Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/EITaBOmxh-Q15xD5PYY1tunWlI4.roa
File: EITaBOmxh-Q15xD5PYY1tunWlI4.roa (raw, json)
Hash identifier: pbAhQCU78YznySrCw2q0L3ThPyvi5iB9e2QRaOPRjGQ=
Subject key identifier: 10:84:DA:04:E9:B1:87:E4:35:E7:10:F9:3D:86:35:B6:E9:D6:94:8E
Certificate issuer: /CN=133897fc7a963f14215d58e1824144ab19fd5810
Certificate serial: 018572E83CAF624D1A40C3C007138E05A2E1
Authority key identifier: 13:38:97:FC:7A:96:3F:14:21:5D:58:E1:82:41:44:AB:19:FD:58:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EziX_HqWPxQhXVjhgkFEqxn9WBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/EITaBOmxh-Q15xD5PYY1tunWlI4.roa
Signing time: Mon 02 Jan 2023 14:35:00 +0000
ROA not before: Mon 02 Jan 2023 14:35:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204380
IP address blocks: 78.28.225.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:e8:3c:af:62:4d:1a:40:c3:c0:07:13:8e:05:a2:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=133897fc7a963f14215d58e1824144ab19fd5810
Validity
Not Before: Jan 2 14:35:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1084da04e9b187e435e710f93d8635b6e9d6948e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:c4:3e:85:c7:a8:b1:d7:63:bf:1a:e8:fd:24:
04:b7:21:66:db:e9:ad:b4:10:46:85:96:d4:8a:82:
b8:ae:2d:dd:25:16:35:be:e9:12:47:05:b4:0d:cd:
b9:4e:75:e3:dc:7d:9a:f9:d5:1a:a4:d1:8f:e7:72:
6e:ef:03:58:4a:9f:1c:2e:66:09:98:74:03:ce:46:
a3:f8:81:cf:37:2e:00:f7:87:4d:c2:79:e6:53:e7:
42:24:0e:e7:2e:d3:90:87:4e:4e:ee:05:36:15:45:
b0:c1:06:d3:50:af:70:0b:03:a2:a9:b2:7f:bf:5b:
17:e9:a5:6f:3d:ba:7d:a1:b3:69:11:10:ba:31:1f:
30:43:5f:97:03:d3:77:0a:a5:94:d5:f5:be:49:d3:
f7:0a:7a:ff:30:30:78:53:af:bb:e2:51:91:97:5c:
4d:3e:47:15:09:16:e1:4a:8e:97:63:dc:85:5b:97:
2e:d9:86:fc:d3:64:c0:b8:54:f9:a7:0d:29:c9:75:
d7:fc:36:07:e7:91:7a:a1:7b:34:fc:36:dd:0c:4f:
43:8f:12:1f:47:88:e7:b1:18:20:d0:06:2d:3a:fb:
26:be:97:29:70:1a:35:02:2f:12:ad:48:d5:fe:9e:
1e:32:a0:cf:5e:5e:1a:64:20:8a:fe:55:c8:83:5d:
b4:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:84:DA:04:E9:B1:87:E4:35:E7:10:F9:3D:86:35:B6:E9:D6:94:8E
X509v3 Authority Key Identifier:
keyid:13:38:97:FC:7A:96:3F:14:21:5D:58:E1:82:41:44:AB:19:FD:58:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EziX_HqWPxQhXVjhgkFEqxn9WBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/EITaBOmxh-Q15xD5PYY1tunWlI4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/EziX_HqWPxQhXVjhgkFEqxn9WBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.28.225.0/24
Signature Algorithm: sha256WithRSAEncryption
