Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS213683.roa
File: AS213683.roa (raw, json)
Hash identifier: cpCMHwnA1FtbNMHfMe0X9BmJsssvX+HwhUem5q9q7kU=
Subject key identifier: 04:AF:AF:0C:07:C8:DE:52:40:06:65:07:B4:03:28:14:07:62:C4:09
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 66D03C52B167C80D606C095E75BC2D0E900AC0F8
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS213683.roa
Signing time: Mon 10 Mar 2025 16:05:41 +0000
ROA not before: Mon 10 Mar 2025 16:00:41 +0000
ROA not after: Mon 09 Mar 2026 16:05:41 +0000
asID: 213683
IP address blocks: 82.22.239.0/24 maxlen: 24
82.23.212.0/24 maxlen: 24
82.23.224.0/24 maxlen: 24
82.24.231.0/24 maxlen: 24
82.25.230.0/24 maxlen: 24
82.26.235.0/24 maxlen: 24
82.26.240.0/24 maxlen: 24
82.27.208.0/24 maxlen: 24
82.27.215.0/24 maxlen: 24
82.27.230.0/24 maxlen: 24
82.29.208.0/24 maxlen: 24
82.29.231.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:d0:3c:52:b1:67:c8:0d:60:6c:09:5e:75:bc:2d:0e:90:0a:c0:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Mar 10 16:00:41 2025 GMT
Not After : Mar 9 16:05:41 2026 GMT
Subject: CN=04AFAF0C07C8DE5240066507B40328140762C409
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:5d:60:54:f8:cf:ac:c9:c2:88:98:f5:b1:4a:
f7:66:dc:94:fc:a9:1b:44:59:65:81:29:6a:3d:b6:
f0:ce:52:21:fe:bc:c6:83:57:72:13:f0:ee:cd:14:
77:fb:e1:e1:22:85:26:6f:cb:16:31:ee:60:38:ca:
4c:cf:04:08:e1:21:a9:6b:fa:be:68:07:51:dc:60:
f2:a0:c3:b4:e3:28:05:e8:d5:aa:c2:83:2a:85:51:
9a:0f:01:14:6f:53:cb:ac:d3:f8:f9:8d:2f:7e:5d:
e5:b5:52:82:9c:14:e2:d2:10:5c:ca:69:51:39:5d:
e8:5d:71:d4:ae:00:3c:26:45:5b:dc:f7:ce:af:fe:
9c:d1:79:ba:70:d6:6c:89:b5:d8:a5:25:5f:8d:93:
33:92:2b:f3:12:df:00:f4:17:d7:c0:b2:55:25:3e:
8f:88:cf:52:f7:13:a3:85:48:9d:26:a8:b1:07:cb:
49:e0:4d:b9:2a:35:90:ee:9e:cd:e2:f3:a6:da:ad:
62:1c:59:ce:ea:27:92:66:fd:7f:29:82:5d:8d:b7:
4d:fc:2f:a6:50:ab:54:cb:02:d7:3f:e9:d2:25:f9:
a6:7d:d6:0d:8e:8c:29:62:fc:a7:d3:5c:8f:0f:a1:
94:62:59:2e:4d:b1:69:e4:79:47:c5:f1:8b:98:3a:
53:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:AF:AF:0C:07:C8:DE:52:40:06:65:07:B4:03:28:14:07:62:C4:09
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS213683.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.22.239.0/24
82.23.212.0/24
82.23.224.0/24
82.24.231.0/24
82.25.230.0/24
82.26.235.0/24
82.26.240.0/24
82.27.208.0/24
82.27.215.0/24
