Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS13213.roa
File: AS13213.roa (raw, json)
Hash identifier: /sx6zmSjZrIXJq05jkGs+GK3GbF5h1/t37yZ9iUC3+8=
Subject key identifier: A4:44:28:DF:3F:5D:EA:D9:79:81:0B:C4:88:6A:FA:D7:20:AC:C3:A4
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 07A20D6878B9A378590D44A931C794401D55D010
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS13213.roa
Signing time: Fri 18 Apr 2025 11:33:55 +0000
ROA not before: Fri 18 Apr 2025 11:28:55 +0000
ROA not after: Fri 17 Apr 2026 11:33:55 +0000
asID: 13213
IP address blocks: 46.202.2.0/24 maxlen: 24
46.202.29.0/24 maxlen: 24
46.202.31.0/24 maxlen: 24
46.202.37.0/24 maxlen: 24
46.202.43.0/24 maxlen: 24
46.202.44.0/24 maxlen: 24
46.202.47.0/24 maxlen: 24
46.202.48.0/24 maxlen: 24
46.202.76.0/24 maxlen: 24
46.202.80.0/24 maxlen: 24
46.203.89.0/24 maxlen: 24
46.203.106.0/24 maxlen: 24
91.124.44.0/24 maxlen: 24
91.124.45.0/24 maxlen: 24
91.124.46.0/24 maxlen: 24
91.124.47.0/24 maxlen: 24
92.112.13.0/24 maxlen: 24
92.112.16.0/24 maxlen: 24
92.112.17.0/24 maxlen: 24
92.112.18.0/24 maxlen: 24
92.112.19.0/24 maxlen: 24
92.112.69.0/24 maxlen: 24
92.112.76.0/24 maxlen: 24
92.112.78.0/24 maxlen: 24
92.112.80.0/24 maxlen: 24
92.112.87.0/24 maxlen: 24
92.112.88.0/24 maxlen: 24
92.113.54.0/24 maxlen: 24
92.113.64.0/24 maxlen: 24
95.135.2.0/24 maxlen: 24
95.135.3.0/24 maxlen: 24
95.135.4.0/24 maxlen: 24
95.135.5.0/24 maxlen: 24
95.135.8.0/24 maxlen: 24
95.135.9.0/24 maxlen: 24
95.135.10.0/24 maxlen: 24
95.135.11.0/24 maxlen: 24
95.135.14.0/24 maxlen: 24
95.135.15.0/24 maxlen: 24
95.135.16.0/24 maxlen: 24
95.135.17.0/24 maxlen: 24
95.135.20.0/24 maxlen: 24
95.135.21.0/24 maxlen: 24
95.135.22.0/24 maxlen: 24
95.135.23.0/24 maxlen: 24
95.135.26.0/24 maxlen: 24
95.135.27.0/24 maxlen: 24
95.135.28.0/24 maxlen: 24
95.135.29.0/24 maxlen: 24
95.135.32.0/24 maxlen: 24
95.135.33.0/24 maxlen: 24
95.135.34.0/24 maxlen: 24
95.135.35.0/24 maxlen: 24
95.135.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 00:18:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:a2:0d:68:78:b9:a3:78:59:0d:44:a9:31:c7:94:40:1d:55:d0:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Apr 18 11:28:55 2025 GMT
Not After : Apr 17 11:33:55 2026 GMT
Subject: CN=A44428DF3F5DEAD979810BC4886AFAD720ACC3A4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:06:b5:02:8d:4b:8f:cd:4f:e0:4f:10:38:77:
