Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/KtKdARs83nE4xVroU5Ohxje_bko.roa
File: KtKdARs83nE4xVroU5Ohxje_bko.roa (raw, json)
Hash identifier: Mq4w8rdmoZbdahYx7kEwV6yeM7YWxh1wd91+Z7ITwWg=
Subject key identifier: 2A:D2:9D:01:1B:3C:DE:71:38:C5:5A:E8:53:93:A1:C6:37:BF:6E:4A
Certificate issuer: /CN=133897fc7a963f14215d58e1824144ab19fd5810
Certificate serial: 018572E837FC2221F64A1E160EC70C4D64CC
Authority key identifier: 13:38:97:FC:7A:96:3F:14:21:5D:58:E1:82:41:44:AB:19:FD:58:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EziX_HqWPxQhXVjhgkFEqxn9WBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/KtKdARs83nE4xVroU5Ohxje_bko.roa
Signing time: Mon 02 Jan 2023 14:34:59 +0000
ROA not before: Mon 02 Jan 2023 14:34:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57318
IP address blocks: 80.233.130.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:e8:37:fc:22:21:f6:4a:1e:16:0e:c7:0c:4d:64:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=133897fc7a963f14215d58e1824144ab19fd5810
Validity
Not Before: Jan 2 14:34:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2ad29d011b3cde7138c55ae85393a1c637bf6e4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:d8:bb:95:e6:c0:22:cc:7f:09:ff:77:d7:e3:
e1:10:10:b5:f3:e6:bf:de:76:86:d2:0a:a9:7e:63:
ce:88:89:40:00:c5:09:09:d1:3c:99:58:57:28:9b:
b5:7b:95:e8:15:6f:18:38:6d:1f:e8:ed:6b:ef:5f:
56:9f:6a:fd:88:d8:44:f6:ab:49:9c:e1:b0:3c:f2:
fe:55:6d:e6:42:22:e3:e8:5e:2a:94:a2:f8:71:87:
bb:73:48:de:cc:d7:b0:66:49:82:ea:41:24:a7:ce:
26:ba:f0:6d:4a:0c:f5:ba:0a:bb:08:7f:7a:fb:67:
54:e1:81:2f:e1:08:f0:37:e2:ea:26:49:3c:1b:52:
97:b7:f7:ef:b7:e1:18:fb:5d:b2:b8:c1:91:8e:fb:
ff:b8:90:0c:95:9b:76:35:3d:5f:fc:21:e9:2e:0b:
f8:db:5f:da:84:4c:f3:1c:7e:94:2a:f9:a4:f3:56:
12:80:63:d9:de:6e:40:85:4b:95:62:2f:f5:fc:dd:
2c:ac:54:8b:62:d7:35:cf:ae:f4:6b:9e:bc:47:52:
ab:f8:5c:27:96:1e:16:67:64:3c:b1:8a:2c:d4:5f:
92:40:90:04:43:de:96:09:a0:ef:fd:35:cd:fe:73:
ca:0f:95:38:eb:5b:3b:5e:2b:d4:18:f1:b2:e9:6e:
56:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:D2:9D:01:1B:3C:DE:71:38:C5:5A:E8:53:93:A1:C6:37:BF:6E:4A
X509v3 Authority Key Identifier:
keyid:13:38:97:FC:7A:96:3F:14:21:5D:58:E1:82:41:44:AB:19:FD:58:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EziX_HqWPxQhXVjhgkFEqxn9WBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/KtKdARs83nE4xVroU5Ohxje_bko.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/EziX_HqWPxQhXVjhgkFEqxn9WBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.233.130.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:e6:62:b9:d2:5f:d7:5f:e8:f7:c4:09:ac:4d:cf:81:5d:16:
87:b1:0e:7c:e6:28:f7:c8:cd:3a:c5:2f:40:c7:94:f1:6e:e3:
78:fe:86:1b:14:72:c5:af:d7:3e:82:0a:f2:9c:3c:8c:1b:35:
ef:71:ec:10:0f:64:f8:7e:1a:43:05:f5:dd:97:6e:2f:43:ab:
c5:8b:d6:18:9f:bd:d4:75:73:b3:d2:c1:06:46:08:96:8c:1e:
8e:3c:05:1d:7d:7a:24:c3:4f:e7:a6:bf:1a:e7:28:55:8c:64:
25:40:64:9a:ac:0f:56:05:ea:45:da:88:56:de:fd:19:fa:b7:
46:43:7b:43:a9:8a:d9:21:dc:95:92:89:79:9d:8e:66:9c:90:
ee:19:94:5c:1c:2c:a4:9f:cb:0e:3e:6a:be:a0:d2:80:43:ac:
b9:4e:4c:0f:a7:2a:be:8b:28:7a:f7:9d:04:85:ae:24:7f:a3:
87:ec:9c:f1:99:d7:ee:f7:a3:ea:f1:19:4b:5f:14:06:19:01:
31:6b:57:76:8d:15:68:fd:31:e6:a4:00:80:73:f1:bd:54:c7:
15:e8:6c:a9:6b:20:95:3a:ef:e5:8a:97:08:11:98:c1:28:a4:
86:b6:cc:cf:8b:bc:9b:21:2f:ec:da:21:06:3e:11:fc:7a:56:
e2:f3:22:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 12:55:29 2025 by rpki-client