Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/827898-6816-4d4a-a799-844aea72e12e/1/mL3UmG1TDFRFQ_mVw9b4TsU7J2A.roa
File: mL3UmG1TDFRFQ_mVw9b4TsU7J2A.roa (raw, json)
Hash identifier: YU6r1jkKIhfLxsYlQJkNqB7JDicRNALf+PX4ZstAJto=
Subject key identifier: 98:BD:D4:98:6D:53:0C:54:45:43:F9:95:C3:D6:F8:4E:C5:3B:27:60
Certificate issuer: /CN=e4c02ef399f00c9e89c625f2763aec1efbb46013
Certificate serial: 01866FA6A6877E61E196580E19932BC608FB
Authority key identifier: E4:C0:2E:F3:99:F0:0C:9E:89:C6:25:F2:76:3A:EC:1E:FB:B4:60:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5MAu85nwDJ6JxiXydjrsHvu0YBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/827898-6816-4d4a-a799-844aea72e12e/1/mL3UmG1TDFRFQ_mVw9b4TsU7J2A.roa
Signing time: Mon 20 Feb 2023 16:27:17 +0000
ROA not before: Mon 20 Feb 2023 16:27:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 142111
IP address blocks: 212.23.193.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:6f:a6:a6:87:7e:61:e1:96:58:0e:19:93:2b:c6:08:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4c02ef399f00c9e89c625f2763aec1efbb46013
Validity
Not Before: Feb 20 16:27:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=98bdd4986d530c544543f995c3d6f84ec53b2760
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ea:8d:a7:4c:f9:f0:6b:83:9a:ba:28:b6:52:
0c:6e:b9:64:d9:af:27:ff:de:3f:51:6a:a0:69:7e:
a1:f3:bd:75:68:3c:d4:e3:40:67:d5:c2:9e:b9:e8:
db:57:df:b7:bf:df:31:a3:e1:0a:29:36:f6:9c:c7:
1d:85:e2:33:ec:92:65:cc:97:d0:83:a7:92:51:6a:
21:ea:26:c0:9e:d6:91:05:9e:72:60:c0:86:ca:99:
01:61:e1:3d:16:4f:db:07:24:08:20:af:c4:3c:b2:
70:3a:81:d8:94:61:08:8e:ce:d2:b5:42:11:4e:df:
cb:10:ac:6b:44:68:cf:59:ba:b4:6a:9e:40:e0:a2:
bd:d1:f0:1c:b4:02:97:91:76:3f:ff:81:74:76:21:
dc:1f:bd:8c:d4:2c:50:a5:b4:e6:99:12:2d:57:42:
dd:03:9e:8d:ad:0e:94:a9:cb:8e:9f:93:9e:62:a9:
7c:20:c6:ac:17:d2:d2:33:bd:3b:a0:e9:00:cb:44:
d5:a2:60:e3:05:a8:73:25:35:ba:ce:f7:0e:5d:c2:
dd:d5:68:7d:bc:a9:38:e9:51:a9:53:0c:cd:d3:dc:
49:93:80:9d:68:98:85:b7:86:a3:42:2a:4e:47:2f:
ef:44:e7:bc:29:4a:4b:f6:50:58:a2:e1:f4:aa:d2:
ba:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:BD:D4:98:6D:53:0C:54:45:43:F9:95:C3:D6:F8:4E:C5:3B:27:60
X509v3 Authority Key Identifier:
keyid:E4:C0:2E:F3:99:F0:0C:9E:89:C6:25:F2:76:3A:EC:1E:FB:B4:60:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5MAu85nwDJ6JxiXydjrsHvu0YBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/827898-6816-4d4a-a799-844aea72e12e/1/mL3UmG1TDFRFQ_mVw9b4TsU7J2A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/827898-6816-4d4a-a799-844aea72e12e/1/5MAu85nwDJ6JxiXydjrsHvu0YBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.23.193.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:c0:b3:cf:25:ed:4c:26:1b:bc:8f:05:0a:47:35:a4:68:5b:
e1:25:85:a0:8c:08:13:3a:2d:3f:34:5e:a5:1f:b2:fe:cf:c5:
e9:9c:80:c8:05:0f:d4:48:39:80:8b:22:29:85:1c:87:38:bf:
9f:b1:a9:d5:69:4b:ff:ec:8b:ac:6a:87:3f:94:ea:02:7b:fd:
ac:f2:15:00:16:24:b6:de:20:8e:89:a8:fb:c7:50:81:09:c3:
ef:09:d7:4c:2c:a6:9f:10:d5:ca:bd:d2:6e:4d:1f:85:51:26:
40:3e:e6:08:1b:99:11:d5:18:ab:4d:45:22:b3:c1:67:3b:d1:
69:30:f8:d3:e5:bd:97:82:95:f8:ba:02:7f:25:98:86:27:31:
39:d0:a9:d2:d4:9d:0f:7a:a7:c3:46:bd:60:61:ee:41:e2:0f:
ec:46:56:c7:8b:88:42:9d:d1:2e:56:9f:eb:38:2a:16:6d:f1:
13:a6:06:42:ea:7f:7a:96:0e:d7:15:66:b7:cb:9b:67:16:01:
79:15:84:98:a7:e1:81:f4:71:5e:cb:f5:17:8e:67:32:d4:a7:
0b:d2:4c:cc:a1:5e:60:86:e1:08:4d:77:81:08:da:00:50:47:
12:ef:15:c7:65:e4:69:b9:98:94:43:59:18:12:b7:db:83:a4:
81:f2:c3:0c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYZvpqaHfmHhllgOGZMrxgj7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0YzAyZWYzOTlmMDBjOWU4OWM2MjVmMjc2M2FlYzFlZmJi
NDYwMTMwHhcNMjMwMjIwMTYyNzE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5OGJkZDQ5ODZkNTMwYzU0NDU0M2Y5OTVjM2Q2Zjg0ZWM1M2IyNzYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj+qNp0z58GuDmrootlIMbrlk2a8n
/94/UWqgaX6h8711aDzU40Bn1cKeuejbV9+3v98xo+EKKTb2nMcdheIz7JJlzJfQ
g6eSUWoh6ibAntaRBZ5yYMCGypkBYeE9Fk/bByQIIK/EPLJwOoHYlGEIjs7StUIR
Tt/LEKxrRGjPWbq0ap5A4KK90fActAKXkXY//4F0diHcH72M1CxQpbTmmRItV0Ld
A56NrQ6UqcuOn5OeYql8IMasF9LSM707oOkAy0TVomDjBahzJTW6zvcOXcLd1Wh9
vKk46VGpUwzN09xJk4CdaJiFt4ajQipORy/vROe8KUpL9lBYouH0qtK6mQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJi91JhtUwxURUP5lcPW+E7FOydgMB8GA1UdIwQY
MBaAFOTALvOZ8AyeicYl8nY67B77tGATMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNU1BdTg1bndESjZKeGlYeWRqcnNIdnUwWUJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS84Mjc4OTgtNjgxNi00ZDRhLWE3OTkt
ODQ0YWVhNzJlMTJlLzEvbUwzVW1HMVRERlJGUV9tVnc5YjRUc1U3SjJBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS84Mjc4OTgtNjgxNi00ZDRhLWE3OTktODQ0YWVhNzJlMTJl
LzEvNU1BdTg1bndESjZKeGlYeWRqcnNIdnUwWUJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1BfBMA0G
CSqGSIb3DQEBCwUAA4IBAQAfwLPPJe1MJhu8jwUKRzWkaFvhJYWgjAgTOi0/NF6l
H7L+z8XpnIDIBQ/USDmAiyIphRyHOL+fsanVaUv/7Iusaoc/lOoCe/2s8hUAFiS2
3iCOiaj7x1CBCcPvCddMLKafENXKvdJuTR+FUSZAPuYIG5kR1RirTUUis8FnO9Fp
MPjT5b2XgpX4ugJ/JZiGJzE50KnS1J0PeqfDRr1gYe5B4g/sRlbHi4hCndEuVp/r
OCoWbfETpgZC6n96lg7XFWa3y5tnFgF5FYSYp+GB9HFey/UXjmcy1KcL0kzMoV5g
huEITXeBCNoAUEcS7xXHZeRpuZiUQ1kYErfbg6SB8sMM
-----END CERTIFICATE-----
Generated at Tue Apr 8 00:52:31 2025 by rpki-client