b3:9c:33:1d:4f:71:ab:7a:8e:fc:de:df:f5:cb:48:
8e:07:62:b8:1c:6b:d3:79:7e:96:aa:97:5c:c1:11:
09:34:1c:8c:34:c9:9e:5f:2e:93:a1:7b:72:fe:bb:
fe:da:c5:9e:63:22:35:d0:6e:6c:13:c6:65:06:9b:
48:bd:46:6e:24:04:59:43:98:fc:c4:d7:c6:69:55:
49:68:33:5f:59:05:53:48:5b:7f:8d:e3:41:37:39:
4c:31:58:c7:cf:c1:e1:5e:03:0c:48:d9:fd:2a:02:
d7:1a:18:d7:80:87:78:4b:60:14:cd:85:cd:c3:d1:
4b:e2:a3:34:e4:24:58:d1:db:f6:12:5a:ad:4e:05:
4f:fc:14:8d:1a:fa:16:72:76:e1:34:da:72:2f:e0:
dd:7c:07:b9:b8:8e:0e:f7:54:08:eb:a4:7a:54:8b:
0f:30:bc:6c:45:95:bd:a7:83:88:36:fc:8e:d5:bf:
bc:18:95:1f:4e:b8:e3:4b:ee:33:6d:f9:e0:5c:d4:
b7:50:49:45:26:fa:76:d0:8b:d3:f4:b5:f7:41:9a:
e7:b9:7c:2a:29:21:d8:8a:3b:d0:75:82:fc:86:16:
77:09:ec:63:78:36:06:c3:39:f6:e7:f6:f1:df:2d:
c8:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:44:28:DF:3F:5D:EA:D9:79:81:0B:C4:88:6A:FA:D7:20:AC:C3:A4
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS13213.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.202.2.0/24
46.202.29.0/24
46.202.31.0/24
46.202.37.0/24
46.202.43.0-46.202.44.255
46.202.47.0-46.202.48.255
46.202.76.0/24
46.202.80.0/24
46.203.89.0/24
46.203.106.0/24
91.124.44.0/22
92.112.13.0/24
92.112.16.0/22
92.112.69.0/24
92.112.76.0/24
92.112.78.0/24
92.112.80.0/24
92.112.87.0-92.112.88.255
92.113.54.0/24
92.113.64.0/24
95.135.2.0-95.135.5.255
95.135.8.0/22
95.135.14.0-95.135.17.255
95.135.20.0/22
95.135.26.0-95.135.29.255
95.135.32.0/22
95.135.253.0/24
Signature Algorithm: sha256WithRSAEncryption
21:d7:5c:bc:1b:03:29:bd:a2:68:3d:f6:ff:a6:ac:09:ba:f1:
10:e0:94:82:f0:fa:89:30:20:64:6b:ab:24:79:17:b4:46:e5:
ce:b9:2f:45:c4:52:17:2a:5e:27:2c:e9:bc:3e:43:61:78:99:
87:ca:82:f5:b7:cd:a4:6a:a2:53:a3:ac:ba:e8:2b:52:ed:b1:
1b:25:83:30:ba:d6:ef:f0:3f:a5:0e:06:bf:d9:c2:ea:22:97:
e5:00:9a:64:e8:3a:00:ba:31:ea:0e:57:10:ce:be:f1:df:f4:
ee:e8:d3:e2:33:b5:38:bb:01:a8:e7:95:8f:a3:ae:3e:81:60:
fe:c4:65:11:fe:c7:19:16:6b:b4:1e:1f:05:3d:ba:4f:35:89:
fd:4b:fb:6a:78:55:4e:43:d9:f0:5b:15:ae:a3:2f:b2:b9:7c:
7f:9d:34:db:70:32:c8:bf:7c:00:e3:01:2c:0f:c5:e8:02:0b:
1e:ea:05:cb:27:a0:0d:d5:cb:b0:d4:c1:78:bc:c2:89:04:f1:
59:27:83:d2:2d:c5:c0:41:db:f2:1a:52:78:e2:f7:7c:90:8f:
d5:dc:36:99:ae:87:9f:25:05:6f:2c:64:b4:ea:68:8a:01:de:
c6:2f:f4:38:97:92:3e:0e:a6:ef:40:2e:ba:b4:06:bb:56:a5:
56:4e:67:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:05:22 2025 by rpki-client