Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS13213.roa
File: AS13213.roa (raw, json)
Hash identifier: Z0A80yCm6my18XaAYRxbVGIQQMSISD4MklI4j4GpR/I=
Subject key identifier: F5:46:37:4E:E4:48:61:82:FB:43:D6:76:15:0E:76:7E:9F:06:1A:8E
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 786A42F2E0F41919A2E3CE750D190162F5440AE9
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS13213.roa
Signing time: Wed 01 Jan 2025 00:02:04 +0000
ROA not before: Tue 31 Dec 2024 23:57:04 +0000
ROA not after: Wed 31 Dec 2025 00:02:04 +0000
asID: 13213
IP address blocks: 2.58.29.0/24 maxlen: 24
5.181.133.0/24 maxlen: 24
45.81.2.0/24 maxlen: 24
45.89.251.0/24 maxlen: 24
45.137.31.0/24 maxlen: 24
45.139.181.0/24 maxlen: 24
92.119.33.0/24 maxlen: 24
109.106.2.0/24 maxlen: 24
109.106.3.0/24 maxlen: 24
130.185.125.0/24 maxlen: 24
179.61.167.0/24 maxlen: 24
179.61.175.0/24 maxlen: 24
179.61.178.0/24 maxlen: 24
179.61.179.0/24 maxlen: 24
179.61.218.0/24 maxlen: 24
179.61.233.0/24 maxlen: 24
181.41.204.0/24 maxlen: 24
181.41.208.0/24 maxlen: 24
181.214.60.0/24 maxlen: 24
181.214.61.0/24 maxlen: 24
181.214.64.0/24 maxlen: 24
181.214.65.0/24 maxlen: 24
181.214.66.0/24 maxlen: 24
181.214.67.0/24 maxlen: 24
181.214.68.0/24 maxlen: 24
181.214.69.0/24 maxlen: 24
181.214.86.0/24 maxlen: 24
181.214.97.0/24 maxlen: 24
181.214.100.0/24 maxlen: 24
181.214.103.0/24 maxlen: 24
181.214.108.0/24 maxlen: 24
181.214.109.0/24 maxlen: 24
181.214.110.0/24 maxlen: 24
181.214.111.0/24 maxlen: 24
181.214.113.0/24 maxlen: 24
181.214.114.0/24 maxlen: 24
181.214.116.0/24 maxlen: 24
181.214.120.0/24 maxlen: 24
181.214.124.0/24 maxlen: 24
181.214.125.0/24 maxlen: 24
181.214.126.0/24 maxlen: 24
181.214.148.0/24 maxlen: 24
181.214.200.0/24 maxlen: 24
181.214.201.0/24 maxlen: 24
181.214.202.0/24 maxlen: 24
181.214.203.0/24 maxlen: 24
181.214.225.0/24 maxlen: 24
181.215.19.0/24 maxlen: 24
181.215.80.0/24 maxlen: 24
181.215.81.0/24 maxlen: 24
181.215.82.0/24 maxlen: 24
181.215.83.0/24 maxlen: 24
181.215.84.0/24 maxlen: 24
181.215.85.0/24 maxlen: 24
181.215.86.0/24 maxlen: 24
181.215.96.0/24 maxlen: 24
181.215.98.0/24 maxlen: 24
181.215.100.0/24 maxlen: 24
181.215.103.0/24 maxlen: 24
181.215.105.0/24 maxlen: 24
181.215.106.0/24 maxlen: 24
181.215.117.0/24 maxlen: 24
181.215.118.0/24 maxlen: 24
181.215.126.0/24 maxlen: 24
181.215.129.0/24 maxlen: 24
181.215.131.0/24 maxlen: 24
181.215.150.0/24 maxlen: 24
181.215.155.0/24 maxlen: 24
181.215.158.0/24 maxlen: 24
181.215.217.0/24 maxlen: 24
181.215.240.0/24 maxlen: 24
185.34.43.0/24 maxlen: 24
185.142.24.0/24 maxlen: 24
185.143.229.0/24 maxlen: 24
185.151.59.0/24 maxlen: 24
185.158.100.0/24 maxlen: 24
185.158.101.0/24 maxlen: 24
185.158.102.0/24 maxlen: 24
185.158.103.0/24 maxlen: 24
185.158.134.0/24 maxlen: 24
191.96.35.0/24 maxlen: 24
191.96.46.0/24 maxlen: 24
191.96.88.0/24 maxlen: 24
191.96.89.0/24 maxlen: 24
191.96.91.0/24 maxlen: 24
191.96.160.0/24 maxlen: 24
191.96.161.0/24 maxlen: 24
191.96.162.0/24 maxlen: 24
191.96.163.0/24 maxlen: 24
191.96.239.0/24 maxlen: 24
191.101.4.0/24 maxlen: 24
191.101.5.0/24 maxlen: 24
191.101.10.0/24 maxlen: 24
191.101.29.0/24 maxlen: 24
191.101.43.0/24 maxlen: 24
191.101.99.0/24 maxlen: 24
191.101.119.0/24 maxlen: 24
191.101.159.0/24 maxlen: 24
191.101.167.0/24 maxlen: 24
191.101.225.0/24 maxlen: 24
191.101.255.0/24 maxlen: 24
