Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS212238.roa
File: AS212238.roa (raw, json)
Hash identifier: iYQS6+Rt6WJ0qB7VC6oKcCsHCGErXf13/BAQdcleVlw=
Subject key identifier: 13:7F:F3:52:A7:C1:5C:1D:7A:84:7F:7F:A3:D1:D1:B6:D2:A2:4B:0E
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 3A11530A1D43C2DCBAAF7612B0EAB4BC7B3C8933
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS212238.roa
Signing time: Sun 02 Mar 2025 23:48:22 +0000
ROA not before: Sun 02 Mar 2025 23:43:22 +0000
ROA not after: Sun 01 Mar 2026 23:48:22 +0000
asID: 212238
IP address blocks: 46.202.249.0/24 maxlen: 24
46.202.250.0/24 maxlen: 24
46.203.0.0/24 maxlen: 24
46.203.7.0/24 maxlen: 24
46.203.34.0/24 maxlen: 24
46.203.40.0/24 maxlen: 24
46.203.73.0/24 maxlen: 24
46.203.79.0/24 maxlen: 24
46.203.103.0/24 maxlen: 24
46.203.115.0/24 maxlen: 24
46.203.147.0/24 maxlen: 24
46.203.154.0/24 maxlen: 24
46.203.157.0/24 maxlen: 24
46.203.158.0/24 maxlen: 24
46.203.185.0/24 maxlen: 24
46.203.188.0/24 maxlen: 24
46.203.189.0/24 maxlen: 24
46.203.190.0/24 maxlen: 24
46.203.195.0/24 maxlen: 24
46.203.204.0/24 maxlen: 24
46.203.250.0/24 maxlen: 24
46.203.251.0/24 maxlen: 24
91.124.7.0/24 maxlen: 24
91.124.8.0/24 maxlen: 24
91.124.9.0/24 maxlen: 24
91.124.10.0/24 maxlen: 24
91.124.11.0/24 maxlen: 24
91.124.13.0/24 maxlen: 24
91.124.24.0/24 maxlen: 24
91.124.31.0/24 maxlen: 24
91.124.33.0/24 maxlen: 24
91.124.129.0/24 maxlen: 24
91.124.139.0/24 maxlen: 24
91.124.144.0/24 maxlen: 24
91.124.187.0/24 maxlen: 24
91.124.221.0/24 maxlen: 24
92.112.53.0/24 maxlen: 24
92.112.57.0/24 maxlen: 24
92.112.92.0/24 maxlen: 24
92.112.137.0/24 maxlen: 24
92.112.143.0/24 maxlen: 24
95.135.239.0/24 maxlen: 24
95.135.240.0/24 maxlen: 24
95.135.241.0/24 maxlen: 24
95.135.254.0/24 maxlen: 24
95.135.255.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:11:53:0a:1d:43:c2:dc:ba:af:76:12:b0:ea:b4:bc:7b:3c:89:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Mar 2 23:43:22 2025 GMT
Not After : Mar 1 23:48:22 2026 GMT
Subject: CN=137FF352A7C15C1D7A847F7FA3D1D1B6D2A24B0E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:a3:9f:d1:2b:a2:aa:52:ec:a6:d7:fc:83:69:
c7:5f:54:ff:a9:c3:0a:4f:0d:66:ab:71:52:7c:8b:
6b:d5:8e:7f:2e:5b:2d:b2:26:54:dd:69:ae:e3:2e:
8a:3a:6b:61:50:05:f3:a6:1a:e4:36:4c:d1:be:7a:
d4:81:68:05:fe:b4:d9:15:2d:ca:1a:db:7a:24:77:
80:3b:53:ee:a4:6a:da:f6:28:f6:1f:91:41:be:3e:
2b:8a:29:cb:1c:9f:17:7c:23:28:36:b0:5b:5d:5e:
20:5d:30:d0:7a:fe:6f:90:c5:1b:06:06:2c:2a:9f:
ac:e5:68:cf:78:bb:c1:85:5b:35:52:f0:08:56:e9:
02:eb:27:4c:dc:ba:b9:44:0e:ea:1a:09:50:47:89:
32:bc:89:ea:9a:ac:91:1f:cb:f7:d6:2f:23:d5:03:
89:fa:67:e6:3f:aa:5c:30:29:9c:83:02:0c:79:8e:
e5:93:0a:c2:fa:f2:06:86:2a:68:10:58:61:95:7c:
4b:b6:f3:bb:65:ca:e1:66:1a:4c:dd:48:b5:14:cc:
28:fc:e1:a5:4c:8f:17:82:9f:9f:94:76:c1:92:7a:
02:64:5b:79:2c:2a:fe:43:0d:e8:0f:6c:47:93:8c:
1f:98:79:35:a8:f5:10:83:c3:fc:41:5a:02:9b:6b:
ee:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:7F:F3:52:A7:C1:5C:1D:7A:84:7F:7F:A3:D1:D1:B6:D2:A2:4B:0E
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS212238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.202.249.0-46.202.250.255
46.203.0.0/24
46.203.7.0/24
46.203.34.0/24
