Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/BHKSbYAKfST2ZdDwp7r1opUIguA.roa
File: BHKSbYAKfST2ZdDwp7r1opUIguA.roa (raw, json)
Hash identifier: 2ovLp6PYRSFbSJ19y/x0B/Jd6jKGOH2l+Y9EYa41ap4=
Subject key identifier: 04:72:92:6D:80:0A:7D:24:F6:65:D0:F0:A7:BA:F5:A2:95:08:82:E0
Certificate issuer: /CN=133897fc7a963f14215d58e1824144ab19fd5810
Certificate serial: 018572E82D3E7A62101154EBBDF8CDEAF2D8
Authority key identifier: 13:38:97:FC:7A:96:3F:14:21:5D:58:E1:82:41:44:AB:19:FD:58:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EziX_HqWPxQhXVjhgkFEqxn9WBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/BHKSbYAKfST2ZdDwp7r1opUIguA.roa
Signing time: Mon 02 Jan 2023 14:34:56 +0000
ROA not before: Mon 02 Jan 2023 14:34:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35108
IP address blocks: 80.233.156.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:e8:2d:3e:7a:62:10:11:54:eb:bd:f8:cd:ea:f2:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=133897fc7a963f14215d58e1824144ab19fd5810
Validity
Not Before: Jan 2 14:34:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0472926d800a7d24f665d0f0a7baf5a2950882e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:0b:d0:72:c2:82:2f:dd:8c:29:3c:4f:bc:12:
27:67:64:78:17:d8:3a:d6:50:65:11:5a:0d:02:25:
f5:2f:f7:ec:a5:e0:c0:64:34:34:e9:36:7d:21:8b:
d7:0f:17:1c:4e:a1:bb:19:ee:ae:04:51:03:14:91:
b8:2a:df:5a:d0:3e:37:80:17:19:47:ce:eb:57:23:
00:96:cb:fc:14:ef:a3:ef:97:08:f2:a0:db:da:f0:
8c:08:37:92:79:f6:d4:64:ed:c6:5a:2a:f8:54:d7:
b9:30:b0:48:1c:76:ac:bf:2e:7a:86:e6:42:76:ef:
1d:2c:4f:7d:d5:e1:2f:8f:50:33:59:20:e2:37:d6:
d5:25:8e:10:a7:a8:0b:2e:e4:98:ba:3e:c0:b4:f8:
72:d3:e1:8e:7d:ca:26:7c:01:c2:9d:6c:12:46:9f:
f2:a6:a5:a2:f5:fa:de:f3:8a:de:05:8c:68:72:08:
b5:45:60:5f:27:0a:12:89:26:69:97:22:86:80:38:
8c:f0:f4:38:2c:cd:e0:c6:62:ab:3b:35:c3:da:f1:
e7:e0:40:a0:c0:3c:c3:62:2f:30:70:17:64:e7:2c:
c9:70:0e:dd:69:f3:b9:3a:87:5d:c0:d8:b0:78:df:
f6:27:d8:07:63:d7:fc:08:39:52:ee:49:00:5c:1b:
8b:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:72:92:6D:80:0A:7D:24:F6:65:D0:F0:A7:BA:F5:A2:95:08:82:E0
X509v3 Authority Key Identifier:
keyid:13:38:97:FC:7A:96:3F:14:21:5D:58:E1:82:41:44:AB:19:FD:58:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EziX_HqWPxQhXVjhgkFEqxn9WBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/BHKSbYAKfST2ZdDwp7r1opUIguA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/EziX_HqWPxQhXVjhgkFEqxn9WBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.233.156.0/22
Signature Algorithm: sha256WithRSAEncryption
03:84:79:f5:c6:05:41:26:f5:ae:ea:1c:f0:2d:bd:8c:57:ea:
1a:8e:96:cd:5b:20:3a:32:dd:96:b9:db:c7:69:55:80:0b:c1:
43:bc:42:11:09:46:f1:62:12:53:61:97:ff:ba:be:49:e5:fb:
ad:17:2e:fe:4c:ec:46:6d:78:c0:d5:b4:14:20:4c:45:34:9b:
99:ea:80:79:da:42:0a:87:2d:5c:2e:ad:a3:08:cf:0c:de:9f:
22:59:b4:2d:cb:d2:3d:11:9d:9c:82:9c:a3:1b:38:e5:0c:9d:
7a:9d:04:e0:32:4f:b0:09:b0:07:31:8c:d2:6c:e6:c4:dd:0e:
26:90:b1:a9:76:d2:fa:8f:00:e4:5d:6b:af:d0:08:fa:26:19:
f5:aa:07:1e:7b:d0:1c:fe:c5:bf:a9:a3:9d:48:b8:f5:58:f8:
f2:d5:83:75:0b:5d:32:cf:65:74:f2:f6:c5:a0:61:52:47:39:
2d:c4:4e:33:74:4c:a3:9f:ea:04:de:39:eb:0d:4e:b1:ff:d8:
b7:e7:ae:95:02:18:aa:f6:78:01:84:9c:11:91:d3:00:ce:26:
a3:28:54:3e:48:f3:1d:76:a3:0b:a8:52:9e:65:e6:be:fb:9d:
70:77:a0:4b:bd:00:75:fe:ed:cb:8c:b8:09:1e:96:06:94:4c:
0f:91:7f:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 13:13:23 2025 by rpki-client