Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/Ar9hhoSy5MAmP0sK3dDH-dQFD_Y.roa
File: Ar9hhoSy5MAmP0sK3dDH-dQFD_Y.roa (raw, json)
Hash identifier: ZFt5j467fJBZgBiLeB2puL+GQKXX4zN8+5ZFrlqUV9s=
Subject key identifier: 02:BF:61:86:84:B2:E4:C0:26:3F:4B:0A:DD:D0:C7:F9:D4:05:0F:F6
Certificate issuer: /CN=133897fc7a963f14215d58e1824144ab19fd5810
Certificate serial: 018572E8313BFBECC5C6AB230896416D6863
Authority key identifier: 13:38:97:FC:7A:96:3F:14:21:5D:58:E1:82:41:44:AB:19:FD:58:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EziX_HqWPxQhXVjhgkFEqxn9WBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/Ar9hhoSy5MAmP0sK3dDH-dQFD_Y.roa
Signing time: Mon 02 Jan 2023 14:34:57 +0000
ROA not before: Mon 02 Jan 2023 14:34:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43915
IP address blocks: 80.233.238.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:e8:31:3b:fb:ec:c5:c6:ab:23:08:96:41:6d:68:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=133897fc7a963f14215d58e1824144ab19fd5810
Validity
Not Before: Jan 2 14:34:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=02bf618684b2e4c0263f4b0addd0c7f9d4050ff6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:18:37:90:0a:09:e6:2d:3c:59:b9:25:b4:83:
b2:29:84:99:a0:10:03:0f:0b:d7:9e:81:83:0b:00:
6e:49:a6:63:da:56:24:9f:70:9e:83:71:75:0a:dc:
5d:57:b4:bc:ba:c9:fb:a1:30:9b:9d:dc:73:2b:81:
44:a8:ce:1d:4d:58:ae:31:bf:03:b7:40:66:4d:ac:
3d:f9:11:0d:52:2a:cd:4d:8c:cc:13:80:fe:ae:c5:
2e:0f:ed:2a:2b:d3:fc:19:4f:93:60:69:56:e5:38:
f8:c9:e3:9c:c6:87:c6:56:c7:03:6f:7c:e2:54:3a:
35:77:b4:59:9c:23:09:33:91:f7:41:58:80:5f:51:
a7:f5:dc:22:84:aa:a6:50:64:58:40:18:e3:47:5d:
db:7f:f6:ec:0c:93:4d:9d:78:73:2a:c0:ef:dc:b7:
79:a1:56:ce:ef:1e:51:e6:10:c6:82:bc:65:98:eb:
d0:11:80:79:13:06:41:66:fc:b2:30:96:27:50:72:
25:c4:56:1d:c7:bf:14:e3:79:ba:a0:91:82:f9:0c:
45:e8:dc:d2:bd:0d:c0:52:22:53:7d:d7:a6:c5:ff:
13:a8:82:7a:49:21:a2:79:f5:eb:a6:7e:a9:a5:20:
a4:2d:46:a5:24:94:c5:37:14:53:a4:ba:f3:c6:f6:
92:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:BF:61:86:84:B2:E4:C0:26:3F:4B:0A:DD:D0:C7:F9:D4:05:0F:F6
X509v3 Authority Key Identifier:
keyid:13:38:97:FC:7A:96:3F:14:21:5D:58:E1:82:41:44:AB:19:FD:58:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EziX_HqWPxQhXVjhgkFEqxn9WBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/Ar9hhoSy5MAmP0sK3dDH-dQFD_Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/EziX_HqWPxQhXVjhgkFEqxn9WBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.233.238.0/24
Signature Algorithm: sha256WithRSAEncryption
