Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/827898-6816-4d4a-a799-844aea72e12e/1/8mnVCjnouSabpgovbN-o1C6xvkg.roa
File: 8mnVCjnouSabpgovbN-o1C6xvkg.roa (raw, json)
Hash identifier: G4RC42Q3FmNOlnVfHcHdBte/3Ay2hfg5SJk7Wd/qSR0=
Subject key identifier: F2:69:D5:0A:39:E8:B9:26:9B:A6:0A:2F:6C:DF:A8:D4:2E:B1:BE:48
Certificate issuer: /CN=e4c02ef399f00c9e89c625f2763aec1efbb46013
Certificate serial: 01866FA6A53A71612C4BE59D7277C27DCD61
Authority key identifier: E4:C0:2E:F3:99:F0:0C:9E:89:C6:25:F2:76:3A:EC:1E:FB:B4:60:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5MAu85nwDJ6JxiXydjrsHvu0YBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/827898-6816-4d4a-a799-844aea72e12e/1/8mnVCjnouSabpgovbN-o1C6xvkg.roa
Signing time: Mon 20 Feb 2023 16:27:17 +0000
ROA not before: Mon 20 Feb 2023 16:27:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 63023
IP address blocks: 212.23.193.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:6f:a6:a5:3a:71:61:2c:4b:e5:9d:72:77:c2:7d:cd:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4c02ef399f00c9e89c625f2763aec1efbb46013
Validity
Not Before: Feb 20 16:27:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f269d50a39e8b9269ba60a2f6cdfa8d42eb1be48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e5:9d:74:d3:61:7d:ca:b6:a6:93:68:4b:5d:
53:f4:86:b1:61:83:03:a3:c6:e2:28:23:9c:d4:37:
32:c6:47:c4:e8:aa:e0:08:ae:7f:5c:2a:54:a4:f1:
77:5b:0e:51:27:9f:24:bf:45:49:40:ef:c8:b1:c8:
d3:db:09:fb:73:b6:70:40:ea:14:f1:b1:be:e3:82:
cd:4b:4f:3e:2c:a2:e2:45:f7:b6:02:58:5f:91:aa:
ab:e0:29:d1:99:91:43:25:7a:51:9c:97:23:08:9f:
9e:b2:d5:9a:9e:75:da:5e:f6:40:fc:df:50:52:9f:
f5:01:8a:71:d5:36:eb:a1:88:88:48:62:d1:d8:53:
2f:16:74:46:92:5c:a1:df:10:db:a0:da:34:93:cd:
82:35:64:7f:ae:07:db:db:f6:cf:e6:7a:41:b9:99:
42:e6:cc:e8:9d:74:d0:1c:79:07:8f:73:ed:51:06:
f4:b5:4f:3f:d9:65:40:14:66:4a:4d:53:a5:92:2c:
e2:dd:0c:86:39:10:ae:b9:be:22:65:1d:3b:c3:e8:
bb:1a:6e:d3:18:05:81:25:64:f8:b5:bf:8c:0e:9c:
c5:f3:e9:38:47:51:79:27:dd:0b:39:1b:e9:66:7f:
23:12:da:d1:0b:00:fe:7f:ab:e8:71:f8:a2:e6:12:
80:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:69:D5:0A:39:E8:B9:26:9B:A6:0A:2F:6C:DF:A8:D4:2E:B1:BE:48
X509v3 Authority Key Identifier:
keyid:E4:C0:2E:F3:99:F0:0C:9E:89:C6:25:F2:76:3A:EC:1E:FB:B4:60:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5MAu85nwDJ6JxiXydjrsHvu0YBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/827898-6816-4d4a-a799-844aea72e12e/1/8mnVCjnouSabpgovbN-o1C6xvkg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/827898-6816-4d4a-a799-844aea72e12e/1/5MAu85nwDJ6JxiXydjrsHvu0YBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.23.193.0/24
Signature Algorithm: sha256WithRSAEncryption
df:c8:3a:50:a6:06:aa:7f:be:62:45:68:89:3c:84:f8:45:47:
5a:7d:b7:fc:c9:de:6b:a4:f2:28:dd:df:52:e1:b2:08:b0:c0:
09:4c:b7:10:de:ce:46:eb:1c:a9:f2:83:ff:09:d1:6b:31:73:
b8:60:70:78:f4:cc:a4:d7:2f:06:51:95:af:63:dd:3e:6b:97:
36:ed:85:88:0a:65:81:3e:48:ff:19:00:d3:43:fb:f3:fb:7e:
21:32:df:01:52:f3:ce:18:bc:b2:c0:e4:c0:b0:43:1f:2b:d0:
89:1e:a4:bc:5c:c8:72:f1:7d:da:10:c5:66:8f:f8:0c:40:3d:
16:0a:86:ed:86:f7:d7:cc:1d:9d:f8:3c:87:52:5b:b6:3b:5a:
de:d6:fa:b2:c5:1b:2e:c7:51:18:b2:c8:19:9f:99:60:5a:4e:
25:48:3b:a6:d3:9c:fe:a8:df:ff:17:40:7c:6f:55:05:fa:dd:
36:b4:84:f2:44:ca:a9:34:62:26:99:af:b0:a6:0d:2f:87:46:
5f:cb:bb:51:4d:eb:ce:87:75:44:30:23:36:52:89:b7:a8:db:
69:7d:34:85:fd:55:6b:2d:41:ea:05:fd:b8:bf:06:aa:af:11:
6b:ca:6a:29:6d:67:01:32:c9:3c:19:44:4b:05:97:8c:29:b1:
bf:3b:9e:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 01:20:10 2025 by rpki-client