Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/GD1waO6dJHE_Rhe8F1VtbjATZLg.roa
File: GD1waO6dJHE_Rhe8F1VtbjATZLg.roa (raw, json)
Hash identifier: KzTrMmVD6r7ddMyRI6JnQq0FiEckG5foUnUSEugEQFc=
Subject key identifier: 18:3D:70:68:EE:9D:24:71:3F:46:17:BC:17:55:6D:6E:30:13:64:B8
Certificate issuer: /CN=133897fc7a963f14215d58e1824144ab19fd5810
Certificate serial: 018572E82822336D67E451ADAFFC75D91DA7
Authority key identifier: 13:38:97:FC:7A:96:3F:14:21:5D:58:E1:82:41:44:AB:19:FD:58:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EziX_HqWPxQhXVjhgkFEqxn9WBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/GD1waO6dJHE_Rhe8F1VtbjATZLg.roa
Signing time: Mon 02 Jan 2023 14:34:55 +0000
ROA not before: Mon 02 Jan 2023 14:34:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5528
IP address blocks: 80.233.248.0/24 maxlen: 24
80.233.165.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:e8:28:22:33:6d:67:e4:51:ad:af:fc:75:d9:1d:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=133897fc7a963f14215d58e1824144ab19fd5810
Validity
Not Before: Jan 2 14:34:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=183d7068ee9d24713f4617bc17556d6e301364b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:58:44:9b:98:b0:ed:f7:01:a2:ed:c4:15:fd:
f7:c6:f6:6f:bb:d9:07:5d:f0:a2:dd:48:0f:19:de:
65:88:94:97:af:d6:d8:07:07:31:a9:d2:a4:62:51:
2a:55:a1:87:20:33:36:70:ea:17:b0:8e:3e:ed:a7:
f2:f4:38:c4:9f:48:54:92:b6:0a:34:7f:d1:87:f2:
8e:76:0c:56:f2:27:14:2b:13:79:18:dd:73:cc:4c:
b8:e6:4e:20:22:db:f2:f9:2e:2f:19:8d:ca:99:5c:
c7:80:0e:0c:9a:1d:59:0b:54:68:c9:95:54:2e:48:
c5:41:8f:1e:f9:1c:97:6a:39:bb:e1:3c:76:d1:f1:
60:b4:38:66:50:c7:62:8c:53:b4:43:a8:d5:14:52:
c7:5a:46:7f:8e:1a:5b:2e:08:4a:1b:b5:cf:5e:4f:
27:53:91:34:20:d9:42:27:f2:92:aa:03:65:2a:58:
4a:9a:6c:e5:9b:e8:59:1f:30:ab:b7:68:98:b9:8c:
74:30:24:4a:60:98:f7:1c:7d:47:54:c5:0b:f7:b5:
b6:bb:76:64:0d:a1:a0:50:99:b9:ab:c1:40:af:f6:
79:e8:78:3d:56:e7:f8:99:97:42:19:1f:7f:2e:71:
f7:6a:75:dd:d1:e7:4b:9b:90:be:76:a3:3c:89:b3:
9a:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:3D:70:68:EE:9D:24:71:3F:46:17:BC:17:55:6D:6E:30:13:64:B8
X509v3 Authority Key Identifier:
keyid:13:38:97:FC:7A:96:3F:14:21:5D:58:E1:82:41:44:AB:19:FD:58:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EziX_HqWPxQhXVjhgkFEqxn9WBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/GD1waO6dJHE_Rhe8F1VtbjATZLg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/EziX_HqWPxQhXVjhgkFEqxn9WBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.233.165.0/24
80.233.248.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:00:ba:75:60:57:63:a6:f0:a9:ef:b7:19:26:04:84:8b:5a:
68:78:ff:8b:c0:8b:48:08:e6:52:87:0f:a2:fa:3b:ea:e9:8b:
d0:3d:f1:10:15:e9:29:34:99:0c:00:b7:6b:97:5a:f5:15:1e:
ab:3c:bf:5d:dc:56:36:89:7f:4b:a7:13:c8:bf:2b:7b:3f:cd:
74:58:9d:21:13:ce:91:9a:c8:1e:02:24:cb:bc:be:12:0d:95:
80:81:67:c7:f3:e0:92:ef:bf:bc:e2:b4:78:97:01:06:68:f9:
7c:52:a7:f4:b3:dd:fc:54:29:b5:a2:c1:33:39:66:43:d4:3e:
15:56:5c:83:e4:57:97:b1:36:83:f9:04:2b:2b:dc:a3:55:fc:
23:c9:4b:a3:e5:b5:b7:fc:c0:48:b8:d8:26:4c:05:37:57:d5:
91:47:dc:da:b4:da:1c:a1:7d:a0:5e:f7:5a:80:9a:84:f5:07:
da:40:34:9f:43:93:d7:bf:fe:61:43:1f:f6:82:67:f7:b7:cd:
a6:99:8c:07:84:b1:0c:4d:19:10:f8:e7:69:07:6f:00:eb:a6:
c3:2e:35:6a:67:a3:71:64:e5:e8:1a:e9:7e:db:a3:98:9a:58:
52:01:3d:8b:e6:e4:b0:58:82:3a:a4:2b:6b:21:a2:83:36:df:
03:7b:36:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 15 08:34:53 2023 by rpki-client on console-fra.rpki-client.org