Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/icnOs9-dzXz2Ehlmqn44_2CBAtM.roa
File: icnOs9-dzXz2Ehlmqn44_2CBAtM.roa (raw, json)
Hash identifier: 2j3okTgppiF8jS7CPq9JPG2nV9aWWOzxyipa3NZBckc=
Subject key identifier: 89:C9:CE:B3:DF:9D:CD:7C:F6:12:19:66:AA:7E:38:FF:60:81:02:D3
Certificate issuer: /CN=133897fc7a963f14215d58e1824144ab19fd5810
Certificate serial: 0182AA9D5A9049CBD4AD432F40728BA21289
Authority key identifier: 13:38:97:FC:7A:96:3F:14:21:5D:58:E1:82:41:44:AB:19:FD:58:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EziX_HqWPxQhXVjhgkFEqxn9WBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/icnOs9-dzXz2Ehlmqn44_2CBAtM.roa
Signing time: Wed 17 Aug 2022 07:03:35 +0000
ROA not before: Wed 17 Aug 2022 07:03:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 5518
IP address blocks: 80.233.128.0/17 maxlen: 24
80.233.146.0/24 maxlen: 24
62.63.128.0/18 maxlen: 24
62.63.141.0/24 maxlen: 24
78.154.128.0/19 maxlen: 19
80.233.232.0/24 maxlen: 24
80.233.255.0/24 maxlen: 24
62.63.159.0/24 maxlen: 24
78.154.146.0/24 maxlen: 24
194.19.224.0/24 maxlen: 24
194.19.224.0/19 maxlen: 19
194.19.246.0/24 maxlen: 24
185.87.204.0/22 maxlen: 24
78.28.240.0/24 maxlen: 24
78.28.252.0/24 maxlen: 24
78.28.251.0/24 maxlen: 24
213.175.64.0/18 maxlen: 24
78.28.197.0/24 maxlen: 24
78.28.195.0/24 maxlen: 24
78.28.192.0/18 maxlen: 24
78.28.211.0/24 maxlen: 24
78.28.212.0/24 maxlen: 24
2a02:16d8:101::/48 maxlen: 48
2a02:16d8:104::/48 maxlen: 48
2a02:16d8:105:9::/64 maxlen: 64
2a02:16d8:102::/48 maxlen: 48
2a02:16d8::/32 maxlen: 48
2a02:16d8:b400::/38 maxlen: 38
2a02:16d8:103::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:aa:9d:5a:90:49:cb:d4:ad:43:2f:40:72:8b:a2:12:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=133897fc7a963f14215d58e1824144ab19fd5810
Validity
Not Before: Aug 17 07:03:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=89c9ceb3df9dcd7cf6121966aa7e38ff608102d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:c8:7b:8d:68:69:c6:2b:c0:d2:9a:5b:92:66:
be:04:19:de:01:d1:21:59:f6:ca:00:4e:ec:4c:0e:
a4:8d:f1:07:b1:67:05:a4:a6:c9:f2:f5:e4:77:5d:
9f:66:7c:c9:a8:13:4f:09:6b:fb:9b:fb:3a:8f:41:
95:03:7e:ba:1e:e9:3a:38:4c:ef:13:72:ae:8b:0a:
46:4a:5b:67:55:1f:34:e7:25:87:73:4b:47:1a:d1:
41:93:3e:7e:15:cb:0f:c1:18:b9:7e:3b:00:0e:23:
86:fa:46:95:69:3d:0f:74:c9:b6:3e:32:51:11:c0:
c5:d1:e3:8b:0c:fc:e4:ad:06:f9:7f:8f:7a:83:c1:
df:3e:e0:cd:c8:12:fb:10:97:19:15:2e:28:cd:b9:
0e:0d:67:f0:b9:bf:5b:c5:c5:24:18:8a:16:21:f1:
14:dd:9e:d3:8d:94:20:15:01:49:48:98:85:42:6e:
b1:b8:26:ad:f8:ef:36:35:cc:14:63:6b:e4:66:74:
5b:f0:9d:90:9c:b3:d5:2d:ec:58:b4:ee:1b:39:35:
c9:be:1d:89:5f:5e:7a:54:ee:ba:25:ae:9f:ee:c4:
9c:be:c2:83:1f:21:7b:0f:79:13:01:f4:84:45:f8:
15:3b:24:c6:92:84:dd:84:fb:12:db:19:d3:1e:58:
6b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:C9:CE:B3:DF:9D:CD:7C:F6:12:19:66:AA:7E:38:FF:60:81:02:D3
X509v3 Authority Key Identifier:
keyid:13:38:97:FC:7A:96:3F:14:21:5D:58:E1:82:41:44:AB:19:FD:58:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EziX_HqWPxQhXVjhgkFEqxn9WBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/icnOs9-dzXz2Ehlmqn44_2CBAtM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/EziX_HqWPxQhXVjhgkFEqxn9WBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.63.128.0/18
78.28.192.0/18
78.154.128.0/19
80.233.128.0/17
185.87.204.0/22
194.19.224.0/19
213.175.64.0/18
IPv6:
2a02:16d8::/32
Signature Algorithm: sha256WithRSAEncryption
84:f5:52:4e:c1:3f:3a:45:44:d0:e7:66:3e:2e:ca:c4:66:47:
e0:46:2d:45:d0:cf:5e:46:4a:1b:1e:4b:16:1a:d0:71:94:80:
e5:e7:58:cb:9c:d7:9a:1b:ee:8a:68:92:6f:52:5f:9f:1c:7d:
6c:0d:10:fa:6c:49:3b:d4:47:98:c7:35:28:0e:e5:8a:06:48:
10:d9:0e:97:31:73:07:7e:28:7c:d1:ff:bf:9e:ab:48:58:76:
f9:f3:14:70:17:00:dc:76:88:a9:2f:a0:db:00:7c:eb:53:e7:
24:de:19:09:13:5a:4e:5f:04:7e:82:0c:bc:11:35:38:17:8e:
a7:d2:19:22:90:3d:ba:09:d5:fd:c2:dc:dd:56:84:ac:b6:dd:
3a:dc:18:30:78:51:90:b2:85:f4:d6:9e:58:e9:94:ae:b7:b6:
b9:7b:e2:f6:21:6b:33:4c:e3:b1:70:8c:a5:ab:f9:53:bf:65:
23:93:0a:10:02:e0:99:c5:73:16:3e:62:9f:6a:ac:26:a5:50:
a7:f0:0a:ff:1b:42:5e:6e:e9:d4:d6:e4:00:2c:c1:b2:9a:ca:
23:72:18:84:94:c5:83:a9:a3:7f:66:ba:39:9e:df:5d:09:e2:
72:8a:db:5e:8b:4c:2b:bd:58:86:1c:b6:3c:d0:90:09:52:ad:
0c:07:da:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 12:55:50 2025 by rpki-client