Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/5-AYzLkxqko45mJwN26L9cLeXnw.roa
File: 5-AYzLkxqko45mJwN26L9cLeXnw.roa (raw, json)
Hash identifier: lQyqwQciYuoeuawI+aeIDjFQQws27Hnnms4XfjIe1BI=
Subject key identifier: E7:E0:18:CC:B9:31:AA:4A:38:E6:62:70:37:6E:8B:F5:C2:DE:5E:7C
Certificate issuer: /CN=133897fc7a963f14215d58e1824144ab19fd5810
Certificate serial: 018572E82EA79315A00DEB72398AF8A55076
Authority key identifier: 13:38:97:FC:7A:96:3F:14:21:5D:58:E1:82:41:44:AB:19:FD:58:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EziX_HqWPxQhXVjhgkFEqxn9WBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/5-AYzLkxqko45mJwN26L9cLeXnw.roa
Signing time: Mon 02 Jan 2023 14:34:57 +0000
ROA not before: Mon 02 Jan 2023 14:34:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35407
IP address blocks: 80.233.251.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:e8:2e:a7:93:15:a0:0d:eb:72:39:8a:f8:a5:50:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=133897fc7a963f14215d58e1824144ab19fd5810
Validity
Not Before: Jan 2 14:34:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e7e018ccb931aa4a38e66270376e8bf5c2de5e7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:4c:23:b4:fc:51:9f:1e:50:47:3a:76:40:51:
57:4b:57:b3:7f:17:ce:60:28:85:a1:71:a1:1c:7e:
dd:00:2f:e8:a6:70:e5:98:73:53:19:7f:15:10:78:
bc:2b:6f:95:d0:e1:5a:9e:1d:20:02:cc:f8:1c:99:
6e:52:03:74:c9:0e:33:6d:3c:9b:8b:b8:64:8c:01:
ef:f7:8f:d1:da:33:ea:2b:3b:11:3d:47:f9:26:cf:
77:3f:1e:22:44:65:13:fd:95:8f:3a:d2:3d:32:d9:
70:93:7c:48:c8:be:06:0b:79:54:51:5f:ae:c9:c9:
4a:0d:f8:44:06:3f:fc:16:fd:ef:ad:2a:19:ff:fa:
c8:9c:f7:17:9f:6f:b7:d8:d0:37:a5:d2:ac:13:48:
6c:2c:f9:0a:ea:fa:db:6c:d2:a0:d4:19:46:98:9b:
b6:d3:98:e9:b2:1e:43:41:89:2d:38:45:da:d7:dd:
4d:c4:cc:d1:24:60:42:f3:bc:1f:75:08:aa:65:87:
ec:81:aa:2e:60:c5:79:99:03:cb:47:c0:8b:05:e1:
55:7b:69:31:52:9c:e7:37:94:f6:ad:d5:bc:d9:8d:
63:ea:c6:f7:2b:4e:64:f5:3d:45:e1:95:a6:b6:a2:
71:6e:b3:ed:d6:4d:9c:75:9b:aa:e8:01:a7:07:da:
44:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:E0:18:CC:B9:31:AA:4A:38:E6:62:70:37:6E:8B:F5:C2:DE:5E:7C
X509v3 Authority Key Identifier:
keyid:13:38:97:FC:7A:96:3F:14:21:5D:58:E1:82:41:44:AB:19:FD:58:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EziX_HqWPxQhXVjhgkFEqxn9WBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/5-AYzLkxqko45mJwN26L9cLeXnw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/EziX_HqWPxQhXVjhgkFEqxn9WBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.233.251.0/24
Signature Algorithm: sha256WithRSAEncryption
53:60:a3:b7:72:0d:5f:c5:b9:5e:13:b3:34:d8:c9:0d:97:bc:
8a:a2:d3:ba:79:a3:24:ad:2d:21:f7:8b:87:bc:44:93:f1:2d:
33:bb:b3:af:c8:ae:c6:e6:0e:05:e4:56:f1:e1:64:b6:3d:69:
b7:a1:25:a2:79:2a:98:58:df:af:11:f5:09:08:90:36:47:1b:
35:a0:de:77:12:e1:47:a1:42:a3:cb:e9:a3:78:3d:c0:4e:75:
3a:28:f3:9b:a4:7d:07:93:7e:56:fb:6c:e3:2c:eb:4e:2a:2a:
7a:b5:70:da:02:79:32:11:2e:6b:8a:27:ee:72:0d:cb:83:f8:
37:7a:c4:09:f2:33:3f:fb:60:10:7c:22:1d:8d:3f:20:75:48:
b9:c7:0f:cc:6a:f0:5e:c6:cd:25:c0:23:34:00:54:3e:3a:32:
ab:1d:8b:a5:ea:c4:a9:ce:90:19:e1:01:9b:5a:b7:e9:85:52:
33:f4:b6:ce:4a:40:a5:eb:dc:fa:8b:16:b3:68:21:a0:47:53:
3e:31:5a:0c:e7:c9:d6:b1:40:bf:c3:f8:e3:6b:c1:44:e8:56:
96:0e:05:44:2d:46:ff:b0:1c:01:9e:f4:9d:9d:f6:08:21:b4:
35:de:b0:93:ea:da:c3:80:a7:48:3a:6b:66:f4:25:43:92:04:
27:dd:28:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 13:05:45 2025 by rpki-client