Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/827898-6816-4d4a-a799-844aea72e12e/1/AsAq8RQSU9w-v7Ggr1GcI0T5yz0.roa
File: AsAq8RQSU9w-v7Ggr1GcI0T5yz0.roa (raw, json)
Hash identifier: 5tWPhmm1LoN+Eboz600E3+bszEn4HnrGdACNeoYc2KU=
Subject key identifier: 02:C0:2A:F1:14:12:53:DC:3E:BF:B1:A0:AF:51:9C:23:44:F9:CB:3D
Certificate issuer: /CN=e4c02ef399f00c9e89c625f2763aec1efbb46013
Certificate serial: 018BDCBE00E88B26A90E98C21AF2CD989A6C
Authority key identifier: E4:C0:2E:F3:99:F0:0C:9E:89:C6:25:F2:76:3A:EC:1E:FB:B4:60:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5MAu85nwDJ6JxiXydjrsHvu0YBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/827898-6816-4d4a-a799-844aea72e12e/1/AsAq8RQSU9w-v7Ggr1GcI0T5yz0.roa
Signing time: Fri 17 Nov 2023 10:05:21 +0000
ROA not before: Fri 17 Nov 2023 10:05:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 212.23.193.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:dc:be:00:e8:8b:26:a9:0e:98:c2:1a:f2:cd:98:9a:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4c02ef399f00c9e89c625f2763aec1efbb46013
Validity
Not Before: Nov 17 10:05:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=02c02af1141253dc3ebfb1a0af519c2344f9cb3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:e9:6c:eb:28:22:8e:08:89:34:76:41:e2:a9:
b8:2d:26:90:79:1f:59:64:b9:e1:cc:70:36:8b:fd:
54:9c:ee:74:8d:4d:11:c6:08:b6:48:e1:58:5b:27:
78:d5:52:47:da:1b:b8:8e:cf:0a:13:72:ac:1c:11:
4a:ca:d7:70:37:da:b8:eb:ee:77:c1:69:a7:4a:0a:
ec:5d:6c:7d:8f:03:3c:24:12:1c:54:18:95:0c:99:
41:42:b9:bb:13:cc:3e:f6:6b:27:f1:97:cb:cc:be:
1b:86:b6:cf:6a:f4:84:82:2f:df:e7:82:6e:81:5f:
50:b6:0c:58:f1:8c:63:03:25:40:04:f9:0d:b1:88:
2d:d5:fb:b9:6e:8d:2b:6a:39:47:96:df:fd:f2:0a:
7a:2b:6a:ab:43:a2:ee:d7:57:b4:1d:31:53:d2:24:
27:7c:44:69:6a:61:09:54:38:40:25:c3:37:0e:e3:
59:67:cf:f7:fa:8a:d4:b3:53:78:55:62:2e:60:18:
a0:5f:8c:fc:21:f6:41:03:3e:9c:be:2c:2a:d1:17:
08:d1:6a:4c:18:a2:82:4b:11:33:4e:3b:01:0e:8e:
34:99:ed:7c:80:bf:29:ac:28:cf:5e:46:4a:f0:67:
a6:9e:d0:f7:6b:45:d0:71:08:38:13:cc:85:88:d5:
24:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:C0:2A:F1:14:12:53:DC:3E:BF:B1:A0:AF:51:9C:23:44:F9:CB:3D
X509v3 Authority Key Identifier:
keyid:E4:C0:2E:F3:99:F0:0C:9E:89:C6:25:F2:76:3A:EC:1E:FB:B4:60:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5MAu85nwDJ6JxiXydjrsHvu0YBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/827898-6816-4d4a-a799-844aea72e12e/1/AsAq8RQSU9w-v7Ggr1GcI0T5yz0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/827898-6816-4d4a-a799-844aea72e12e/1/5MAu85nwDJ6JxiXydjrsHvu0YBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.23.193.0/24
