Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/76C1Y5pc6HfVIOm4AV87vs3m8f8.roa
File: 76C1Y5pc6HfVIOm4AV87vs3m8f8.roa (raw, json)
Hash identifier: /GdZr5G0FM7M6eYGDmGSymLkvP7q9qwQlNX65+6ZikU=
Subject key identifier: EF:A0:B5:63:9A:5C:E8:77:D5:20:E9:B8:01:5F:3B:BE:CD:E6:F1:FF
Certificate issuer: /CN=133897fc7a963f14215d58e1824144ab19fd5810
Certificate serial: 018572E833B24E37E6617B471C776CDE5E11
Authority key identifier: 13:38:97:FC:7A:96:3F:14:21:5D:58:E1:82:41:44:AB:19:FD:58:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EziX_HqWPxQhXVjhgkFEqxn9WBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/76C1Y5pc6HfVIOm4AV87vs3m8f8.roa
Signing time: Mon 02 Jan 2023 14:34:58 +0000
ROA not before: Mon 02 Jan 2023 14:34:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47499
IP address blocks: 80.233.228.0/23 maxlen: 23
80.233.252.0/23 maxlen: 23
80.233.160.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:e8:33:b2:4e:37:e6:61:7b:47:1c:77:6c:de:5e:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=133897fc7a963f14215d58e1824144ab19fd5810
Validity
Not Before: Jan 2 14:34:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=efa0b5639a5ce877d520e9b8015f3bbecde6f1ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ab:24:60:92:5b:bb:83:7e:14:60:02:c3:f0:
ab:d1:0c:7d:ea:ad:fe:cf:61:3b:d5:e2:01:4b:fc:
c1:c7:d3:3c:da:73:41:65:20:96:d7:80:f5:89:b4:
78:b0:b1:7f:55:9b:21:92:99:69:9b:ca:10:5b:58:
a8:59:50:57:cb:e6:3f:7c:19:89:fc:bd:09:e0:24:
6b:98:0a:3e:95:17:09:72:7f:7c:f1:f2:40:7c:9b:
49:a4:b6:ce:d2:c1:0b:6a:2e:f0:27:b7:ec:be:1f:
62:57:a1:ac:23:d9:74:b0:e4:7c:2a:f9:66:05:08:
cf:c8:08:ed:d3:d3:d1:a8:81:5e:03:c4:4b:ac:c9:
53:dc:72:cb:5e:b6:62:75:7a:46:ff:bd:86:f7:62:
36:cb:9a:fd:50:b4:65:36:5f:0c:d9:78:95:13:2a:
67:e0:c9:71:e4:70:53:fe:b2:a6:39:40:9f:6e:1d:
a2:d0:12:54:9f:dd:d3:7f:5f:a2:0f:6b:03:98:00:
d1:18:1f:cd:33:61:48:75:94:19:c0:9f:84:97:31:
8d:18:8b:07:b6:a9:6f:a9:f3:fe:ed:49:85:23:1d:
9c:be:df:ed:19:d6:24:2d:2a:1a:d1:f0:d9:82:d3:
e0:07:f8:a1:d7:d6:64:c4:c7:7e:b3:db:2c:08:e2:
92:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:A0:B5:63:9A:5C:E8:77:D5:20:E9:B8:01:5F:3B:BE:CD:E6:F1:FF
X509v3 Authority Key Identifier:
keyid:13:38:97:FC:7A:96:3F:14:21:5D:58:E1:82:41:44:AB:19:FD:58:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EziX_HqWPxQhXVjhgkFEqxn9WBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/76C1Y5pc6HfVIOm4AV87vs3m8f8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/EziX_HqWPxQhXVjhgkFEqxn9WBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.233.160.0/23
80.233.228.0/23
80.233.252.0/23
