Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS12741.roa
File: AS12741.roa (raw, json)
Hash identifier: IDpvW55ShzO1IMMqhEfooHouVM4M71MScSv+kxykvhc=
Subject key identifier: C9:D3:47:28:2F:6D:1E:7A:05:86:82:A2:01:E5:74:F5:70:95:AD:36
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 197BC3F3DDFC5BE51E46B9852C1086F0AA440908
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS12741.roa
Signing time: Thu 27 Feb 2025 14:16:05 +0000
ROA not before: Thu 27 Feb 2025 14:11:05 +0000
ROA not after: Thu 26 Feb 2026 14:16:05 +0000
asID: 12741
IP address blocks: 82.21.69.0/24 maxlen: 24
82.21.95.0/24 maxlen: 24
82.22.185.0/24 maxlen: 24
82.23.166.0/24 maxlen: 24
82.23.167.0/24 maxlen: 24
82.23.193.0/24 maxlen: 24
82.23.247.0/24 maxlen: 24
82.24.35.0/24 maxlen: 24
82.24.60.0/24 maxlen: 24
82.24.77.0/24 maxlen: 24
82.24.193.0/24 maxlen: 24
82.24.206.0/24 maxlen: 24
82.25.8.0/24 maxlen: 24
82.25.15.0/24 maxlen: 24
82.25.17.0/24 maxlen: 24
82.25.48.0/24 maxlen: 24
82.25.49.0/24 maxlen: 24
82.25.50.0/24 maxlen: 24
82.25.51.0/24 maxlen: 24
82.25.139.0/24 maxlen: 24
82.25.196.0/24 maxlen: 24
82.25.198.0/24 maxlen: 24
82.25.201.0/24 maxlen: 24
82.26.126.0/24 maxlen: 24
82.26.148.0/24 maxlen: 24
82.26.158.0/24 maxlen: 24
82.26.203.0/24 maxlen: 24
82.29.47.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:7b:c3:f3:dd:fc:5b:e5:1e:46:b9:85:2c:10:86:f0:aa:44:09:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Feb 27 14:11:05 2025 GMT
Not After : Feb 26 14:16:05 2026 GMT
Subject: CN=C9D347282F6D1E7A058682A201E574F57095AD36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:eb:b5:58:6f:ca:a0:2b:2a:18:6e:b9:4b:c2:
df:45:35:18:a8:cf:35:85:bd:cd:67:6d:46:c0:9d:
31:40:44:1e:80:62:2f:b0:79:43:cf:9c:c6:d4:d3:
a7:4b:6b:d4:39:3d:84:a3:b4:66:63:9a:93:1b:77:
4f:e8:62:60:54:84:dc:ff:d6:16:c5:46:c4:1e:b8:
60:5d:a2:b3:f0:6f:30:6e:87:88:74:69:08:d2:76:
3d:2c:ba:cf:35:20:03:fe:9e:b5:6d:d5:29:b4:a2:
51:d8:8f:aa:b4:56:2f:cb:b6:96:92:e5:40:10:e0:
6b:ea:98:87:c8:19:07:21:ca:fd:47:61:a1:92:b5:
ec:92:74:9d:63:79:07:7d:50:2f:20:4b:b4:4f:30:
50:97:8b:a5:dd:56:49:f8:f6:e8:1b:b6:7e:64:2b:
d1:f6:dd:21:a7:b6:2d:21:47:66:3d:43:1f:16:de:
ac:6d:28:5d:b5:cc:cb:db:42:50:b3:40:fd:95:5f:
4a:76:bf:74:a3:07:97:55:28:c3:79:9f:e4:c2:01:
1f:88:1a:ac:69:05:17:71:6d:78:59:b9:5a:e3:10:
d7:c9:a1:e6:7d:b2:19:67:78:49:83:70:b8:6a:0a:
56:49:c8:50:88:60:59:a3:f3:73:bb:7a:d4:b4:92:
d4:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:D3:47:28:2F:6D:1E:7A:05:86:82:A2:01:E5:74:F5:70:95:AD:36
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS12741.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.69.0/24
82.21.95.0/24
82.22.185.0/24
82.23.166.0/23
82.23.193.0/24
82.23.247.0/24
82.24.35.0/24
82.24.60.0/24
82.24.77.0/24
82.24.193.0/24
82.24.206.0/24
82.25.8.0/24
82.25.15.0/24
82.25.17.0/24
82.25.48.0/22
82.25.139.0/24
82.25.196.0/24
82.25.198.0/24
82.25.201.0/24
82.26.126.0/24
82.26.148.0/24
82.26.158.0/24
82.26.203.0/24
82.29.47.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:30:7d:ea:50:79:7c:85:6b:4f:d2:7b:d6:a5:2d:71:df:98:
b8:64:f6:4f:c0:72:96:cd:d7:1f:d7:5e:c2:25:d7:00:ac:4b:
10:9b:e9:58:f4:75:03:5c:60:b2:ac:e2:c8:10:2a:2a:6c:54:
71:db:3e:b4:52:24:fd:6e:2a:fa:fd:7a:22:3e:84:7b:39:08:
ab:f6:65:58:8e:c7:5f:73:4c:fb:b6:b2:d8:73:a5:ec:0b:c7:
44:d9:e9:13:1c:d3:d9:6b:ad:f8:2a:e5:7c:2c:06:d5:ea:40:
ce:de:82:bf:77:79:2f:62:6a:d9:44:5c:62:35:0d:f9:0d:bd:
d9:48:3c:b5:5d:8e:1f:aa:f9:dc:0b:ca:96:6e:79:2f:3d:0b:
38:fb:a5:6c:10:ae:12:5c:1f:7a:74:23:3b:4f:a0:89:88:d5:
93:98:2b:3b:cc:39:d2:27:10:25:b0:4f:70:95:dc:f1:cc:fb:
b1:26:ce:8f:ba:d4:ec:c7:49:3d:b7:57:0d:03:f1:05:63:85:
40:51:89:21:4f:b9:49:cc:08:9f:9e:49:05:b3:d7:f9:9b:d1:
8a:1b:d6:ec:f2:89:4d:68:71:94:69:46:8f:ac:90:59:f2:42:
2f:3b:a3:d3:51:e1:89:db:d3:af:2f:df:45:31:2d:e8:4b:9f:
ed:e3:64:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:23:50 2025 by rpki-client