Signature Algorithm: sha256WithRSAEncryption
49:5b:cf:9e:6d:d0:da:b4:fc:25:d8:c5:ba:44:e7:a0:f0:2e:
7b:33:69:67:09:9a:51:03:e2:c6:5c:b0:cf:0c:bb:f2:db:e0:
5e:cb:f4:88:1c:6c:84:4d:71:2d:2c:c8:ec:57:bd:9a:4b:84:
b6:7f:1d:64:09:38:dd:8a:ff:5e:b6:46:75:7d:0f:ce:5b:17:
34:04:81:49:84:a7:89:5f:30:9a:e8:52:58:0d:14:4b:e7:a4:
88:12:1a:62:bd:53:78:e3:0a:fa:70:7a:44:70:82:b8:4b:1a:
d8:ba:83:9e:cd:54:51:5d:0a:34:91:b5:9f:ef:85:44:69:ee:
63:c6:ed:9b:a7:55:1c:d7:81:45:8f:6a:8a:66:23:3e:9b:8e:
cd:41:33:3e:1b:ed:a8:69:91:eb:f1:21:f4:21:3d:ae:ae:6b:
e6:1a:a8:25:e6:e0:2b:3c:28:cc:2a:d8:19:4a:a5:d3:7e:a7:
09:9f:35:9e:bd:a0:dd:d1:cc:45:61:ca:d9:6f:53:ca:81:be:
53:d5:99:6f:38:b1:86:4e:49:3d:a4:57:5e:2d:ed:3d:0a:35:
72:71:5c:9e:9c:34:d4:d6:9f:05:b4:09:3a:01:a0:e4:36:a7:
18:a3:fe:fd:59:89:1c:b3:fc:31:90:1c:66:39:44:87:68:27:
75:e2:5d:57
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYvcvgDoiyapDpjCGvLNmJpsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0YzAyZWYzOTlmMDBjOWU4OWM2MjVmMjc2M2FlYzFlZmJi
NDYwMTMwHhcNMjMxMTE3MTAwNTIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMmMwMmFmMTE0MTI1M2RjM2ViZmIxYTBhZjUxOWMyMzQ0ZjljYjNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlOls6ygijgiJNHZB4qm4LSaQeR9Z
ZLnhzHA2i/1UnO50jU0Rxgi2SOFYWyd41VJH2hu4js8KE3KsHBFKytdwN9q46+53
wWmnSgrsXWx9jwM8JBIcVBiVDJlBQrm7E8w+9msn8ZfLzL4bhrbPavSEgi/f54Ju
gV9QtgxY8YxjAyVABPkNsYgt1fu5bo0rajlHlt/98gp6K2qrQ6Lu11e0HTFT0iQn
fERpamEJVDhAJcM3DuNZZ8/3+orUs1N4VWIuYBigX4z8IfZBAz6cviwq0RcI0WpM
GKKCSxEzTjsBDo40me18gL8prCjPXkZK8GemntD3a0XQcQg4E8yFiNUkaQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFALAKvEUElPcPr+xoK9RnCNE+cs9MB8GA1UdIwQY
MBaAFOTALvOZ8AyeicYl8nY67B77tGATMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNU1BdTg1bndESjZKeGlYeWRqcnNIdnUwWUJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS84Mjc4OTgtNjgxNi00ZDRhLWE3OTkt
ODQ0YWVhNzJlMTJlLzEvQXNBcThSUVNVOXctdjdHZ3IxR2NJMFQ1eXowLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS84Mjc4OTgtNjgxNi00ZDRhLWE3OTktODQ0YWVhNzJlMTJl
LzEvNU1BdTg1bndESjZKeGlYeWRqcnNIdnUwWUJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1BfBMA0G
CSqGSIb3DQEBCwUAA4IBAQBJW8+ebdDatPwl2MW6ROeg8C57M2lnCZpRA+LGXLDP
DLvy2+Bey/SIHGyETXEtLMjsV72aS4S2fx1kCTjdiv9etkZ1fQ/OWxc0BIFJhKeJ
XzCa6FJYDRRL56SIEhpivVN44wr6cHpEcIK4SxrYuoOezVRRXQo0kbWf74VEae5j
xu2bp1Uc14FFj2qKZiM+m47NQTM+G+2oaZHr8SH0IT2urmvmGqgl5uArPCjMKtgZ
SqXTfqcJnzWevaDd0cxFYcrZb1PKgb5T1ZlvOLGGTkk9pFdeLe09CjVycVyenDTU
1p8FtAk6AaDkNqcYo/79WYkcs/wxkBxmOUSHaCd14l1X
-----END CERTIFICATE-----
Generated at Tue Apr 8 01:30:29 2025 by rpki-client