Signature Algorithm: sha256WithRSAEncryption
23:37:50:dc:45:3f:58:09:dc:dd:0e:eb:a7:d9:4b:4a:34:65:
85:54:ff:56:0b:7d:ea:ee:26:0e:f3:66:03:eb:61:5b:e0:28:
94:00:bd:b3:25:24:b9:f4:de:2a:57:c0:51:77:82:a8:88:6d:
36:3b:42:26:f7:c5:40:03:e9:ba:25:7f:85:da:8c:e8:a6:b0:
9a:fc:87:3e:c5:3b:12:23:0c:99:10:a6:ff:b2:79:1c:b3:03:
46:ac:0d:b6:7f:db:eb:54:f8:94:d8:ff:c1:ed:66:b1:e5:96:
de:bc:0c:b2:8b:36:83:e4:2a:3b:3f:f7:0c:47:06:cb:ef:99:
16:7c:70:2d:61:27:f9:b9:39:a1:5b:f6:c7:03:da:c9:74:91:
6a:2b:99:c4:10:d1:57:8e:22:2c:60:68:5c:16:06:04:00:7e:
02:5e:ff:25:c2:03:9f:c3:e2:6a:e2:e2:38:af:15:ba:8d:56:
c2:96:a4:f8:1e:69:5f:cf:9c:00:f2:38:53:64:bc:b4:d0:62:
35:0f:cf:10:1a:86:11:c9:d9:43:4f:7a:49:87:3c:6b:c0:04:
1b:4d:6a:14:1d:47:e2:73:88:eb:0e:01:8c:bc:08:7f:3f:b8:
14:71:be:d0:04:c5:ee:c5:58:67:cc:1b:21:62:40:e9:2f:90:
b4:73:80:9a
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYVy6DOyTjfmYXtHHHds3l4RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzMzg5N2ZjN2E5NjNmMTQyMTVkNThlMTgyNDE0NGFiMTlm
ZDU4MTAwHhcNMjMwMTAyMTQzNDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZmEwYjU2MzlhNWNlODc3ZDUyMGU5YjgwMTVmM2JiZWNkZTZmMWZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqaskYJJbu4N+FGACw/Cr0Qx96q3+
z2E71eIBS/zBx9M82nNBZSCW14D1ibR4sLF/VZshkplpm8oQW1ioWVBXy+Y/fBmJ
/L0J4CRrmAo+lRcJcn988fJAfJtJpLbO0sELai7wJ7fsvh9iV6GsI9l0sOR8Kvlm
BQjPyAjt09PRqIFeA8RLrMlT3HLLXrZidXpG/72G92I2y5r9ULRlNl8M2XiVEypn
4Mlx5HBT/rKmOUCfbh2i0BJUn93Tf1+iD2sDmADRGB/NM2FIdZQZwJ+ElzGNGIsH
tqlvqfP+7UmFIx2cvt/tGdYkLSoa0fDZgtPgB/ih19ZkxMd+s9ssCOKSBQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFO+gtWOaXOh31SDpuAFfO77N5vH/MB8GA1UdIwQY
MBaAFBM4l/x6lj8UIV1Y4YJBRKsZ/VgQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXppWF9IcVdQeFFoWFZqaGdrRkVxeG45V0JBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy84YmU0YWYtNjJiZS00MTgwLWJlYzkt
ZjJiODdmMzhiOWRkLzEvNzZDMVk1cGM2SGZWSU9tNEFWODd2czNtOGY4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy84YmU0YWYtNjJiZS00MTgwLWJlYzktZjJiODdmMzhiOWRk
LzEvRXppWF9IcVdQeFFoWFZqaGdrRkVxeG45V0JBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBUOmgAwQB
UOnkAwQBUOn8MA0GCSqGSIb3DQEBCwUAA4IBAQAjN1DcRT9YCdzdDuun2UtKNGWF
VP9WC33q7iYO82YD62Fb4CiUAL2zJSS59N4qV8BRd4KoiG02O0Im98VAA+m6JX+F
2ozoprCa/Ic+xTsSIwyZEKb/snkcswNGrA22f9vrVPiU2P/B7Wax5ZbevAyyizaD
5Co7P/cMRwbL75kWfHAtYSf5uTmhW/bHA9rJdJFqK5nEENFXjiIsYGhcFgYEAH4C
Xv8lwgOfw+Jq4uI4rxW6jVbClqT4Hmlfz5wA8jhTZLy00GI1D88QGoYRydlDT3pJ
hzxrwAQbTWoUHUfic4jrDgGMvAh/P7gUcb7QBMXuxVhnzBshYkDpL5C0c4Ca
-----END CERTIFICATE-----
Generated at Fri Sep 15 08:34:47 2023 by rpki-client on console-ams.rpki-client.org