Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/TVdlyBkIMm959bsgOUUphMf1O-o.roa
File: TVdlyBkIMm959bsgOUUphMf1O-o.roa (raw, json)
Hash identifier: 0UlCSr57F2zX0aqbu5BZB2ICZ9qqnqLF2kkgg341LKo=
Subject key identifier: 4D:57:65:C8:19:08:32:6F:79:F5:BB:20:39:45:29:84:C7:F5:3B:EA
Certificate issuer: /CN=133897fc7a963f14215d58e1824144ab19fd5810
Certificate serial: 018572E83A6D413894B8824AF0BABC57EC93
Authority key identifier: 13:38:97:FC:7A:96:3F:14:21:5D:58:E1:82:41:44:AB:19:FD:58:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EziX_HqWPxQhXVjhgkFEqxn9WBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/TVdlyBkIMm959bsgOUUphMf1O-o.roa
Signing time: Mon 02 Jan 2023 14:35:00 +0000
ROA not before: Mon 02 Jan 2023 14:35:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199300
IP address blocks: 80.233.153.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:e8:3a:6d:41:38:94:b8:82:4a:f0:ba:bc:57:ec:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=133897fc7a963f14215d58e1824144ab19fd5810
Validity
Not Before: Jan 2 14:35:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4d5765c81908326f79f5bb2039452984c7f53bea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c0:53:4d:11:15:d8:f5:f8:91:e5:01:9a:35:
ea:2f:d7:54:b9:b6:1d:8e:12:f4:b4:88:40:49:c5:
21:a1:8c:2a:ce:5a:96:c7:b4:3c:5a:ad:4b:23:d8:
64:b2:44:52:bf:c2:e0:db:6f:4f:14:c7:5d:f7:a8:
ae:f4:de:cc:6b:1a:69:46:6d:fe:5e:57:c2:51:92:
8a:21:41:74:13:8d:9b:4d:87:89:57:d3:1a:e8:eb:
8d:d1:af:03:ec:2e:e1:f3:8b:f1:97:22:df:12:f5:
96:95:fe:44:1b:63:7e:9e:95:b3:d1:29:31:34:65:
23:61:ca:21:5e:1e:a9:85:5e:46:ba:fe:0b:a2:0c:
72:52:16:a9:d2:95:5f:0e:1a:2e:dd:58:0a:a2:4c:
d0:9d:1d:d1:03:6c:cf:62:10:26:e4:d0:df:2f:5f:
0b:89:41:86:aa:b5:30:b9:a8:d6:0d:8f:86:a4:2b:
15:49:e3:92:35:00:be:5d:3a:87:ac:e6:37:3a:30:
f0:22:29:ae:61:5b:9b:53:e9:17:24:fb:53:10:df:
8e:d3:1f:12:e2:85:df:c9:65:e8:19:18:93:89:35:
5a:7c:f3:74:a8:87:94:71:3b:c4:98:c9:ba:19:46:
34:67:2c:e0:37:23:72:0b:1f:19:2c:0d:38:65:77:
74:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:57:65:C8:19:08:32:6F:79:F5:BB:20:39:45:29:84:C7:F5:3B:EA
X509v3 Authority Key Identifier:
keyid:13:38:97:FC:7A:96:3F:14:21:5D:58:E1:82:41:44:AB:19:FD:58:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EziX_HqWPxQhXVjhgkFEqxn9WBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/TVdlyBkIMm959bsgOUUphMf1O-o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/EziX_HqWPxQhXVjhgkFEqxn9WBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.233.153.0/24
Signature Algorithm: sha256WithRSAEncryption
d1:d3:9c:b3:0b:76:7e:f6:a8:3b:64:63:a9:71:64:da:95:fa:
fc:01:71:6a:fa:80:38:2c:43:dd:1e:18:9e:23:4b:ff:b0:cb:
fd:f9:07:c8:8c:cc:8c:be:1b:50:37:50:03:5d:b6:bd:a9:e3:
84:33:3b:b2:91:d9:64:97:d4:94:df:c9:8e:de:68:c9:22:d9:
14:df:0d:01:fe:b4:67:4f:e1:c1:03:06:1e:e5:44:91:0d:84:
ed:5a:ae:db:cc:e6:68:47:22:20:21:48:e1:8d:15:1c:21:67:
df:ce:dd:6d:9c:5d:63:bd:07:95:ea:87:2e:73:c4:c5:5e:ad:
65:f0:7b:55:04:0b:83:05:92:1e:b6:1d:4f:db:93:a2:df:d4:
eb:07:43:27:19:a5:33:18:d7:48:70:00:04:10:06:9e:37:2a:
32:35:ac:3c:eb:f5:61:6e:58:e4:2b:2f:28:69:fc:a3:13:bf:
c3:f9:61:cb:d0:29:5d:69:8c:02:7c:e5:de:95:ec:f7:97:76:
03:5a:44:e9:22:32:19:fa:eb:7a:23:d6:4c:fc:22:98:fc:b0:
2d:56:b3:ad:d8:f7:7d:5b:0b:67:e0:14:6f:db:3f:fd:fd:00:
ee:23:dc:53:4a:34:de:ff:8f:ff:92:84:79:14:34:a4:f2:e0:
08:9c:79:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 13:08:16 2025 by rpki-client