Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/12r5wJUGVN-vssS6imF__1UkJwk.roa
File: 12r5wJUGVN-vssS6imF__1UkJwk.roa (raw, json)
Hash identifier: qIRasxTytJtqED17hlT3e1gf/DPFwlrO61MlYpXLHhA=
Subject key identifier: D7:6A:F9:C0:95:06:54:DF:AF:B2:C4:BA:8A:61:7F:FF:55:24:27:09
Certificate issuer: /CN=133897fc7a963f14215d58e1824144ab19fd5810
Certificate serial: 17D9663A
Authority key identifier: 13:38:97:FC:7A:96:3F:14:21:5D:58:E1:82:41:44:AB:19:FD:58:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EziX_HqWPxQhXVjhgkFEqxn9WBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/12r5wJUGVN-vssS6imF__1UkJwk.roa
Signing time: Sat 01 Jan 2022 00:54:33 +0000
ROA not before: Sat 01 Jan 2022 00:54:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44441
IP address blocks: 80.233.248.0/24 maxlen: 24
80.233.165.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 400123450 (0x17d9663a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=133897fc7a963f14215d58e1824144ab19fd5810
Validity
Not Before: Jan 1 00:54:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d76af9c0950654dfafb2c4ba8a617fff55242709
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:0a:91:92:30:2e:dd:67:fe:01:e1:c3:e3:b3:
03:46:9d:4d:09:8b:5d:63:2e:cc:ad:c4:20:45:08:
8c:47:2b:b6:01:3a:39:41:8b:e4:f0:97:91:2c:01:
b8:68:f6:4c:9b:d6:bb:f9:a1:24:f1:31:ec:a6:57:
b4:0f:e1:55:7f:55:b8:17:f8:43:74:08:9d:93:55:
4c:6b:93:24:89:7d:44:f5:d8:b8:a2:99:76:5b:d5:
74:d7:b5:ca:80:2f:64:a5:25:13:3e:89:18:9e:6d:
94:e3:5d:ba:eb:4b:8f:fe:9b:97:ca:52:17:73:60:
38:f2:e1:63:ff:1a:c1:76:d4:5f:98:8d:ae:eb:3b:
60:1e:a4:2a:fe:bf:1c:67:50:b3:ba:12:c2:75:c6:
18:7f:96:41:29:a6:d4:74:11:3f:b1:fe:bd:4d:92:
02:f2:ed:ed:69:e0:a1:b1:5f:e7:79:a7:bd:62:f0:
3a:c7:4e:81:77:98:3d:29:34:98:aa:07:97:73:3a:
53:95:33:1b:ac:6b:2f:4f:00:86:26:64:f1:5e:f8:
d8:fb:df:02:8a:3e:e4:8a:09:88:62:61:1b:13:b6:
83:4c:26:4d:46:60:a8:f0:37:5c:68:20:e4:55:30:
ab:1e:58:9a:00:b7:62:9c:ab:79:0c:67:2a:c4:ef:
70:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:6A:F9:C0:95:06:54:DF:AF:B2:C4:BA:8A:61:7F:FF:55:24:27:09
X509v3 Authority Key Identifier:
keyid:13:38:97:FC:7A:96:3F:14:21:5D:58:E1:82:41:44:AB:19:FD:58:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EziX_HqWPxQhXVjhgkFEqxn9WBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/12r5wJUGVN-vssS6imF__1UkJwk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/EziX_HqWPxQhXVjhgkFEqxn9WBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.233.165.0/24
80.233.248.0/24
Signature Algorithm: sha256WithRSAEncryption
