Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/HYYxQetPlC1B88AIcPd88JgcqGc.roa
File: HYYxQetPlC1B88AIcPd88JgcqGc.roa (raw, json)
Hash identifier: ldYiOwSlynQRRQHusoALYSsjP3mCIJC0vy2shjy4kqQ=
Subject key identifier: 1D:86:31:41:EB:4F:94:2D:41:F3:C0:08:70:F7:7C:F0:98:1C:A8:67
Certificate issuer: /CN=133897fc7a963f14215d58e1824144ab19fd5810
Certificate serial: 018572E829F9E676E91170AB67C5C644EFE7
Authority key identifier: 13:38:97:FC:7A:96:3F:14:21:5D:58:E1:82:41:44:AB:19:FD:58:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EziX_HqWPxQhXVjhgkFEqxn9WBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/HYYxQetPlC1B88AIcPd88JgcqGc.roa
Signing time: Mon 02 Jan 2023 14:34:55 +0000
ROA not before: Mon 02 Jan 2023 14:34:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12443
IP address blocks: 213.175.124.0/22 maxlen: 22
213.175.126.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:e8:29:f9:e6:76:e9:11:70:ab:67:c5:c6:44:ef:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=133897fc7a963f14215d58e1824144ab19fd5810
Validity
Not Before: Jan 2 14:34:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1d863141eb4f942d41f3c00870f77cf0981ca867
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:8f:de:5a:79:43:0c:51:8b:e8:3f:5b:8c:81:
76:90:ed:26:0e:42:42:67:f2:51:f8:90:3b:ae:94:
c4:09:af:7f:85:fc:27:9a:ac:cf:3f:21:57:64:5a:
1e:31:80:e6:fa:40:44:56:2e:a9:f3:da:f6:58:4b:
ce:fe:58:03:de:03:92:31:65:49:e9:52:91:2a:e9:
1c:a7:6f:5e:fd:65:99:7e:f3:08:76:c4:a1:be:ba:
74:de:d0:e6:64:36:ae:d3:86:8c:38:30:0f:c5:1c:
79:3f:84:4e:55:ce:39:9a:1d:07:5d:3d:47:d1:13:
07:c1:52:c3:92:70:3e:0e:e8:9c:fc:4b:05:8d:33:
3b:8b:1d:f8:4b:28:c5:37:67:34:3c:a2:39:0e:dc:
43:db:93:b1:ee:ec:ac:51:84:af:73:27:50:ce:a6:
88:e2:9d:a3:65:d6:e7:8e:6a:0e:ec:04:bd:6f:04:
fc:0f:90:ba:3a:d5:c7:0a:3e:58:89:b3:fc:47:bb:
e8:3d:f8:d9:b1:f8:76:36:40:e8:90:df:33:b6:4b:
38:7f:5f:fc:59:4d:19:55:62:cd:c4:f1:0b:1e:89:
78:81:76:03:d2:7d:6c:50:de:20:78:cb:31:5e:3c:
30:19:42:67:70:3f:e0:8b:1f:4b:f5:18:2d:84:b6:
de:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:86:31:41:EB:4F:94:2D:41:F3:C0:08:70:F7:7C:F0:98:1C:A8:67
X509v3 Authority Key Identifier:
keyid:13:38:97:FC:7A:96:3F:14:21:5D:58:E1:82:41:44:AB:19:FD:58:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EziX_HqWPxQhXVjhgkFEqxn9WBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/HYYxQetPlC1B88AIcPd88JgcqGc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/EziX_HqWPxQhXVjhgkFEqxn9WBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.175.124.0/22
