Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/4OBeGe0JyWB4mjnIWRdGg3sqlwQ.roa
File: 4OBeGe0JyWB4mjnIWRdGg3sqlwQ.roa (raw, json)
Hash identifier: 8AccV0YEA2aMtFYL3aZc5MTZqZcApb/9gSpz+sbuwcA=
Subject key identifier: E0:E0:5E:19:ED:09:C9:60:78:9A:39:C8:59:17:46:83:7B:2A:97:04
Certificate issuer: /CN=133897fc7a963f14215d58e1824144ab19fd5810
Certificate serial: 018572E835AFCA6B4B188B95C56DBF72247E
Authority key identifier: 13:38:97:FC:7A:96:3F:14:21:5D:58:E1:82:41:44:AB:19:FD:58:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EziX_HqWPxQhXVjhgkFEqxn9WBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/4OBeGe0JyWB4mjnIWRdGg3sqlwQ.roa
Signing time: Mon 02 Jan 2023 14:34:58 +0000
ROA not before: Mon 02 Jan 2023 14:34:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48412
IP address blocks: 80.233.140.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:e8:35:af:ca:6b:4b:18:8b:95:c5:6d:bf:72:24:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=133897fc7a963f14215d58e1824144ab19fd5810
Validity
Not Before: Jan 2 14:34:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e0e05e19ed09c960789a39c8591746837b2a9704
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:d9:f6:dc:c9:6f:07:8e:94:8a:69:87:ff:92:
bc:00:fa:e7:74:89:5e:f4:17:9b:0e:c7:18:ca:32:
e8:e4:84:8c:2e:1a:fe:62:77:0b:e4:1c:a0:c5:04:
6d:9e:5a:15:ef:7c:53:e4:fa:d1:90:6a:00:22:33:
af:76:70:af:d4:6e:76:3d:04:c3:26:d0:54:b6:d5:
f0:ca:77:e6:0f:b2:7b:2b:38:a8:b9:d9:b3:a6:39:
34:3a:46:08:2c:63:91:1f:56:a9:9d:b4:28:c1:8c:
9b:48:4e:8d:f5:88:ef:e6:6a:d6:15:a2:80:1e:46:
9f:96:7e:50:e1:11:14:42:cb:3c:e6:55:b6:a1:2e:
58:69:be:38:dc:98:af:0c:c1:db:fe:cc:05:09:0d:
c7:4b:1f:3a:30:7f:ea:64:93:0f:d1:5e:f0:dd:b2:
d7:97:41:75:a1:be:53:86:ec:11:60:31:7e:b4:c7:
44:a3:06:a1:cd:6e:46:58:5c:1c:6f:54:97:7d:fc:
f6:9d:0c:a1:9c:67:19:c6:c7:83:e7:fe:71:e3:0a:
01:ac:db:03:2a:32:15:b1:f4:f9:35:ef:40:92:a2:
fc:d9:d9:2a:34:fe:6a:12:86:7f:92:48:61:58:e0:
de:45:f0:8b:f0:aa:59:ab:f4:57:bf:2e:c7:86:c9:
3c:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:E0:5E:19:ED:09:C9:60:78:9A:39:C8:59:17:46:83:7B:2A:97:04
X509v3 Authority Key Identifier:
keyid:13:38:97:FC:7A:96:3F:14:21:5D:58:E1:82:41:44:AB:19:FD:58:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EziX_HqWPxQhXVjhgkFEqxn9WBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/4OBeGe0JyWB4mjnIWRdGg3sqlwQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/EziX_HqWPxQhXVjhgkFEqxn9WBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.233.140.0/24
Signature Algorithm: sha256WithRSAEncryption
59:7e:44:b9:66:72:e0:39:b6:b4:6f:8c:73:9b:d5:46:02:81:
c3:4b:28:b1:3f:aa:b8:5b:ca:f2:ad:61:87:33:f0:dd:d8:ec:
37:cb:1d:85:f1:2f:3f:5a:76:05:0c:8d:43:7e:c5:22:e3:f2:
c8:d2:20:2b:97:a0:c3:1a:45:8a:f4:f6:d2:43:9f:2d:68:9d:
91:f2:56:f3:76:5e:74:0d:87:3a:64:9a:f9:f0:c0:b1:b0:5b:
f0:29:65:04:45:f3:f9:af:a5:d5:1b:69:46:87:5d:35:16:ba:
ed:ca:20:79:f3:9c:a4:1b:c6:b9:6c:d1:a3:c2:37:fa:40:eb:
5a:44:38:d5:d0:e4:37:d9:d3:09:ba:f0:dd:64:e1:32:65:cb:
25:9c:1a:51:0d:5d:8f:b4:13:37:3c:c0:ba:d4:d5:63:38:c6:
7c:be:c8:4c:98:f4:25:75:30:55:db:3b:43:31:b3:c4:07:81:
cd:f5:88:58:e3:c1:6d:05:c1:a5:a8:ce:5a:21:fa:ab:34:b0:
84:88:ca:13:f3:23:6e:bd:d9:56:06:eb:5b:ca:b4:31:b5:3a:
a0:27:9c:3f:8f:10:59:31:65:58:2b:28:9c:bc:52:35:6d:c9:
f8:05:2c:2b:19:fa:2d:f4:89:2d:7b:c6:53:ab:b2:33:9a:8a:
3c:c2:62:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 12:53:00 2025 by rpki-client