Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/4I2sqwJp3GZJ5-YxqIHuULLmvOE.roa
File: 4I2sqwJp3GZJ5-YxqIHuULLmvOE.roa (raw, json)
Hash identifier: 3noiTld28/cwqQg+kuIvRImopZ6jYFmM53bgIriBggA=
Subject key identifier: E0:8D:AC:AB:02:69:DC:66:49:E7:E6:31:A8:81:EE:50:B2:E6:BC:E1
Certificate issuer: /CN=133897fc7a963f14215d58e1824144ab19fd5810
Certificate serial: 018572E83BA82F964147DA043C5ED46A92D5
Authority key identifier: 13:38:97:FC:7A:96:3F:14:21:5D:58:E1:82:41:44:AB:19:FD:58:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EziX_HqWPxQhXVjhgkFEqxn9WBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/4I2sqwJp3GZJ5-YxqIHuULLmvOE.roa
Signing time: Mon 02 Jan 2023 14:35:00 +0000
ROA not before: Mon 02 Jan 2023 14:35:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200709
IP address blocks: 80.233.134.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:e8:3b:a8:2f:96:41:47:da:04:3c:5e:d4:6a:92:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=133897fc7a963f14215d58e1824144ab19fd5810
Validity
Not Before: Jan 2 14:35:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e08dacab0269dc6649e7e631a881ee50b2e6bce1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:bf:a8:87:f9:76:5d:f2:eb:ae:5e:d2:12:6c:
c5:1d:7b:f7:6e:66:28:51:64:33:d8:08:d3:9c:6a:
73:89:a3:be:c1:5c:58:29:a9:a2:07:43:0b:8c:d8:
f7:a6:c4:76:eb:9b:9c:4c:dd:53:5d:33:96:c9:a2:
9f:53:16:e9:89:ae:29:d8:e4:53:d3:08:06:94:87:
55:cc:83:f0:b8:26:0f:64:d4:a4:dc:ae:5a:df:ee:
d3:99:9d:73:7f:d7:a9:44:e6:b3:70:f2:f7:78:df:
8a:36:32:87:97:3f:30:2c:99:90:b3:9a:93:88:d6:
9f:b9:63:f3:39:b1:72:e4:3a:1f:cc:8d:59:c9:e4:
38:78:d7:e8:e9:1f:a1:c7:6f:f1:9e:36:c2:21:d2:
01:1a:57:e6:53:47:d8:dd:7f:74:0c:bd:00:49:98:
4c:0e:0d:02:6a:01:92:b1:2a:99:97:47:74:4b:bf:
fa:6e:0e:c6:fb:1e:28:89:04:5c:c4:69:e9:35:47:
cf:33:d7:39:e9:aa:21:df:c7:b0:50:61:41:07:0c:
f2:9b:ac:bc:b4:9d:2b:65:59:52:f6:40:98:c9:53:
e2:4f:e4:41:22:e0:34:d6:7b:44:39:d9:93:5d:1d:
02:6d:78:11:31:2b:43:1c:13:48:fa:48:bc:36:15:
21:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:8D:AC:AB:02:69:DC:66:49:E7:E6:31:A8:81:EE:50:B2:E6:BC:E1
X509v3 Authority Key Identifier:
keyid:13:38:97:FC:7A:96:3F:14:21:5D:58:E1:82:41:44:AB:19:FD:58:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EziX_HqWPxQhXVjhgkFEqxn9WBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/4I2sqwJp3GZJ5-YxqIHuULLmvOE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/EziX_HqWPxQhXVjhgkFEqxn9WBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.233.134.0/24
Signature Algorithm: sha256WithRSAEncryption
98:3f:1a:9e:ea:56:82:bf:7f:60:6d:76:3a:57:54:0d:73:26:
40:22:29:bc:4c:cb:50:05:b3:88:26:84:31:c2:da:a7:ac:fa:
44:73:9e:85:d2:5e:72:61:e0:bd:9a:b5:2c:c0:e7:0b:44:57:
29:d1:de:0d:54:09:d6:08:bd:49:0b:52:79:02:f8:f1:77:97:
7d:62:81:78:04:cb:f3:34:a7:7c:54:10:08:98:98:f1:ce:18:
6a:a3:36:9e:64:cc:55:e0:7d:2d:d3:32:22:51:ad:9a:5d:41:
a1:ce:48:67:31:7b:82:51:3b:f8:19:43:62:82:94:eb:84:aa:
71:04:ce:df:d1:d4:ae:99:8d:71:4d:87:90:ff:34:d2:f0:88:
55:3f:bc:d2:c6:77:6a:a0:6f:38:6c:c9:65:58:6f:86:d1:7a:
3a:05:13:85:52:4c:8d:d6:9f:57:1a:37:44:f5:38:9e:2e:40:
91:43:58:c7:7f:82:2f:e2:0f:c6:a5:e9:fa:e3:35:f5:e8:2b:
8d:1c:f0:72:94:6e:63:b6:ae:ff:db:1b:74:3a:77:8e:58:36:
bf:17:bf:0a:12:09:31:46:9e:19:50:c2:eb:ce:d6:03:8b:b6:
52:b0:dc:dc:32:97:9c:d0:d7:f1:53:7e:61:4d:56:8f:89:fc:
4e:56:7e:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 12:41:05 2025 by rpki-client