Signature Algorithm: sha256WithRSAEncryption
3d:82:47:36:dd:3c:97:e2:d5:e2:01:9d:ba:07:69:79:25:74:
86:8c:0e:90:60:93:cf:45:4f:09:b8:0f:3d:3b:e7:4c:14:ed:
13:e8:d2:9f:60:1d:64:86:94:78:c8:9e:e4:a2:9f:cc:dc:8c:
26:4a:23:da:76:92:24:23:8a:40:29:81:7b:e6:f2:54:6a:23:
2b:21:e5:03:64:64:31:1c:8c:cb:56:b1:68:12:61:35:82:c5:
f6:f8:09:87:dc:65:2b:ea:41:e3:22:ea:79:11:53:fa:94:4e:
00:a4:40:f9:76:c8:0c:5a:9c:d5:d6:ed:52:05:db:d7:78:96:
1a:31:15:2b:c6:bd:9f:0e:bf:05:a3:f9:bf:1c:1a:80:ac:89:
c2:12:9f:74:ba:fa:9d:d1:0b:d2:d8:bb:1d:d5:f4:11:58:41:
7c:e6:87:63:5f:b6:2d:96:63:5e:48:8e:d9:53:94:78:bb:55:
ae:67:ce:bd:20:fb:17:39:ed:e5:c9:74:ea:0e:95:2e:fb:1f:
64:a6:22:db:d6:99:28:c2:c2:32:49:31:96:ac:3a:f6:07:53:
4a:cb:63:6c:fa:18:bc:f4:e6:f8:fc:b0:5d:36:81:d7:61:d5:
50:3e:0b:87:8f:2f:08:a0:de:94:db:72:17:8f:34:ed:97:5b:
8e:51:d1:f2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVy6Cn55nbpEXCrZ8XGRO/nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzMzg5N2ZjN2E5NjNmMTQyMTVkNThlMTgyNDE0NGFiMTlm
ZDU4MTAwHhcNMjMwMTAyMTQzNDU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZDg2MzE0MWViNGY5NDJkNDFmM2MwMDg3MGY3N2NmMDk4MWNhODY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgI/eWnlDDFGL6D9bjIF2kO0mDkJC
Z/JR+JA7rpTECa9/hfwnmqzPPyFXZFoeMYDm+kBEVi6p89r2WEvO/lgD3gOSMWVJ
6VKRKukcp29e/WWZfvMIdsShvrp03tDmZDau04aMODAPxRx5P4ROVc45mh0HXT1H
0RMHwVLDknA+Duic/EsFjTM7ix34SyjFN2c0PKI5DtxD25Ox7uysUYSvcydQzqaI
4p2jZdbnjmoO7AS9bwT8D5C6OtXHCj5YibP8R7voPfjZsfh2NkDokN8ztks4f1/8
WU0ZVWLNxPELHol4gXYD0n1sUN4geMsxXjwwGUJncD/gix9L9RgthLbe6wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFB2GMUHrT5QtQfPACHD3fPCYHKhnMB8GA1UdIwQY
MBaAFBM4l/x6lj8UIV1Y4YJBRKsZ/VgQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXppWF9IcVdQeFFoWFZqaGdrRkVxeG45V0JBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy84YmU0YWYtNjJiZS00MTgwLWJlYzkt
ZjJiODdmMzhiOWRkLzEvSFlZeFFldFBsQzFCODhBSWNQZDg4SmdjcUdjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy84YmU0YWYtNjJiZS00MTgwLWJlYzktZjJiODdmMzhiOWRk
LzEvRXppWF9IcVdQeFFoWFZqaGdrRkVxeG45V0JBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC1a98MA0G
CSqGSIb3DQEBCwUAA4IBAQA9gkc23TyX4tXiAZ26B2l5JXSGjA6QYJPPRU8JuA89
O+dMFO0T6NKfYB1khpR4yJ7kop/M3IwmSiPadpIkI4pAKYF75vJUaiMrIeUDZGQx
HIzLVrFoEmE1gsX2+AmH3GUr6kHjIup5EVP6lE4ApED5dsgMWpzV1u1SBdvXeJYa
MRUrxr2fDr8Fo/m/HBqArInCEp90uvqd0QvS2Lsd1fQRWEF85odjX7YtlmNeSI7Z
U5R4u1WuZ869IPsXOe3lyXTqDpUu+x9kpiLb1pkowsIySTGWrDr2B1NKy2Ns+hi8
9Ob4/LBdNoHXYdVQPguHjy8IoN6U23IXjzTtl1uOUdHy
-----END CERTIFICATE-----
Generated at Wed Mar 12 12:56:41 2025 by rpki-client