Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/XbYfxz_hUS8ktN8jY3XX1_qzAww.roa
File: XbYfxz_hUS8ktN8jY3XX1_qzAww.roa (raw, json)
Hash identifier: IAs+MvVx3STq2Rh3x5z69DwCW7DTq8MBS5fL7s9mAAw=
Subject key identifier: 5D:B6:1F:C7:3F:E1:51:2F:24:B4:DF:23:63:75:D7:D7:FA:B3:03:0C
Certificate issuer: /CN=133897fc7a963f14215d58e1824144ab19fd5810
Certificate serial: 17DCDFB7
Authority key identifier: 13:38:97:FC:7A:96:3F:14:21:5D:58:E1:82:41:44:AB:19:FD:58:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EziX_HqWPxQhXVjhgkFEqxn9WBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/XbYfxz_hUS8ktN8jY3XX1_qzAww.roa
Signing time: Sat 01 Jan 2022 00:54:35 +0000
ROA not before: Sat 01 Jan 2022 00:54:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48412
IP address blocks: 80.233.140.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 400351159 (0x17dcdfb7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=133897fc7a963f14215d58e1824144ab19fd5810
Validity
Not Before: Jan 1 00:54:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5db61fc73fe1512f24b4df236375d7d7fab3030c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:3a:9f:57:ab:d3:43:b0:d6:73:77:10:23:9b:
96:34:e9:44:ce:62:f9:43:d4:fe:c2:bb:09:79:f1:
e7:3d:66:6a:ab:8a:a6:d8:a4:1b:fd:45:d2:7f:6d:
01:12:18:fa:09:5b:c2:e7:9f:2a:07:5f:12:5c:c6:
cf:d2:5c:9f:7b:f2:5b:e4:ac:89:d6:02:67:2c:67:
a1:f1:40:8b:85:df:7f:4f:d9:c4:d9:85:20:9e:53:
ee:ad:54:06:f5:84:3d:b6:ef:2f:1d:94:93:94:43:
9a:4d:39:bf:d3:72:6b:74:cd:ec:31:fb:39:01:88:
ea:db:67:14:0c:58:20:85:75:ce:bc:c3:53:92:06:
c2:33:2e:1f:5b:20:a0:40:fb:5b:7b:73:e0:25:b9:
42:6c:71:b7:38:05:63:b2:1a:42:4a:15:30:f7:ec:
42:b9:2b:88:cd:3d:1a:58:61:78:54:61:3a:48:74:
91:0e:38:25:76:fc:16:b3:a0:32:f6:3e:7a:a2:30:
f6:a6:85:cd:99:14:84:09:eb:36:40:49:e5:92:87:
29:85:e5:80:58:f0:62:a9:31:69:1c:dd:11:6b:b1:
c0:68:f3:5c:a9:56:80:21:82:13:7e:6e:d5:46:7b:
d1:ae:53:61:f1:93:53:99:3c:6e:47:c0:68:5c:89:
fd:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:B6:1F:C7:3F:E1:51:2F:24:B4:DF:23:63:75:D7:D7:FA:B3:03:0C
X509v3 Authority Key Identifier:
keyid:13:38:97:FC:7A:96:3F:14:21:5D:58:E1:82:41:44:AB:19:FD:58:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EziX_HqWPxQhXVjhgkFEqxn9WBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/XbYfxz_hUS8ktN8jY3XX1_qzAww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/EziX_HqWPxQhXVjhgkFEqxn9WBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.233.140.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:83:ac:8c:89:13:53:88:76:cf:a2:52:69:37:1b:65:97:2d:
c0:a7:8f:2e:ed:e5:cc:7a:a8:ba:c3:f2:27:83:14:eb:64:6c:
d2:28:83:e0:38:6a:ff:7b:7b:58:45:14:10:40:8d:e4:a7:fc:
10:d8:10:88:4f:3c:fc:6b:84:60:c7:8e:3f:6b:48:ea:23:c7:
36:94:59:3e:6c:f4:ad:6f:55:c1:dd:ba:29:ad:8d:17:95:59:
c0:b4:d6:b7:c7:91:ca:05:44:c8:74:cd:a7:9b:64:3e:6b:79:
33:5f:48:7b:c5:52:d1:77:96:10:f5:1a:48:34:a1:db:1b:48:
b9:23:03:ca:dc:8b:9b:cd:cc:18:1a:52:77:b2:02:c9:98:84:
de:1d:5e:c1:2e:f8:a7:e2:56:0f:15:80:20:98:2a:0b:b5:08:
81:26:78:db:29:5d:02:38:15:43:47:4b:8f:57:22:66:7c:94:
b4:18:80:3a:c4:f2:e3:b7:f8:e4:4f:24:13:d6:0d:17:52:1b:
87:6e:e7:5f:9e:69:eb:37:40:3b:f0:ab:43:3e:60:39:fe:a5:
99:db:6e:76:ca:36:f3:12:8b:a7:2d:cb:f6:b5:84:fd:22:6f:
c6:b3:ab:c0:2f:09:36:9e:70:c5:52:92:2a:68:45:10:79:a3:
f3:11:d3:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 12:38:54 2025 by rpki-client