Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS12993.roa
File: AS12993.roa (raw, json)
Hash identifier: 0/ONRZ76jA6cFA/b7NvtQRlESUe6iGH2E8GvFV622z4=
Subject key identifier: 92:16:6D:A5:78:23:04:2A:60:95:CA:50:89:C3:2F:F3:DA:0C:96:22
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 1605CD5FFCE4909E75596BDDBDDA84935F0F02D4
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS12993.roa
Signing time: Thu 03 Apr 2025 13:56:57 +0000
ROA not before: Thu 03 Apr 2025 13:51:57 +0000
ROA not after: Thu 02 Apr 2026 13:56:57 +0000
asID: 12993
IP address blocks: 82.21.227.0/24 maxlen: 24
82.21.237.0/24 maxlen: 24
82.22.224.0/24 maxlen: 24
82.23.204.0/24 maxlen: 24
82.23.214.0/24 maxlen: 24
82.24.214.0/24 maxlen: 24
82.24.220.0/24 maxlen: 24
82.25.210.0/24 maxlen: 24
82.25.234.0/24 maxlen: 24
82.26.219.0/24 maxlen: 24
82.26.220.0/24 maxlen: 24
82.26.230.0/24 maxlen: 24
82.26.233.0/24 maxlen: 24
82.27.210.0/24 maxlen: 24
82.27.218.0/24 maxlen: 24
82.27.220.0/24 maxlen: 24
82.29.211.0/24 maxlen: 24
82.29.220.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:05:cd:5f:fc:e4:90:9e:75:59:6b:dd:bd:da:84:93:5f:0f:02:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Apr 3 13:51:57 2025 GMT
Not After : Apr 2 13:56:57 2026 GMT
Subject: CN=92166DA57823042A6095CA5089C32FF3DA0C9622
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:58:67:2c:8d:67:5a:59:d7:74:55:f9:e3:47:
28:f0:a4:6c:c4:cf:db:7c:25:d6:1a:2a:9c:57:cd:
14:d3:ca:7a:3e:a8:90:71:ba:eb:b2:fc:ad:6f:4b:
d4:b7:31:a8:50:a6:e0:79:80:be:49:ff:ad:0a:0b:
7f:49:fa:92:32:41:02:b6:e7:5f:e9:9d:02:0f:5e:
d0:e7:c1:73:71:ae:bf:c3:3b:d8:46:5b:44:30:e5:
03:16:a9:91:f3:31:59:69:5a:19:d5:41:f1:dc:14:
5a:ac:85:da:8a:bd:27:0f:73:75:63:02:dc:8f:92:
e9:e3:1a:28:77:8c:56:2c:0c:74:d8:80:31:de:75:
3e:1b:a9:72:1d:6c:cf:10:f0:4a:db:76:0e:4d:12:
74:41:62:a6:96:29:35:5e:c0:ab:d0:31:1f:54:a4:
90:d6:b3:49:4b:cd:61:e2:c2:2c:0b:84:5f:36:6f:
63:ee:29:d3:bb:bc:ed:49:3c:fc:96:7f:c4:fb:b4:
fa:42:ab:cd:8a:d2:bd:c7:3c:9c:22:99:cb:39:50:
b9:84:bf:55:6e:a7:0a:85:06:0c:2c:30:17:09:dc:
e3:06:68:63:75:92:6f:7b:3c:bc:0d:80:55:aa:fa:
db:6b:ed:e4:d9:f3:69:ad:39:33:58:ae:53:eb:d9:
59:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:16:6D:A5:78:23:04:2A:60:95:CA:50:89:C3:2F:F3:DA:0C:96:22
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS12993.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.227.0/24
82.21.237.0/24
82.22.224.0/24
82.23.204.0/24
82.23.214.0/24
82.24.214.0/24
82.24.220.0/24
82.25.210.0/24
82.25.234.0/24
82.26.219.0-82.26.220.255
82.26.230.0/24
82.26.233.0/24
82.27.210.0/24
82.27.218.0/24
82.27.220.0/24
82.29.211.0/24
82.29.220.0/24
Signature Algorithm: sha256WithRSAEncryption
60:3e:19:d4:10:5b:86:1b:4f:c8:50:13:5e:59:cf:1d:2d:0b:
45:ec:df:69:c6:b6:55:5c:3b:ff:d7:42:c4:2f:8a:46:7f:3a:
30:18:1e:69:97:c9:a4:4c:ea:e2:00:67:a9:f5:84:45:fe:da:
6c:78:ee:d6:12:83:05:c4:84:86:40:a2:b3:c7:ce:92:45:87:
e0:c7:c8:cf:4b:76:54:46:e8:66:b5:96:ba:58:79:f5:3e:7f:
35:52:a5:39:a2:35:ad:d5:29:8d:eb:6c:24:d2:7c:b8:1b:69:
bd:ae:04:7d:23:3a:7a:3b:87:d8:ae:b8:dd:a9:fc:f7:3c:84:
5c:50:03:f3:ce:fc:f5:0b:87:3d:2a:d7:7a:cc:34:28:4d:f6:
d5:a3:a2:28:f5:d5:02:c2:f7:fb:d2:7c:ca:74:a5:39:72:d1:
05:a4:49:fe:a8:11:ae:48:87:8b:79:eb:5e:81:df:89:ae:49:
b6:1d:72:6a:4f:b1:65:3f:42:72:ac:7f:8f:5e:33:3f:0f:a6:
b4:66:e1:ec:79:82:72:6b:b6:ff:17:b4:68:81:b7:f8:ce:f4:
28:8c:f7:85:44:53:a1:9f:1a:0d:da:c2:4e:e1:16:0c:9e:85:
bf:66:d9:9b:5e:72:d6:09:b2:73:e2:42:62:bb:4b:36:a7:46:
1b:1f:db:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:34:27 2025 by rpki-client on console.sobornost.net