Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/gKw8QRcLaVbSkRp1bdiS45o5MBs.roa
File: gKw8QRcLaVbSkRp1bdiS45o5MBs.roa (raw, json)
Hash identifier: Fe3c2sheEXB70qwMP575NGqWp/LqizaX5wG+tTO9Zeg=
Subject key identifier: 80:AC:3C:41:17:0B:69:56:D2:91:1A:75:6D:D8:92:E3:9A:39:30:1B
Certificate issuer: /CN=133897fc7a963f14215d58e1824144ab19fd5810
Certificate serial: 018572E82BEB7564E8B433CB75AA072B60CE
Authority key identifier: 13:38:97:FC:7A:96:3F:14:21:5D:58:E1:82:41:44:AB:19:FD:58:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EziX_HqWPxQhXVjhgkFEqxn9WBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/gKw8QRcLaVbSkRp1bdiS45o5MBs.roa
Signing time: Mon 02 Jan 2023 14:34:56 +0000
ROA not before: Mon 02 Jan 2023 14:34:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25107
IP address blocks: 80.233.138.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:e8:2b:eb:75:64:e8:b4:33:cb:75:aa:07:2b:60:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=133897fc7a963f14215d58e1824144ab19fd5810
Validity
Not Before: Jan 2 14:34:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=80ac3c41170b6956d2911a756dd892e39a39301b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:7f:8d:7c:b3:f2:0c:c5:04:8e:b3:82:eb:c4:
fa:fd:35:98:a8:0a:7f:a8:ec:c9:87:24:33:86:e3:
84:49:84:ae:d5:f4:fa:fe:f6:26:36:5e:c5:69:9d:
1c:de:8c:1b:22:26:a5:f5:f2:b5:6a:64:91:e0:62:
c1:56:c3:ae:93:18:b3:ef:ff:61:ff:c6:41:0d:3c:
c9:ec:85:51:e6:4c:9b:92:09:c7:8f:6d:51:99:de:
51:af:4a:1a:74:91:21:85:76:f1:cb:05:41:8d:64:
2f:f7:a8:67:fd:a3:2b:a7:d0:7e:3d:31:0b:38:d5:
17:00:f9:79:69:70:ff:6f:63:13:64:fc:7e:f7:4a:
93:dc:e6:5b:8f:32:e2:f6:c0:31:f4:05:1a:cd:8b:
01:ed:89:e0:aa:23:4e:41:a8:12:61:f2:be:23:ef:
d3:78:0f:63:c4:fa:88:b6:83:13:6c:c4:c7:ea:fa:
85:24:0a:80:89:23:61:14:20:2b:6d:58:16:f4:ed:
e9:2e:c5:fe:bd:3e:bb:8d:57:d6:84:3c:be:fc:c8:
f9:c8:64:9f:c9:bb:3e:0f:d8:79:3d:c5:a6:c6:dc:
96:65:79:a8:04:fe:a7:19:69:75:d3:55:23:6b:40:
77:9f:ac:d9:c1:0c:61:28:d1:f8:c0:45:a0:e5:6d:
ad:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:AC:3C:41:17:0B:69:56:D2:91:1A:75:6D:D8:92:E3:9A:39:30:1B
X509v3 Authority Key Identifier:
keyid:13:38:97:FC:7A:96:3F:14:21:5D:58:E1:82:41:44:AB:19:FD:58:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EziX_HqWPxQhXVjhgkFEqxn9WBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/gKw8QRcLaVbSkRp1bdiS45o5MBs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/EziX_HqWPxQhXVjhgkFEqxn9WBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.233.138.0/24
Signature Algorithm: sha256WithRSAEncryption
d0:93:6e:79:2c:ce:89:42:8a:84:75:79:34:ee:a6:6f:1e:f7:
dc:8e:6a:78:76:f7:b3:00:4f:02:ce:84:59:a4:1d:ae:1a:6c:
98:a8:ac:86:6a:43:2e:4c:a6:7e:88:2a:51:89:e2:3a:50:b8:
3d:db:5d:3a:b8:f8:68:27:c1:e3:76:99:61:76:c4:0e:2f:a3:
14:5a:fc:af:fd:f2:e4:12:01:3b:ec:ef:40:6e:77:05:46:03:
82:e0:ae:ab:fd:fd:83:9f:1b:58:8b:a8:78:6a:d6:4b:15:bb:
86:db:07:f7:51:cc:b8:6d:e5:91:a9:f2:23:52:a1:67:42:67:
ce:77:b4:c3:d4:9d:15:f4:6c:13:28:ae:ae:ed:6f:dd:ae:45:
85:2a:1d:00:0b:52:30:c6:74:ba:33:c5:90:83:c2:59:32:f9:
1e:87:53:bf:cb:6d:63:e7:1f:92:c4:56:52:82:01:d8:e2:99:
a6:4a:ea:04:d2:6c:5f:1b:3e:3f:ad:6f:cf:67:f5:50:72:b2:
b1:e7:83:2a:54:da:9e:91:72:7d:7c:8f:bb:69:86:ef:58:08:
e9:d2:c3:76:2e:09:e0:b3:97:16:50:60:c8:3e:51:dd:70:40:
60:af:d2:d2:c0:ca:71:8d:f6:89:2d:58:58:5f:45:ca:76:d0:
d9:a6:04:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 12:58:20 2025 by rpki-client