Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/827898-6816-4d4a-a799-844aea72e12e/1/jrYYzvruoJv1mxD6ujllrMV1WAg.roa
File: jrYYzvruoJv1mxD6ujllrMV1WAg.roa (raw, json)
Hash identifier: 54DKUAtCih+MN6Ui7/isc3ejT3XWgryomd/lox5BqsQ=
Subject key identifier: 8E:B6:18:CE:FA:EE:A0:9B:F5:9B:10:FA:BA:39:65:AC:C5:75:58:08
Certificate issuer: /CN=e4c02ef399f00c9e89c625f2763aec1efbb46013
Certificate serial: 018CC5012940A8F8856FC1700FDE4A8EAE03
Authority key identifier: E4:C0:2E:F3:99:F0:0C:9E:89:C6:25:F2:76:3A:EC:1E:FB:B4:60:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5MAu85nwDJ6JxiXydjrsHvu0YBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/827898-6816-4d4a-a799-844aea72e12e/1/jrYYzvruoJv1mxD6ujllrMV1WAg.roa
Signing time: Mon 01 Jan 2024 12:30:36 +0000
ROA not before: Mon 01 Jan 2024 12:30:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 212.23.193.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:29:40:a8:f8:85:6f:c1:70:0f:de:4a:8e:ae:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4c02ef399f00c9e89c625f2763aec1efbb46013
Validity
Not Before: Jan 1 12:30:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8eb618cefaeea09bf59b10faba3965acc5755808
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:04:7a:12:bb:6b:85:b2:e6:f4:21:53:ec:00:
6c:d8:56:c0:c1:d1:d8:54:bc:5a:0d:72:8d:9f:6e:
ea:dc:13:1e:86:91:17:16:38:3e:5a:a9:0d:5e:6d:
01:51:c2:5e:3c:1f:15:22:06:e5:54:1a:8a:45:e3:
53:ca:f3:66:3e:aa:3b:ca:27:4f:97:15:44:14:01:
c2:7c:44:8d:46:a1:89:f2:de:8c:5d:e0:07:e1:c7:
74:05:88:a6:47:96:85:6d:37:f1:2d:3b:fa:78:db:
85:d7:d5:8b:60:80:2d:eb:f6:9f:54:3c:57:ce:6c:
74:2c:bc:23:eb:82:fe:56:91:81:69:38:3d:c0:2f:
18:56:37:4d:23:78:5e:93:5b:7a:6b:b1:68:25:d5:
8f:3e:22:f1:90:da:9c:40:07:0b:cd:80:d0:0c:f9:
7a:05:0a:bf:10:22:53:a4:32:d0:71:cf:19:f2:ff:
80:57:33:c2:90:ea:a8:94:52:87:70:42:a0:12:67:
10:ac:dc:ba:6f:f5:b8:45:71:9a:63:02:cc:72:52:
e2:80:51:9b:94:a4:26:58:d9:68:10:56:34:ca:da:
a9:90:ee:48:e4:2e:45:3a:f7:6e:87:ca:c6:72:71:
a7:c6:8b:58:e2:b8:e7:70:18:b6:d9:16:7b:d7:03:
95:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:B6:18:CE:FA:EE:A0:9B:F5:9B:10:FA:BA:39:65:AC:C5:75:58:08
X509v3 Authority Key Identifier:
keyid:E4:C0:2E:F3:99:F0:0C:9E:89:C6:25:F2:76:3A:EC:1E:FB:B4:60:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5MAu85nwDJ6JxiXydjrsHvu0YBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/827898-6816-4d4a-a799-844aea72e12e/1/jrYYzvruoJv1mxD6ujllrMV1WAg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/827898-6816-4d4a-a799-844aea72e12e/1/5MAu85nwDJ6JxiXydjrsHvu0YBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.23.193.0/24
Signature Algorithm: sha256WithRSAEncryption
15:04:d1:1c:6d:ae:78:4f:cc:19:53:df:17:39:d4:f8:3e:aa:
0e:00:c6:f9:2d:7b:8c:87:85:ee:86:87:6c:54:de:88:d1:91:
92:19:94:38:5c:93:9f:72:49:9e:24:ed:01:d5:9d:8e:6f:52:
ca:0a:18:fa:ea:36:82:97:63:f5:50:aa:83:05:47:72:d8:ba:
d7:03:42:04:1e:60:77:f3:d4:87:92:7e:73:2e:da:cb:12:cf:
68:08:72:da:7b:d5:e4:5a:b0:e5:d4:97:49:e8:2c:df:54:ed:
ae:af:49:fb:db:ea:89:f6:a0:40:e8:98:b8:1b:7b:f9:ea:15:
33:8c:4d:43:b2:52:36:86:a9:36:1c:1f:eb:56:7f:72:fb:a8:
04:74:24:03:a5:51:16:1c:7a:7a:68:2d:61:ee:0e:e1:fd:f5:
a5:bf:f3:36:2b:c3:f1:06:17:0e:60:aa:8d:5b:bc:8e:2b:f6:
84:34:7a:ab:fc:4d:25:c1:16:aa:b5:42:c6:76:d4:19:22:eb:
a1:a3:60:58:a0:2b:c5:19:7e:15:63:ce:7a:7b:e3:46:00:11:
5f:b8:c0:8d:35:ea:ae:da:09:a8:4c:18:6b:72:92:c3:99:a0:
cb:14:1c:4f:5a:75:c6:bf:8e:b6:a5:60:05:01:b2:df:28:e1:
e9:cc:c8:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 01:17:43 2025 by rpki-client