Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/mm5SFlYFpI_t4_CAtv6SkdaLKqE.roa
File: mm5SFlYFpI_t4_CAtv6SkdaLKqE.roa (raw, json)
Hash identifier: /zmLnCGDllPkwg19s87tanFGnfif39OW33Gq5edDjec=
Subject key identifier: 9A:6E:52:16:56:05:A4:8F:ED:E3:F0:80:B6:FE:92:91:D6:8B:2A:A1
Certificate issuer: /CN=133897fc7a963f14215d58e1824144ab19fd5810
Certificate serial: 018572E82F44D9BB704FA0B57F4712A9064A
Authority key identifier: 13:38:97:FC:7A:96:3F:14:21:5D:58:E1:82:41:44:AB:19:FD:58:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EziX_HqWPxQhXVjhgkFEqxn9WBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/mm5SFlYFpI_t4_CAtv6SkdaLKqE.roa
Signing time: Mon 02 Jan 2023 14:34:57 +0000
ROA not before: Mon 02 Jan 2023 14:34:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41333
IP address blocks: 80.233.246.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:e8:2f:44:d9:bb:70:4f:a0:b5:7f:47:12:a9:06:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=133897fc7a963f14215d58e1824144ab19fd5810
Validity
Not Before: Jan 2 14:34:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9a6e52165605a48fede3f080b6fe9291d68b2aa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f3:8b:f1:a6:4f:48:54:25:3a:d6:18:db:9e:
87:7a:e8:53:af:8c:dc:b7:24:70:f4:81:92:3f:ae:
a9:1e:ac:22:36:4c:ae:fa:61:4c:70:9c:0b:bc:2f:
8a:61:97:b1:0b:c3:db:9a:da:b0:61:7c:91:1a:cf:
68:71:a5:73:49:0f:2b:3b:57:4c:67:8f:47:63:03:
fe:5c:14:8d:46:14:29:61:a8:e9:47:d8:a6:2a:e2:
10:75:14:4a:89:d7:41:d1:9b:1f:cb:71:5e:ce:3e:
e1:24:b0:28:45:82:25:7d:d7:a9:a8:05:26:b3:93:
20:19:3b:21:95:84:c1:d9:2a:e4:90:f2:32:14:e2:
31:7e:44:27:af:cf:a2:2f:35:07:bb:36:ae:bc:eb:
e7:51:62:99:0f:e5:d3:30:67:e1:23:39:41:90:17:
b9:6e:ac:70:e2:05:8f:f8:c6:3a:3d:91:bc:52:be:
92:8e:4a:c9:49:f3:1c:49:d5:a2:d8:6b:a2:04:47:
c8:01:84:92:96:3c:3f:71:bc:2c:ca:14:fb:d1:ad:
32:df:05:99:29:af:16:ea:b1:70:99:b7:ef:84:33:
01:49:fd:51:55:0b:3d:0e:5c:b4:90:fc:dc:48:d3:
65:66:75:d4:f6:5e:36:41:2e:22:99:6c:ef:f5:82:
7a:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:6E:52:16:56:05:A4:8F:ED:E3:F0:80:B6:FE:92:91:D6:8B:2A:A1
X509v3 Authority Key Identifier:
keyid:13:38:97:FC:7A:96:3F:14:21:5D:58:E1:82:41:44:AB:19:FD:58:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EziX_HqWPxQhXVjhgkFEqxn9WBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/mm5SFlYFpI_t4_CAtv6SkdaLKqE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/EziX_HqWPxQhXVjhgkFEqxn9WBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.233.246.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:57:f6:7e:a4:96:a1:cd:51:00:04:5b:b5:d4:7c:6c:28:d7:
7b:bc:a6:1a:5b:50:3f:0f:8d:be:e4:b3:e4:87:9c:53:98:27:
2f:1b:15:1e:fe:d1:b9:1c:bf:22:ba:1e:2e:e2:08:35:b2:92:
6c:70:22:11:6e:08:c4:b2:e9:82:e1:e6:c5:0f:bc:0e:15:1c:
43:26:b2:02:7c:e5:c4:f8:ac:c4:46:67:85:8b:46:e4:91:83:
1b:c4:6b:d4:c8:b2:2e:e5:1c:b8:9e:c9:2e:b1:fe:1e:5e:a5:
ee:67:d0:73:8b:7c:66:0d:28:b5:ab:e1:60:4d:2f:00:09:10:
d2:4b:5f:42:b3:45:07:d6:8f:a9:1d:2d:38:a1:d2:6b:48:b5:
83:61:76:ad:d8:15:ee:8d:6f:73:91:c3:6a:c8:56:5b:6b:b0:
c6:91:fc:32:21:e1:8a:32:3c:cb:04:75:e6:83:21:e5:e0:3d:
8d:e3:53:cd:6b:dd:6d:22:37:57:11:ef:34:95:5e:53:eb:e7:
ce:3c:fb:b6:1a:25:81:fb:f7:10:5e:e4:44:c4:46:de:1a:d6:
1d:1c:f6:96:a9:26:91:04:32:6d:0f:c8:ac:e9:92:73:b5:8f:
75:5d:bf:93:3b:d6:01:8a:d3:71:0f:d4:5b:65:89:cf:72:1a:
33:7d:3e:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 12:41:23 2025 by rpki-client