Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/827898-6816-4d4a-a799-844aea72e12e/1/xEWDynoMszQJFLmlOUzd1wC2aqA.roa
File: xEWDynoMszQJFLmlOUzd1wC2aqA.roa (raw, json)
Hash identifier: d5SpFJFLsQd5LGWyw2CLjHZH5/fPXpAmReVDkg6haeE=
Subject key identifier: C4:45:83:CA:7A:0C:B3:34:09:14:B9:A5:39:4C:DD:D7:00:B6:6A:A0
Certificate issuer: /CN=e4c02ef399f00c9e89c625f2763aec1efbb46013
Certificate serial: 4EC8DB
Authority key identifier: E4:C0:2E:F3:99:F0:0C:9E:89:C6:25:F2:76:3A:EC:1E:FB:B4:60:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5MAu85nwDJ6JxiXydjrsHvu0YBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/827898-6816-4d4a-a799-844aea72e12e/1/xEWDynoMszQJFLmlOUzd1wC2aqA.roa
Signing time: Sat 01 Jan 2022 03:52:39 +0000
ROA not before: Sat 01 Jan 2022 03:52:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210415
IP address blocks: 212.23.193.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5163227 (0x4ec8db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4c02ef399f00c9e89c625f2763aec1efbb46013
Validity
Not Before: Jan 1 03:52:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c44583ca7a0cb3340914b9a5394cddd700b66aa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:36:2e:34:e2:80:64:ac:22:1a:55:8b:12:fa:
32:4c:89:98:fa:aa:6d:d8:96:5a:dc:ce:2b:45:d8:
7a:9b:e4:88:11:d3:44:7a:9b:fb:7c:71:86:00:e8:
20:5b:d4:36:ba:f0:51:18:e7:ac:ee:c1:93:4f:20:
54:27:48:0c:b9:ab:00:c3:44:a7:77:1f:a4:4a:0d:
45:ee:af:cf:38:bf:be:25:e6:22:e8:e9:1a:79:f5:
43:81:19:2b:78:0b:27:0a:5b:52:21:20:99:8d:17:
53:65:4b:a2:bf:76:11:af:d6:ca:ea:8b:ea:4f:c0:
a8:28:9c:b3:97:c0:9b:71:88:69:dd:86:f5:4f:01:
c2:32:2d:56:e6:82:58:25:f5:66:54:f6:b4:e2:40:
5a:23:f1:0b:a3:a7:9b:57:dc:5b:9c:06:e0:87:56:
fb:f0:8c:19:a5:fb:c9:99:23:7a:c2:08:b3:82:ff:
5c:99:a9:18:09:63:25:df:8f:3f:e7:68:75:17:db:
d2:90:32:68:88:05:7b:75:05:af:42:7b:a2:92:43:
37:6e:4c:be:f6:60:5d:5e:1d:5f:3a:ad:a8:ba:ae:
ff:d4:7d:f7:cd:6f:28:93:d0:bf:26:c0:08:26:35:
fd:8c:c9:74:26:c9:12:17:b1:30:15:88:80:5f:c3:
fc:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:45:83:CA:7A:0C:B3:34:09:14:B9:A5:39:4C:DD:D7:00:B6:6A:A0
X509v3 Authority Key Identifier:
keyid:E4:C0:2E:F3:99:F0:0C:9E:89:C6:25:F2:76:3A:EC:1E:FB:B4:60:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5MAu85nwDJ6JxiXydjrsHvu0YBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/827898-6816-4d4a-a799-844aea72e12e/1/xEWDynoMszQJFLmlOUzd1wC2aqA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/827898-6816-4d4a-a799-844aea72e12e/1/5MAu85nwDJ6JxiXydjrsHvu0YBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.23.193.0/24
Signature Algorithm: sha256WithRSAEncryption
de:4a:0e:d6:28:26:9e:fb:0a:64:84:55:2a:1d:84:f9:7c:05:
e6:b5:01:07:b1:ce:20:3d:46:2f:d1:65:d7:00:ea:ff:3d:ee:
0d:d4:83:f6:10:c1:66:6f:49:19:16:69:ea:ce:b0:ea:38:f2:
e6:b1:7f:3a:16:0d:34:e9:3c:3a:09:3d:0a:97:9b:ca:2d:bb:
d4:ca:a4:b5:1b:36:8c:aa:4a:36:3a:d8:47:58:f5:9d:18:6c:
fc:72:4a:e6:8f:66:e7:81:75:b6:28:6c:5c:0c:85:cb:44:80:
e1:56:7b:6c:85:f9:5a:48:67:86:ae:c4:f3:d4:98:7d:51:e9:
fb:98:9b:e6:d3:06:14:15:a8:8c:6f:84:ed:ce:05:7b:d1:03:
de:70:35:bd:40:ab:2e:f3:fd:04:a6:1f:4b:90:43:94:8f:00:
c6:28:85:a0:38:ed:2e:20:dc:6e:fa:b1:ff:b1:7d:54:1a:4d:
9e:f1:f6:68:7b:c2:ab:c6:1a:18:b4:23:52:f7:54:75:da:7b:
00:9f:02:c4:b7:5c:94:c3:c0:28:7b:74:84:aa:85:e7:e9:57:
72:a7:c5:e0:c0:53:50:3d:84:7e:f9:1b:7a:19:69:ca:c9:08:
ec:97:01:2d:db:f8:80:28:91:86:6a:f9:ac:ce:44:c6:9e:cb:
0c:86:33:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 01:12:39 2025 by rpki-client