24:81:3b:4b:b6:2c:17:d5:95:b8:c2:97:ef:7d:27:ca:a7:b5:
b4:bc:54:9c:ca:d8:65:d6:b8:56:ca:43:0d:ba:36:bc:0b:85:
fe:19:82:e3:06:b8:f8:1d:db:eb:4f:83:8c:e4:48:4d:60:c4:
8c:28:23:dd:e5:66:9b:70:8e:12:44:a1:d3:d4:32:82:a1:8f:
62:03:60:23:d1:b9:ed:fd:62:88:0a:31:d7:2e:5a:e9:d4:9c:
c1:19:3f:bf:e3:6b:bb:64:66:78:e6:13:92:10:c5:df:a9:db:
cb:c1:e5:9a:ef:d9:77:4a:b5:c9:6b:ca:0f:2c:c9:72:dc:44:
fe:f9:26:b2:3d:11:c4:6b:50:c6:47:16:98:1a:65:9d:2a:63:
11:26:c7:b4:51:b4:dc:e3:c7:61:e7:36:6c:b7:9b:bf:22:b0:
fe:ae:ea:17:88:f0:18:51:ce:37:d4:a7:dd:07:82:80:e4:7f:
ad:0e:f5:62:ed:ac:ad:af:0f:08:e5:36:3b:27:bf:50:51:12:
9a:31:d1:4d:b9:66:b9:1c:72:0f:ef:48:15:bc:72:4c:f3:07:
fc:53:7a:ac:bf:1a:05:e1:8f:2f:d3:9e:4b:fb:6b:aa:ce:3d:
f4:04:ea:f1:28:0c:1f:a3:63:ad:de:0a:a8:73:75:63:77:7a:
fb:70:29:05
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEF9lmOjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
MzM4OTdmYzdhOTYzZjE0MjE1ZDU4ZTE4MjQxNDRhYjE5ZmQ1ODEwMB4XDTIyMDEw
MTAwNTQzM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZDc2YWY5YzA5NTA2
NTRkZmFmYjJjNGJhOGE2MTdmZmY1NTI0MjcwOTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALkKkZIwLt1n/gHhw+OzA0adTQmLXWMuzK3EIEUIjEcrtgE6
OUGL5PCXkSwBuGj2TJvWu/mhJPEx7KZXtA/hVX9VuBf4Q3QInZNVTGuTJIl9RPXY
uKKZdlvVdNe1yoAvZKUlEz6JGJ5tlONduutLj/6bl8pSF3NgOPLhY/8awXbUX5iN
rus7YB6kKv6/HGdQs7oSwnXGGH+WQSmm1HQRP7H+vU2SAvLt7WngobFf53mnvWLw
OsdOgXeYPSk0mKoHl3M6U5UzG6xrL08AhiZk8V742PvfAoo+5IoJiGJhGxO2g0wm
TUZgqPA3XGgg5FUwqx5YmgC3YpyreQxnKsTvcK8CAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBTXavnAlQZU36+yxLqKYX//VSQnCTAfBgNVHSMEGDAWgBQTOJf8epY/FCFd
WOGCQUSrGf1YEDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0V6aVhfSHFXUHhRaFhWamhna0ZFcXhuOVdCQS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYWMvOGJlNGFmLTYyYmUtNDE4MC1iZWM5LWYyYjg3ZjM4YjlkZC8x
LzEycjV3SlVHVk4tdnNzUzZpbUZfXzFVa0p3ay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWMv
OGJlNGFmLTYyYmUtNDE4MC1iZWM5LWYyYjg3ZjM4YjlkZC8xL0V6aVhfSHFXUHhR
aFhWamhna0ZFcXhuOVdCQS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAFDppQMEAFDp+DANBgkqhkiG9w0B
AQsFAAOCAQEAJIE7S7YsF9WVuMKX730nyqe1tLxUnMrYZda4VspDDbo2vAuF/hmC
4wa4+B3b60+DjORITWDEjCgj3eVmm3COEkSh09QygqGPYgNgI9G57f1iiAox1y5a
6dScwRk/v+Nru2RmeOYTkhDF36nby8Hlmu/Zd0q1yWvKDyzJctxE/vkmsj0RxGtQ
xkcWmBplnSpjESbHtFG03OPHYec2bLebvyKw/q7qF4jwGFHON9Sn3QeCgOR/rQ71
Yu2sra8PCOU2Oye/UFESmjHRTblmuRxyD+9IFbxyTPMH/FN6rL8aBeGPL9OeS/tr
qs499ATq8SgMH6Njrd4KqHN1Y3d6+3ApBQ==
-----END CERTIFICATE-----
Generated at Wed Mar 12 12:34:41 2025 by rpki-client