Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/zi3u2Ri-ihDe-_0IN7CYe0WL550.roa
File: zi3u2Ri-ihDe-_0IN7CYe0WL550.roa (raw, json)
Hash identifier: QZn0xct3JD80JnhwycVQFXmKkG23p1SZkAZT+8hGMjk=
Subject key identifier: CE:2D:EE:D9:18:BE:8A:10:DE:FB:FD:08:37:B0:98:7B:45:8B:E7:9D
Certificate issuer: /CN=133897fc7a963f14215d58e1824144ab19fd5810
Certificate serial: 018572E82DBF0D6C875C3ADF390B4D3B1821
Authority key identifier: 13:38:97:FC:7A:96:3F:14:21:5D:58:E1:82:41:44:AB:19:FD:58:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EziX_HqWPxQhXVjhgkFEqxn9WBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/zi3u2Ri-ihDe-_0IN7CYe0WL550.roa
Signing time: Mon 02 Jan 2023 14:34:56 +0000
ROA not before: Mon 02 Jan 2023 14:34:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35182
IP address blocks: 80.233.244.0/23 maxlen: 24
80.233.250.0/24 maxlen: 24
62.63.176.0/21 maxlen: 21
62.63.176.0/20 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:e8:2d:bf:0d:6c:87:5c:3a:df:39:0b:4d:3b:18:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=133897fc7a963f14215d58e1824144ab19fd5810
Validity
Not Before: Jan 2 14:34:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ce2deed918be8a10defbfd0837b0987b458be79d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:79:7f:d8:c7:e5:bf:0a:7d:6c:04:87:d5:25:
3b:25:54:f5:3b:b5:f3:e8:66:3e:3f:34:92:d5:e7:
65:8d:df:6d:43:fa:27:92:d3:34:a1:d9:72:eb:f8:
d0:ac:73:b6:17:79:d2:6e:4b:5a:93:51:e0:d5:9e:
06:eb:af:57:d1:17:dc:90:eb:fa:e2:4d:50:88:d4:
df:b4:ae:e8:75:fd:a3:a3:4e:73:6c:9b:d6:d8:94:
b9:1b:04:d6:57:df:9d:d5:67:70:13:2d:81:6f:f5:
74:67:5e:83:9b:74:78:16:25:fc:8e:3b:ed:ce:66:
0c:3a:75:93:29:ab:fa:7e:3b:e7:ba:0d:89:dc:3d:
2a:97:a4:59:f2:bc:7b:51:ea:97:19:9d:5e:53:9c:
47:7b:b9:99:ac:a5:ac:9c:f4:32:1c:35:8d:7a:cf:
03:b4:ab:85:e8:00:8b:eb:a6:8f:21:89:3d:3b:b5:
90:e1:2c:9b:ae:56:ae:97:e8:31:c3:9e:e8:61:39:
e1:d2:86:ce:6f:f2:30:3c:22:80:73:d6:93:ab:06:
f2:24:36:20:f0:02:ec:d3:43:1d:6d:21:af:6e:8b:
be:d3:c6:93:c0:bb:0c:31:c7:1e:09:73:b2:8c:14:
f5:ed:92:52:9e:b9:e2:95:c6:c1:de:67:f1:68:fd:
20:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:2D:EE:D9:18:BE:8A:10:DE:FB:FD:08:37:B0:98:7B:45:8B:E7:9D
X509v3 Authority Key Identifier:
keyid:13:38:97:FC:7A:96:3F:14:21:5D:58:E1:82:41:44:AB:19:FD:58:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EziX_HqWPxQhXVjhgkFEqxn9WBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/zi3u2Ri-ihDe-_0IN7CYe0WL550.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/EziX_HqWPxQhXVjhgkFEqxn9WBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.63.176.0/20
80.233.244.0/23
80.233.250.0/24
Signature Algorithm: sha256WithRSAEncryption
70:2b:27:d2:d0:a6:7e:5c:b1:ae:66:4f:d8:7b:9c:b0:42:4c:
de:b4:c6:b9:2f:27:83:1a:b1:e1:bc:f4:99:5b:4b:18:0b:b3:
4a:bb:ec:04:96:d2:1e:41:bf:9e:4a:6f:00:6a:58:18:08:cb:
ce:2e:20:30:58:f5:6e:cb:8e:57:6d:06:75:3c:3a:40:61:f1:
b4:4e:34:53:e9:83:c3:76:2a:31:b1:54:cd:60:28:ee:88:64:
37:f4:b1:21:1e:11:03:75:f9:91:c1:e4:76:b1:d2:d0:bb:a7:
9a:8b:27:ee:dc:04:c7:c0:36:f3:22:54:ee:0d:8e:4a:18:10:
31:3a:45:20:0d:e5:0f:cb:0e:4e:14:d6:f5:b1:31:af:d5:60:
e6:ea:2c:d2:da:52:14:9c:1e:a8:6b:1f:f1:85:10:80:c6:63:
bb:a3:3a:3d:27:56:89:10:81:a9:9d:9b:47:60:cb:62:bc:9f:
26:1e:cd:a2:28:99:26:8d:03:06:b6:ef:dd:c6:49:06:fc:f1:
ce:b6:3c:59:13:dc:03:15:2c:09:48:c2:c0:37:3f:76:85:12:
1c:34:83:61:2f:b0:ba:c5:c8:03:23:44:e4:63:04:ec:54:4e:
cd:a8:ac:2a:ab:fc:42:92:ce:d2:ae:e7:b3:44:9d:45:75:3b:
33:f2:77:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 12:33:34 2025 by rpki-client