58:e6:2a:2f:b1:35:f9:94:ae:c6:8f:d4:c4:10:07:4a:d1:a1:
50:c2:68:c2:2c:64:1e:06:bf:1c:ac:9a:ed:ca:db:ad:28:b8:
31:66:93:a7:df:77:86:a4:d2:f1:1a:69:9a:31:c7:3f:9f:09:
ad:c5:16:16:ab:a8:dd:65:4c:83:ae:24:3e:88:c1:c5:fd:60:
6d:5a:e8:20:98:de:ee:fc:8a:31:e8:ec:db:22:d7:d7:37:7a:
95:b8:93:e4:c4:56:7c:ae:40:e3:06:3d:90:7d:8f:8d:35:99:
06:db:5f:36:07:ca:0d:66:9b:5b:fd:ba:bd:7c:69:f3:fb:60:
e9:da:85:3f:4e:62:d0:e8:e5:af:17:3c:c7:f3:70:9a:e5:50:
af:16:97:fe:a2:07:33:7e:75:df:48:f5:e3:5b:3a:9e:0d:5a:
79:f4:35:8a:c6:8c:44:c7:e3:7e:00:b8:d6:5c:22:10:aa:34:
8e:7c:5a:09:6f:b3:07:c1:36:7b:da:81:5e:ea:49:33:3a:d5:
5a:e1:ce:42:10:f3:78:2a:aa:00:60:81:08:da:ce:02:20:04:
90:98:d3:4b:cb:9a:11:a8:fd:9a:27:b9:1e:29:2f:2d:17:12:
8d:09:5b:0f:ec:cd:c2:e6:d6:ba:f2:b8:4a:96:f4:1d:fd:4e:
a4:98:6b:07
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVy6DE7++zFxqsjCJZBbWhjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzMzg5N2ZjN2E5NjNmMTQyMTVkNThlMTgyNDE0NGFiMTlm
ZDU4MTAwHhcNMjMwMTAyMTQzNDU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMmJmNjE4Njg0YjJlNGMwMjYzZjRiMGFkZGQwYzdmOWQ0MDUwZmY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlBg3kAoJ5i08WbkltIOyKYSZoBAD
DwvXnoGDCwBuSaZj2lYkn3Ceg3F1CtxdV7S8usn7oTCbndxzK4FEqM4dTViuMb8D
t0BmTaw9+RENUirNTYzME4D+rsUuD+0qK9P8GU+TYGlW5Tj4yeOcxofGVscDb3zi
VDo1d7RZnCMJM5H3QViAX1Gn9dwihKqmUGRYQBjjR13bf/bsDJNNnXhzKsDv3Ld5
oVbO7x5R5hDGgrxlmOvQEYB5EwZBZvyyMJYnUHIlxFYdx78U43m6oJGC+QxF6NzS
vQ3AUiJTfdemxf8TqIJ6SSGiefXrpn6ppSCkLUalJJTFNxRTpLrzxvaS5wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAK/YYaEsuTAJj9LCt3Qx/nUBQ/2MB8GA1UdIwQY
MBaAFBM4l/x6lj8UIV1Y4YJBRKsZ/VgQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXppWF9IcVdQeFFoWFZqaGdrRkVxeG45V0JBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy84YmU0YWYtNjJiZS00MTgwLWJlYzkt
ZjJiODdmMzhiOWRkLzEvQXI5aGhvU3k1TUFtUDBzSzNkREgtZFFGRF9ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy84YmU0YWYtNjJiZS00MTgwLWJlYzktZjJiODdmMzhiOWRk
LzEvRXppWF9IcVdQeFFoWFZqaGdrRkVxeG45V0JBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUOnuMA0G
CSqGSIb3DQEBCwUAA4IBAQBY5iovsTX5lK7Gj9TEEAdK0aFQwmjCLGQeBr8crJrt
ytutKLgxZpOn33eGpNLxGmmaMcc/nwmtxRYWq6jdZUyDriQ+iMHF/WBtWuggmN7u
/Iox6OzbItfXN3qVuJPkxFZ8rkDjBj2QfY+NNZkG2182B8oNZptb/bq9fGnz+2Dp
2oU/TmLQ6OWvFzzH83Ca5VCvFpf+ogczfnXfSPXjWzqeDVp59DWKxoxEx+N+ALjW
XCIQqjSOfFoJb7MHwTZ72oFe6kkzOtVa4c5CEPN4KqoAYIEI2s4CIASQmNNLy5oR
qP2aJ7keKS8tFxKNCVsP7M3C5ta68rhKlvQd/U6kmGsH
-----END CERTIFICATE-----
Generated at Wed Mar 12 12:43:04 2025 by rpki-client