77:44:1d:f0:1d:81:bd:5e:65:09:7b:a5:ca:6b:ca:b8:7c:9a:
ed:cf:b3:cb:70:bd:f3:3e:e1:a4:d4:ab:9b:74:48:f6:f5:89:
f5:0d:f1:a7:04:71:eb:72:ed:bd:fd:62:bc:90:56:ea:eb:61:
1f:23:11:88:81:0f:97:f5:42:bc:1c:17:f3:1f:df:41:31:d6:
7b:39:82:df:0f:0d:01:d3:ab:41:97:7e:86:a5:4e:20:1a:94:
cb:5f:81:73:7f:8d:cd:60:39:29:e2:ff:b6:e5:3e:44:19:14:
b3:91:63:5a:d5:8d:19:a4:40:ad:b5:37:51:2a:67:21:3d:13:
8e:3c:57:16:20:f8:84:2f:75:cb:3f:5f:f1:64:d5:73:b1:85:
06:24:26:6f:ff:2a:4b:8d:7b:44:b5:7e:9a:87:ef:88:d4:55:
50:9d:ad:8f:ba:c9:41:83:8f:92:52:dc:38:cc:5c:1f:92:96:
b3:e1:7c:9f:1f:e6:23:91:d6:e3:f4:66:cc:35:68:5a:51:64:
ba:e9:fe:3a:6b:9f:cd:91:d9:d9:5e:63:c2:0c:d4:c9:5e:84:
76:d8:30:78:6a:80:b3:72:96:a0:43:c5:32:5c:6e:c4:b8:a5:
b2:9a:0e:93:a3:ef:56:5c:e2:97:8b:53:d6:e3:7d:0e:07:c6:
82:ee:8c:d7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVy6DyvYk0aQMPABxOOBaLhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzMzg5N2ZjN2E5NjNmMTQyMTVkNThlMTgyNDE0NGFiMTlm
ZDU4MTAwHhcNMjMwMTAyMTQzNTAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMDg0ZGEwNGU5YjE4N2U0MzVlNzEwZjkzZDg2MzViNmU5ZDY5NDhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgcQ+hceosddjvxro/SQEtyFm2+mt
tBBGhZbUioK4ri3dJRY1vukSRwW0Dc25TnXj3H2a+dUapNGP53Ju7wNYSp8cLmYJ
mHQDzkaj+IHPNy4A94dNwnnmU+dCJA7nLtOQh05O7gU2FUWwwQbTUK9wCwOiqbJ/
v1sX6aVvPbp9obNpERC6MR8wQ1+XA9N3CqWU1fW+SdP3Cnr/MDB4U6+74lGRl1xN
PkcVCRbhSo6XY9yFW5cu2Yb802TAuFT5pw0pyXXX/DYH55F6oXs0/DbdDE9DjxIf
R4jnsRgg0AYtOvsmvpcpcBo1Ai8SrUjV/p4eMqDPXl4aZCCK/lXIg120kQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBCE2gTpsYfkNecQ+T2GNbbp1pSOMB8GA1UdIwQY
MBaAFBM4l/x6lj8UIV1Y4YJBRKsZ/VgQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXppWF9IcVdQeFFoWFZqaGdrRkVxeG45V0JBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy84YmU0YWYtNjJiZS00MTgwLWJlYzkt
ZjJiODdmMzhiOWRkLzEvRUlUYUJPbXhoLVExNXhENVBZWTF0dW5XbEk0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy84YmU0YWYtNjJiZS00MTgwLWJlYzktZjJiODdmMzhiOWRk
LzEvRXppWF9IcVdQeFFoWFZqaGdrRkVxeG45V0JBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAThzhMA0G
CSqGSIb3DQEBCwUAA4IBAQB3RB3wHYG9XmUJe6XKa8q4fJrtz7PLcL3zPuGk1Kub
dEj29Yn1DfGnBHHrcu29/WK8kFbq62EfIxGIgQ+X9UK8HBfzH99BMdZ7OYLfDw0B
06tBl36GpU4gGpTLX4Fzf43NYDkp4v+25T5EGRSzkWNa1Y0ZpECttTdRKmchPROO
PFcWIPiEL3XLP1/xZNVzsYUGJCZv/ypLjXtEtX6ah++I1FVQna2PuslBg4+SUtw4
zFwfkpaz4XyfH+Yjkdbj9GbMNWhaUWS66f46a5/NkdnZXmPCDNTJXoR22DB4aoCz
cpagQ8UyXG7EuKWymg6To+9WXOKXi1PW430OB8aC7ozX
-----END CERTIFICATE-----
Generated at Wed Mar 12 13:06:44 2025 by rpki-client