Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS13213.roa
File: AS13213.roa (raw, json)
Hash identifier: tA+1+5LjitzvALBlcxoVxr+iDc+qzHGwDpPlbwCpfqk=
Subject key identifier: B6:51:FF:BF:FD:82:44:AE:C0:26:35:D0:FA:E4:1C:41:A7:85:FB:8C
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 19976539ACEB45AED50123F84C26D2751EF0DA6F
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS13213.roa
Signing time: Wed 15 Jan 2025 10:30:53 +0000
ROA not before: Wed 15 Jan 2025 10:25:53 +0000
ROA not after: Wed 14 Jan 2026 10:30:53 +0000
asID: 13213
IP address blocks: 91.124.91.0/24 maxlen: 24
92.113.54.0/24 maxlen: 24
92.113.64.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:97:65:39:ac:eb:45:ae:d5:01:23:f8:4c:26:d2:75:1e:f0:da:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Jan 15 10:25:53 2025 GMT
Not After : Jan 14 10:30:53 2026 GMT
Subject: CN=B651FFBFFD8244AEC02635D0FAE41C41A785FB8C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:2a:b9:5a:c5:aa:2b:b5:fb:a4:4d:8e:10:4b:
5a:99:6e:6c:ae:8e:08:07:95:aa:cb:96:01:9f:a5:
ab:ec:6b:ee:56:4f:7e:e5:a2:91:f2:2b:ef:69:c5:
b9:d1:1d:76:38:52:85:c4:a2:d7:e6:06:54:62:7c:
37:7b:4f:c2:b3:94:69:c0:b9:ee:6a:5d:da:fa:83:
a9:a9:99:e4:e0:5d:21:b1:62:d4:5e:da:62:70:d9:
87:42:4d:ed:f0:23:39:9d:49:f4:58:af:f1:5a:74:
26:eb:fa:51:df:a0:88:9a:f7:b7:fd:43:71:84:a2:
a9:2a:fc:09:be:1e:aa:2e:6d:d4:af:8a:68:c3:e0:
00:23:7b:f8:0d:69:ff:95:6b:0a:a6:b2:af:4c:a9:
90:f4:79:18:54:3c:8d:08:f4:2b:cf:f3:fb:7c:4b:
e6:02:e5:97:f0:f5:8d:a0:01:22:e8:06:dc:95:63:
e8:dd:69:d6:06:6a:a4:08:52:49:38:9c:7c:c6:c3:
e1:cc:7e:f5:5c:25:af:e0:43:13:8b:d4:f7:8d:b1:
e9:ba:b1:6e:07:88:44:95:69:15:e1:64:fe:66:56:
50:51:9b:f0:3a:b4:45:1d:8d:04:6e:7e:c4:30:c9:
98:db:d1:69:33:9c:27:d6:80:ad:ac:ba:f5:f1:87:
fe:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:51:FF:BF:FD:82:44:AE:C0:26:35:D0:FA:E4:1C:41:A7:85:FB:8C
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS13213.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.124.91.0/24
92.113.54.0/24
92.113.64.0/24
Signature Algorithm: sha256WithRSAEncryption
14:ce:8a:8b:2a:a3:00:fb:9b:30:0e:35:39:99:59:e5:33:67:
4f:fc:18:1b:21:f3:73:f3:db:5d:42:ab:2c:59:ba:ad:45:98:
6d:f9:0f:aa:38:b9:b8:93:31:2a:8d:fa:2b:49:2e:f1:6c:2c:
41:38:1e:be:ab:77:9f:a6:8c:f5:cf:31:6f:56:3e:8f:df:26:
89:23:ae:12:b2:c9:40:1f:da:eb:02:87:c3:7d:91:d8:f4:f4:
10:66:12:b4:1f:aa:68:be:a0:3b:13:b4:67:03:f4:96:ab:7a:
bb:bf:53:aa:b0:5e:8c:71:9b:6e:75:e1:0d:93:ae:d5:40:81:
c5:ef:11:c6:0a:07:f0:20:c5:09:a7:b4:61:7b:79:4d:39:32:
ef:13:c1:42:5c:65:de:c5:8b:1f:ea:66:c5:7c:6c:c7:40:33:
89:6b:00:22:63:10:e8:a9:48:c8:ff:3f:ed:2f:14:6d:ff:71:
81:8b:b7:ca:a1:fa:9f:06:34:69:24:c8:76:1a:9a:cc:1c:82:
68:1d:f7:74:e2:10:0b:e0:a7:ac:59:04:2f:a4:89:2e:08:9b:
90:65:90:95:b8:08:37:e8:bc:c2:fd:fb:f2:ac:62:25:10:21:
83:4c:db:d0:0f:9d:b6:74:0b:65:7e:d0:1c:ce:16:d3:93:20:
23:89:ca:12
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 25 07:02:05 2025 by rpki-client