46.203.103.0/24
46.203.115.0/24
46.203.147.0/24
46.203.154.0/24
46.203.157.0-46.203.158.255
46.203.185.0/24
46.203.188.0-46.203.190.255
46.203.195.0/24
46.203.204.0/24
46.203.250.0/23
91.124.7.0-91.124.11.255
91.124.13.0/24
91.124.24.0/24
91.124.31.0/24
91.124.33.0/24
91.124.129.0/24
91.124.139.0/24
91.124.144.0/24
91.124.187.0/24
91.124.221.0/24
92.112.53.0/24
92.112.57.0/24
92.112.92.0/24
92.112.137.0/24
92.112.143.0/24
95.134.179.0/24
95.134.185.0/24
95.134.212.0/24
95.135.39.0/24
95.135.41.0/24
95.135.59.0/24
95.135.101.0/24
95.135.105.0/24
95.135.239.0-95.135.241.255
95.135.254.0/23
Signature Algorithm: sha256WithRSAEncryption
03:5b:05:a3:62:85:20:1a:38:f0:b5:f5:7d:cf:b0:87:58:33:
10:11:30:ac:5a:f5:9b:11:f3:8b:b3:0d:7e:01:75:69:61:86:
a0:96:fc:52:ba:4a:9f:2b:86:33:53:0e:d2:d4:a9:fc:dd:ab:
43:bf:55:14:9c:2a:fe:5b:2e:5c:bf:74:9f:ae:9d:b3:05:45:
7e:5d:22:61:e2:f6:36:04:01:04:fd:5d:87:de:7e:f6:ca:96:
c0:6b:34:35:2a:15:8f:6a:87:d2:53:ed:c6:85:0c:8e:c0:a3:
55:8e:79:93:36:87:c8:41:b6:d1:18:fd:90:a7:91:e6:4e:d2:
f2:af:18:3a:e0:c8:cf:2d:64:11:82:93:1f:49:43:00:79:a9:
ff:12:bb:ab:e2:10:64:48:6d:3f:76:ba:9d:37:64:c8:f4:93:
18:b6:2f:0e:96:3f:38:11:d5:83:5c:59:9c:da:35:c1:6b:dc:
9f:fd:ce:45:35:91:d5:a4:66:80:29:85:e5:1c:eb:e4:d1:87:
55:3b:90:a4:09:b6:24:74:ee:7b:7c:58:61:04:49:a4:cb:d4:
0a:b7:c1:cd:97:d0:aa:91:2f:65:96:83:b3:8f:8b:b5:7a:08:
e1:3f:65:da:97:39:d1:f7:57:92:de:b7:41:c2:96:fd:de:84:
3f:04:a7:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:34:29 2025 by rpki-client on console.sobornost.net