46.203.40.0/24
46.203.73.0/24
46.203.79.0/24
46.203.103.0/24
46.203.115.0/24
46.203.147.0/24
46.203.154.0/24
46.203.157.0-46.203.158.255
46.203.185.0/24
46.203.188.0-46.203.190.255
46.203.195.0/24
46.203.204.0/24
46.203.250.0/23
91.124.7.0-91.124.11.255
91.124.13.0/24
91.124.24.0/24
91.124.31.0/24
91.124.33.0/24
91.124.129.0/24
91.124.139.0/24
91.124.144.0/24
91.124.187.0/24
91.124.221.0/24
92.112.53.0/24
92.112.57.0/24
92.112.92.0/24
92.112.137.0/24
92.112.143.0/24
95.135.239.0-95.135.241.255
95.135.254.0/23
Signature Algorithm: sha256WithRSAEncryption
73:54:f2:2c:db:47:e6:32:38:e7:cf:a0:70:f6:d6:4d:de:32:
72:4b:ff:61:65:62:ec:90:54:23:19:01:ce:4a:5f:b4:b4:71:
90:f4:c4:a7:61:fb:6f:80:36:a0:43:08:81:b4:da:75:ba:ac:
a5:d7:ce:6b:ad:82:60:de:46:5b:28:e1:cf:3f:e6:11:02:6a:
9a:38:ac:1b:6b:53:82:55:9e:c5:91:3e:4d:e4:c0:92:65:ed:
68:07:a2:99:cf:c6:cd:88:bd:79:bc:c7:3e:b3:2b:9d:e1:c3:
db:38:54:99:b6:2d:87:ec:2f:fc:29:18:79:6a:73:e0:02:27:
7c:ed:92:4a:bd:55:10:a8:15:a8:b0:e5:5a:e8:fd:1e:68:75:
d1:08:b2:86:7e:d4:40:9c:9b:2b:ba:80:a3:4d:17:7b:0e:28:
7b:1e:ba:0c:8d:4c:84:3c:75:43:fc:b3:6b:85:c3:bf:f2:36:
a4:bd:c8:4f:0a:33:3b:22:0b:b7:ad:e9:a9:a0:d3:45:4a:57:
50:fc:3e:c1:c4:fa:7f:49:a0:ed:75:97:12:ca:4e:79:98:9e:
67:ef:bc:ca:71:36:ca:00:40:9f:d1:82:c0:b7:23:b0:56:78:
98:8a:ea:a1:42:a7:60:45:9a:fd:2e:c9:3d:85:a8:f0:a7:2f:
04:ee:bc:2a
-----BEGIN CERTIFICATE-----
MIIF9TCCBN2gAwIBAgIUOhFTCh1Dwty6r3YSsOq0vHs8iTMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk
NWMxM2I1ZjAeFw0yNTAzMDIyMzQzMjJaFw0yNjAzMDEyMzQ4MjJaMDMxMTAvBgNV
BAMTKDEzN0ZGMzUyQTdDMTVDMUQ3QTg0N0Y3RkEzRDFEMUI2RDJBMjRCMEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDno5/RK6KqUuym1/yDacdfVP+p
wwpPDWarcVJ8i2vVjn8uWy2yJlTdaa7jLoo6a2FQBfOmGuQ2TNG+etSBaAX+tNkV
Lcoa23okd4A7U+6katr2KPYfkUG+PiuKKcscnxd8Iyg2sFtdXiBdMNB6/m+QxRsG
Biwqn6zlaM94u8GFWzVS8AhW6QLrJ0zcurlEDuoaCVBHiTK8ieqarJEfy/fWLyPV
A4n6Z+Y/qlwwKZyDAgx5juWTCsL68gaGKmgQWGGVfEu287tlyuFmGkzdSLUUzCj8
4aVMjxeCn5+UdsGSegJkW3ksKv5DDegPbEeTjB+YeTWo9RCDw/xBWgKba+61AgMB
AAGjggL/MIIC+zAdBgNVHQ4EFgQUE3/zUqfBXB16hH9/o9HRttKiSw4wHwYDVR0j
BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm
NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y
Qk8xOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt
NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTMjEyMjM4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMIIBEgYIKwYBBQUHAQcBAf8EggEBMIH+MIH7BAIAATCB
9DAMAwQALsr5AwQALsr6AwQALssAAwQALssHAwQALssiAwQALssoAwQALstJAwQA
LstPAwQALstnAwQALstzAwQALsuTAwQALsuaMAwDBAAuy50DBAAuy54DBAAuy7kw
DAMEAi7LvAMEAC7LvgMEAC7LwwMEAC7LzAMEAS7L+jAMAwQAW3wHAwQCW3wIAwQA
W3wNAwQAW3wYAwQAW3wfAwQAW3whAwQAW3yBAwQAW3yLAwQAW3yQAwQAW3y7AwQA
W3zdAwQAXHA1AwQAXHA5AwQAXHBcAwQAXHCJAwQAXHCPMAwDBABfh+8DBAFfh/AD
BAFfh/4wDQYJKoZIhvcNAQELBQADggEBAHNU8izbR+YyOOfPoHD21k3eMnJL/2Fl
YuyQVCMZAc5KX7S0cZD0xKdh+2+ANqBDCIG02nW6rKXXzmutgmDeRlso4c8/5hEC
apo4rBtrU4JVnsWRPk3kwJJl7WgHopnPxs2IvXm8xz6zK53hw9s4VJm2LYfsL/wp
GHlqc+ACJ3ztkkq9VRCoFaiw5Vro/R5oddEIsoZ+1ECcmyu6gKNNF3sOKHseugyN
TIQ8dUP8s2uFw7/yNqS9yE8KMzsiC7et6amg00VKV1D8PsHE+n9JoO11lxLKTnmY
nmfvvMpxNsoAQJ/RgsC3I7BWeJiK6qFCp2BFmv0uyT2FqPCnLwTuvCo=
-----END CERTIFICATE-----
Generated at Sat Apr 5 15:30:32 2025 by rpki-client