Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/827898-6816-4d4a-a799-844aea72e12e/1/4_Fof3roBZnEBCzRX9345QObpgk.roa
File: 4_Fof3roBZnEBCzRX9345QObpgk.roa (raw, json)
Hash identifier: c6v/JPxrmBiFCbnvHJyrxh1yeVVIjC8xtgvraStMVGY=
Subject key identifier: E3:F1:68:7F:7A:E8:05:99:C4:04:2C:D1:5F:DD:F8:E5:03:9B:A6:09
Certificate issuer: /CN=e4c02ef399f00c9e89c625f2763aec1efbb46013
Certificate serial: 01856C5C98F0477EF88B51C47171537963D1
Authority key identifier: E4:C0:2E:F3:99:F0:0C:9E:89:C6:25:F2:76:3A:EC:1E:FB:B4:60:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5MAu85nwDJ6JxiXydjrsHvu0YBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/827898-6816-4d4a-a799-844aea72e12e/1/4_Fof3roBZnEBCzRX9345QObpgk.roa
Signing time: Sun 01 Jan 2023 08:04:45 +0000
ROA not before: Sun 01 Jan 2023 08:04:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210415
IP address blocks: 212.23.193.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:5c:98:f0:47:7e:f8:8b:51:c4:71:71:53:79:63:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4c02ef399f00c9e89c625f2763aec1efbb46013
Validity
Not Before: Jan 1 08:04:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e3f1687f7ae80599c4042cd15fddf8e5039ba609
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ba:90:04:fd:31:57:69:87:c3:8f:16:9b:df:
9d:83:d0:b2:50:4a:6a:3a:f8:41:2f:85:b8:61:c1:
fd:2a:a8:ba:99:a3:b9:7f:c2:0c:49:a0:1b:dc:8a:
b2:fa:f1:d1:ed:48:96:73:0c:32:5d:b6:df:95:31:
9a:1c:06:34:88:53:a5:fa:dd:79:1d:77:5b:c0:79:
db:4b:56:36:5c:5b:0e:c5:ae:bf:d4:00:a1:fc:5e:
84:37:6a:d5:f6:ce:7e:a8:30:39:67:43:e7:8e:4a:
c3:11:c2:d4:cf:a4:f1:04:b7:f4:0e:e9:7c:54:c7:
ab:49:a7:65:71:89:28:ea:4c:f9:71:ec:e6:bd:cd:
fb:99:08:7d:eb:ea:68:5e:32:fb:a2:2a:62:37:5c:
e5:d7:d1:1f:b9:d9:47:1d:26:6f:7c:f0:8d:14:a6:
0f:e1:ca:05:f2:bd:bf:58:58:32:64:97:61:f5:4b:
c5:c6:48:51:57:67:12:b5:a9:3d:84:ad:24:11:e1:
dc:25:2a:72:8c:1e:08:43:b8:3c:45:54:21:93:13:
be:06:64:0c:dd:8a:f1:70:44:b3:50:37:74:0c:b0:
2b:99:59:20:8b:eb:92:5a:92:51:33:de:71:ef:3d:
4a:a4:13:00:a4:75:5b:cb:dd:0a:d3:df:0b:af:5e:
a4:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:F1:68:7F:7A:E8:05:99:C4:04:2C:D1:5F:DD:F8:E5:03:9B:A6:09
X509v3 Authority Key Identifier:
keyid:E4:C0:2E:F3:99:F0:0C:9E:89:C6:25:F2:76:3A:EC:1E:FB:B4:60:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5MAu85nwDJ6JxiXydjrsHvu0YBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/827898-6816-4d4a-a799-844aea72e12e/1/4_Fof3roBZnEBCzRX9345QObpgk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/827898-6816-4d4a-a799-844aea72e12e/1/5MAu85nwDJ6JxiXydjrsHvu0YBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.23.193.0/24
Signature Algorithm: sha256WithRSAEncryption
49:8a:c1:f6:a2:c9:06:bb:fc:5d:6f:46:75:e4:36:0d:e1:54:
c5:ae:90:43:d1:dc:c4:aa:a0:8e:d8:b0:c7:9c:16:f1:c8:ed:
1c:2c:22:6b:8c:8a:60:6a:fd:0a:57:9c:ad:01:9d:15:cd:67:
9b:5e:a0:e4:64:ee:59:88:e2:4e:17:ff:67:b7:a4:39:d9:28:
3e:ad:94:03:64:6c:4c:fc:03:9e:02:23:85:62:c7:1c:e1:08:
30:a1:60:3c:56:02:4c:b4:ba:0c:86:bd:b5:07:21:35:27:68:
bb:f8:93:2d:14:af:57:be:3d:a7:10:07:94:61:f9:c0:74:98:
96:93:4c:e3:32:c9:17:d7:e7:ae:17:73:cf:0a:6e:d9:df:4c:
94:6c:84:96:32:57:40:93:5e:69:d8:94:72:51:63:00:d6:01:
c9:89:8d:eb:89:a6:01:cb:20:61:16:51:c2:92:40:ac:e9:7d:
ad:cd:c8:14:ce:1b:ab:96:3c:a7:cf:bc:33:a9:a4:a6:03:32:
d3:b3:fc:98:16:21:70:4b:1d:66:0c:e5:c3:67:02:55:d8:f5:
bd:dc:b0:4e:92:65:44:dc:a4:fd:14:e2:37:af:d6:2a:c4:c9:
69:00:be:d1:c0:cb:f9:45:27:f4:c1:97:23:40:a3:7e:89:8d:
d9:9b:c6:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 01:20:13 2025 by rpki-client