213.109.171.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:6a:42:f2:e0:f4:19:19:a2:e3:ce:75:0d:19:01:62:f5:44:0a:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Dec 31 23:57:04 2024 GMT
Not After : Dec 31 00:02:04 2025 GMT
Subject: CN=F546374EE4486182FB43D676150E767E9F061A8E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:56:09:0c:14:59:65:60:46:4e:3b:c9:ed:1f:
90:9c:50:88:57:e7:8f:88:e0:ce:b9:6d:4a:21:7c:
ab:81:fc:bf:d0:9c:4c:fc:10:67:8c:89:f2:8a:ed:
76:f9:69:7f:1c:b1:df:70:65:73:22:f0:47:cb:0e:
e1:3f:6f:b2:20:85:fc:d2:02:ae:e6:e4:bc:dd:00:
58:8f:01:5f:8b:75:52:b1:5d:67:d2:86:82:ac:13:
e9:a9:f1:61:ea:81:d6:f1:13:9f:af:9b:37:a3:1a:
0b:89:7b:cb:66:11:e5:fc:ad:59:64:b4:19:02:ba:
38:80:f6:6c:35:fd:6b:da:88:1d:5a:c6:46:c3:14:
ba:16:8c:ca:d1:5d:fe:61:de:5c:e1:d9:a0:21:b3:
0e:79:da:ab:50:42:d5:3a:d1:de:bb:d4:53:f6:b2:
23:46:8a:98:73:af:81:3c:53:02:be:e1:e4:d5:f2:
36:90:38:e2:a2:24:fa:2a:99:55:63:a0:70:bd:fd:
d1:12:69:e7:0f:6f:ea:14:1a:6e:a7:72:fc:a0:0d:
35:8c:95:d8:9a:82:56:2f:01:7c:8a:39:ca:8b:8f:
6d:85:2b:3c:a8:96:8d:b9:6c:83:57:18:3a:cd:d9:
f5:46:cb:0d:67:35:5d:6f:8c:34:53:ec:7c:56:50:
ff:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:46:37:4E:E4:48:61:82:FB:43:D6:76:15:0E:76:7E:9F:06:1A:8E
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS13213.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.29.0/24
5.181.133.0/24
45.81.2.0/24
45.89.251.0/24
45.137.31.0/24
45.139.181.0/24
92.119.33.0/24
109.106.2.0/23
130.185.125.0/24
179.61.167.0/24
179.61.175.0/24
179.61.178.0/23
179.61.218.0/24
179.61.233.0/24
181.41.204.0/24
181.41.208.0/24
181.214.60.0/23
181.214.64.0-181.214.69.255
181.214.86.0/24
181.214.97.0/24
181.214.100.0/24
181.214.103.0/24
181.214.108.0/22
181.214.113.0-181.214.114.255
181.214.116.0/24
181.214.120.0/24
181.214.124.0-181.214.126.255
181.214.148.0/24
181.214.200.0/22
181.214.225.0/24
181.215.19.0/24
181.215.80.0-181.215.86.255
181.215.96.0/24
181.215.98.0/24
181.215.100.0/24
181.215.103.0/24
181.215.105.0-181.215.106.255
181.215.117.0-181.215.118.255
181.215.126.0/24
181.215.129.0/24
181.215.131.0/24
181.215.150.0/24
181.215.155.0/24
181.215.158.0/24
181.215.217.0/24
181.215.240.0/24
185.34.43.0/24
185.142.24.0/24
185.143.229.0/24
185.151.59.0/24
185.158.100.0/22
185.158.134.0/24
191.96.35.0/24
191.96.46.0/24
191.96.88.0/23
191.96.91.0/24
191.96.160.0/22
191.96.239.0/24
191.101.4.0/23
191.101.10.0/24
191.101.29.0/24
191.101.43.0/24
191.101.99.0/24
191.101.119.0/24
191.101.159.0/24
191.101.167.0/24
191.101.225.0/24
191.101.255.0/24
213.109.171.0/24
Signature Algorithm: sha256WithRSAEncryption
44:31:ea:03:bd:64:86:fa:66:d3:86:4f:b2:e0:1f:04:2d:11:
37:ca:92:ea:12:5e:43:35:c5:7f:33:43:6f:4b:20:44:06:70:
91:c2:8e:7e:89:6c:b7:a3:a0:4a:10:d6:60:fe:7f:b6:89:90:
4b:34:ab:85:85:84:7f:f3:08:37:54:d7:8e:0b:36:c3:c7:01:
22:f0:e6:0a:fc:27:09:5c:ac:88:11:20:4e:a5:16:ca:6f:a6:
5a:dc:4f:27:90:e2:72:d6:0f:8c:4c:0f:80:e1:bd:63:68:db:
a8:dc:2f:8e:d4:fb:c8:90:84:52:4c:c9:4f:ee:ef:21:eb:7c:
8c:2a:54:d7:98:b0:f9:c0:6d:74:1d:1c:90:a8:58:8d:87:94:
05:64:2f:b9:64:a4:f0:19:34:ff:e1:77:3a:83:9d:86:7f:3b:
51:f4:8b:07:3c:1b:a4:5e:0c:35:f3:f8:22:8f:08:2d:df:5e:
6f:54:24:4b:9f:3f:e7:5e:d4:57:0b:39:61:ff:06:ac:e2:16:
f6:2c:c6:2f:22:ce:21:ca:e9:2e:b0:11:7e:ec:26:f7:fd:a2:
ed:76:82:3a:3c:7a:09:dd:61:c6:b2:cf:c8:1e:04:3c:69:87:
46:31:25:7c:a3:68:9f:09:28:b9:ea:c7:2d:52:34:ed:5f:0a:
ee:f6:7b:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:17:38 2025 by rpki-client