Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/Bf9yYkVtKv8NtdKRwX-vRoVzDp8.roa
File: Bf9yYkVtKv8NtdKRwX-vRoVzDp8.roa (raw, json)
Hash identifier: 1nJfEZ3LnEZxMYLre7iePAME84XKN1sX1HX9lWPg9j4=
Subject key identifier: 05:FF:72:62:45:6D:2A:FF:0D:B5:D2:91:C1:7F:AF:46:85:73:0E:9F
Certificate issuer: /CN=133897fc7a963f14215d58e1824144ab19fd5810
Certificate serial: 018572E83A01E9CC634578F222135BA1913E
Authority key identifier: 13:38:97:FC:7A:96:3F:14:21:5D:58:E1:82:41:44:AB:19:FD:58:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EziX_HqWPxQhXVjhgkFEqxn9WBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/Bf9yYkVtKv8NtdKRwX-vRoVzDp8.roa
Signing time: Mon 02 Jan 2023 14:34:59 +0000
ROA not before: Mon 02 Jan 2023 14:34:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197616
IP address blocks: 80.233.240.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:e8:3a:01:e9:cc:63:45:78:f2:22:13:5b:a1:91:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=133897fc7a963f14215d58e1824144ab19fd5810
Validity
Not Before: Jan 2 14:34:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=05ff7262456d2aff0db5d291c17faf4685730e9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:1c:0d:76:e5:ca:8d:a6:35:62:19:cf:66:72:
59:be:1d:85:9e:b3:ac:83:25:59:4b:f1:f7:8b:7d:
e7:a2:b0:7b:d6:87:5e:19:54:a6:21:e5:9d:c1:20:
76:79:e0:d2:a6:e9:30:e9:d0:23:f2:4d:01:12:45:
e9:48:5b:b8:c3:52:22:3c:91:0d:7c:51:d4:40:9a:
9c:3b:41:58:ca:b8:91:ac:77:d8:0f:6b:0a:3c:56:
fd:02:27:4c:93:60:61:40:59:03:e6:0a:98:32:e3:
04:d1:3c:f3:55:6d:d2:f8:91:04:b1:03:92:c6:e8:
a4:d0:7b:3f:98:db:7f:0f:a5:d1:77:52:f6:a9:3f:
81:d9:ff:c4:94:9f:da:48:74:f8:fe:04:29:52:fe:
25:fc:25:c9:14:37:52:ba:ef:34:57:bc:26:ec:bd:
f0:f3:72:82:35:88:b6:f8:ad:24:fa:9c:10:92:67:
53:2b:ea:6a:b5:a4:1b:be:b7:36:f0:01:ef:eb:ec:
6c:02:e0:6c:7f:7b:01:9e:6c:71:f4:07:de:61:a8:
86:25:76:2c:46:b4:0f:8c:5f:d1:5f:e0:e3:ca:04:
a5:1d:45:28:db:f9:5c:23:25:47:fd:90:83:a8:ab:
7d:a3:2f:4e:5f:94:b2:8e:6d:14:70:16:a8:f6:8f:
5e:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:FF:72:62:45:6D:2A:FF:0D:B5:D2:91:C1:7F:AF:46:85:73:0E:9F
X509v3 Authority Key Identifier:
keyid:13:38:97:FC:7A:96:3F:14:21:5D:58:E1:82:41:44:AB:19:FD:58:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EziX_HqWPxQhXVjhgkFEqxn9WBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/Bf9yYkVtKv8NtdKRwX-vRoVzDp8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/EziX_HqWPxQhXVjhgkFEqxn9WBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.233.240.0/22
Signature Algorithm: sha256WithRSAEncryption
c8:a9:70:e5:e8:d5:72:23:05:de:6c:3c:cf:0c:5e:3b:9e:fa:
46:a4:43:b7:fc:38:1c:d4:9f:7e:ca:f1:bf:25:13:52:74:8e:
19:32:1c:03:c8:e8:70:54:16:d4:40:4a:03:a3:73:94:a8:58:
5c:be:b0:bd:dc:41:75:be:0a:a0:b1:bf:58:f6:e5:d9:81:19:
c8:e1:b6:57:1c:0c:9a:8d:47:a6:94:d7:dc:06:7e:7a:7a:b2:
3c:35:87:ae:50:8e:c7:c6:e0:a5:a9:ec:f3:8f:43:ab:b1:d5:
2e:23:80:37:e9:ba:0d:38:93:e2:95:4a:71:53:1c:c2:9c:bf:
f3:d9:e6:eb:91:61:99:56:8a:01:cf:32:d0:95:94:37:3a:d5:
64:8d:d2:d9:2d:5e:e1:f2:05:fa:14:4d:2f:23:10:37:ea:32:
2c:d8:6c:17:32:af:af:20:a5:61:ba:35:36:92:37:d7:33:9d:
02:66:31:cb:3e:56:71:0d:03:2d:5a:99:a3:b0:54:60:5e:c2:
28:7b:cc:d0:05:ff:8a:cc:99:19:0a:bb:73:16:c2:54:99:7a:
9d:d6:19:7a:d4:e5:06:64:1b:68:57:0e:78:7f:9d:11:97:e3:
b7:24:c1:6e:5f:6e:d9:19:70:c2:ae:fa:5d:a7:1c:23:53:12:
98:f4:bf:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 13:03:16 2025 by rpki-client