82.27.230.0/24
82.29.208.0/24
82.29.231.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:fb:70:1b:59:0b:e5:5b:6e:80:28:21:cd:71:d5:74:92:04:
1d:fb:53:ad:7c:b1:e2:58:52:88:51:eb:52:11:81:b7:44:bc:
7e:fb:60:0e:6e:7e:88:f2:fb:fc:89:ca:ad:d2:51:8d:4e:e2:
67:e8:e2:64:a3:7b:c4:bb:8f:92:52:36:d6:d5:22:6c:cb:f5:
2b:92:12:57:84:2c:e4:3b:1b:35:ed:19:0c:5d:56:db:d6:9b:
9d:0a:d0:43:09:43:94:03:e9:ea:3d:81:26:e8:51:0b:d5:4f:
4b:30:17:b1:16:fa:4b:df:b3:1c:e1:f9:29:e3:08:44:17:20:
0b:96:8a:b6:ad:74:37:ce:97:c6:64:81:cb:9a:0c:c0:86:a0:
49:e4:c2:fa:b5:e5:fd:7f:97:c2:35:7b:12:40:5e:23:41:47:
bc:dc:24:1b:8c:1f:4b:76:d2:67:8a:24:22:9e:08:2b:c7:57:
d4:c1:20:00:92:86:14:c8:f4:a0:97:8d:58:f7:34:e0:da:23:
92:b5:30:bd:8f:9b:50:c6:17:3c:6a:a2:4d:7f:28:98:7e:e8:
0c:13:ce:a4:8e:b4:4b:8b:86:76:18:65:1c:73:75:a8:3d:01:
de:6f:1c:25:d2:2a:9c:38:a8:6d:ab:36:cc:e9:ab:75:b3:a0:
2e:94:66:f4
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUZtA8UrFnyA1gbAledbwtDpAKwPgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNTAzMTAxNjAwNDFaFw0yNjAzMDkxNjA1NDFaMDMxMTAvBgNV
BAMTKDA0QUZBRjBDMDdDOERFNTI0MDA2NjUwN0I0MDMyODE0MDc2MkM0MDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCKXWBU+M+sycKImPWxSvdm3JT8
qRtEWWWBKWo9tvDOUiH+vMaDV3IT8O7NFHf74eEihSZvyxYx7mA4ykzPBAjhIalr
+r5oB1HcYPKgw7TjKAXo1arCgyqFUZoPARRvU8us0/j5jS9+XeW1UoKcFOLSEFzK
aVE5XehdcdSuADwmRVvc986v/pzRebpw1myJtdilJV+NkzOSK/MS3wD0F9fAslUl
Po+Iz1L3E6OFSJ0mqLEHy0ngTbkqNZDuns3i86barWIcWc7qJ5Jm/X8pgl2Nt038
L6ZQq1TLAtc/6dIl+aZ91g2OjCli/KfTXI8PoZRiWS5NsWnkeUfF8YuYOlNXAgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQUBK+vDAfI3lJABmUHtAMoFAdixAkwHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjEzNjgzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMGEGCCsGAQUFBwEHAQH/BFIwUDBOBAIAATBIAwQAUhbv
AwQAUhfUAwQAUhfgAwQAUhjnAwQAUhnmAwQAUhrrAwQAUhrwAwQAUhvQAwQAUhvX
AwQAUhvmAwQAUh3QAwQAUh3nMA0GCSqGSIb3DQEBCwUAA4IBAQA8+3AbWQvlW26A
KCHNcdV0kgQd+1OtfLHiWFKIUetSEYG3RLx++2AObn6I8vv8icqt0lGNTuJn6OJk
o3vEu4+SUjbW1SJsy/UrkhJXhCzkOxs17RkMXVbb1pudCtBDCUOUA+nqPYEm6FEL
1U9LMBexFvpL37Mc4fkp4whEFyALloq2rXQ3zpfGZIHLmgzAhqBJ5ML6teX9f5fC
NXsSQF4jQUe83CQbjB9LdtJniiQinggrx1fUwSAAkoYUyPSgl41Y9zTg2iOStTC9
j5tQxhc8aqJNfyiYfugME86kjrRLi4Z2GGUcc3WoPQHebxwl0iqcOKhtqzbM6at1
s6AulGb0
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:34:27 2025 by rpki-client on console.sobornost.net