Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/jYZMeeD7o7jet1SIcNndnK8CgQA.roa
File: jYZMeeD7o7jet1SIcNndnK8CgQA.roa (raw, json)
Hash identifier: lr2DvTvn3Pc1MhI8QtMWNBET0YCIPmpqnPK31yM2l/o=
Subject key identifier: 8D:86:4C:79:E0:FB:A3:B8:DE:B7:54:88:70:D9:DD:9C:AF:02:81:00
Certificate issuer: /CN=133897fc7a963f14215d58e1824144ab19fd5810
Certificate serial: 018572E83E5740149A7FFB86C75A6F272A8C
Authority key identifier: 13:38:97:FC:7A:96:3F:14:21:5D:58:E1:82:41:44:AB:19:FD:58:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EziX_HqWPxQhXVjhgkFEqxn9WBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/jYZMeeD7o7jet1SIcNndnK8CgQA.roa
Signing time: Mon 02 Jan 2023 14:35:00 +0000
ROA not before: Mon 02 Jan 2023 14:35:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211424
IP address blocks: 80.233.132.0/24 maxlen: 24
80.233.177.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:e8:3e:57:40:14:9a:7f:fb:86:c7:5a:6f:27:2a:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=133897fc7a963f14215d58e1824144ab19fd5810
Validity
Not Before: Jan 2 14:35:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8d864c79e0fba3b8deb7548870d9dd9caf028100
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1c:9c:0b:c8:16:1a:0d:8d:12:7a:6f:cd:75:
20:77:0c:61:df:e0:91:3e:e1:a3:1c:58:38:04:7e:
d8:22:26:3c:3c:4d:e0:32:e9:fc:64:ef:da:77:e9:
a2:e0:97:d4:61:15:8f:47:c0:a1:10:9b:af:6e:c6:
59:33:e8:a8:ee:fe:5b:ef:8b:7b:df:a2:18:4c:01:
05:21:5f:7b:96:8e:a1:ef:2c:67:56:32:13:ef:9f:
44:64:96:f6:cd:11:77:81:1c:07:9c:c2:20:2e:33:
a4:83:2b:d8:7d:24:2b:f3:46:77:5e:28:bf:2e:71:
fd:6e:e5:5e:7f:f5:f0:40:51:d2:94:38:c3:6c:03:
2f:84:6a:96:0c:6b:ac:36:6c:9b:ff:24:46:89:8f:
5e:9c:14:35:3e:3d:96:7c:cc:c1:81:77:36:b9:84:
e5:0d:c7:16:d4:2d:fa:f3:ad:00:31:ae:ac:47:04:
cb:60:54:b3:11:17:ea:bd:96:57:ca:2d:67:13:eb:
2f:ba:ea:5b:21:d1:7b:28:16:b3:49:b5:11:02:3b:
5e:f6:b4:d2:e7:b1:7c:8a:80:df:a9:66:e0:e9:7f:
0e:01:e5:76:ad:64:8a:33:58:dd:e0:1a:08:06:ae:
df:f3:d9:a9:1a:30:cb:61:31:70:d0:04:c5:85:76:
a3:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:86:4C:79:E0:FB:A3:B8:DE:B7:54:88:70:D9:DD:9C:AF:02:81:00
X509v3 Authority Key Identifier:
keyid:13:38:97:FC:7A:96:3F:14:21:5D:58:E1:82:41:44:AB:19:FD:58:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EziX_HqWPxQhXVjhgkFEqxn9WBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/jYZMeeD7o7jet1SIcNndnK8CgQA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/EziX_HqWPxQhXVjhgkFEqxn9WBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.233.132.0/24
80.233.177.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:62:d8:84:5b:8d:99:a9:d2:c6:60:22:3d:12:a5:a5:ab:b7:
52:d2:70:1b:6f:e4:fc:52:f8:b8:92:63:c8:41:31:2d:86:fc:
4c:63:d7:2d:ba:fd:7e:16:94:e6:a2:50:fb:f2:64:c7:cc:57:
f3:4e:45:b4:dc:c6:24:1a:13:fe:45:88:5d:54:70:53:d1:57:
2c:78:5b:f0:3c:40:a7:70:0c:e4:8f:a9:a9:e8:8a:a3:ca:b7:
b4:10:63:d7:ed:0a:38:b5:4b:11:1f:cb:f1:d5:32:5c:ec:18:
b6:b7:cb:ff:e5:c8:19:49:5a:d1:5b:72:19:05:6a:c9:6c:01:
e7:9a:1b:ad:35:46:3b:aa:21:df:21:f6:80:39:05:c1:74:42:
0f:72:cb:7d:b3:67:fa:e7:ac:43:96:57:97:e4:25:23:ac:df:
96:d5:e7:90:14:e6:6a:93:4b:8d:e3:63:be:43:04:1c:4d:b7:
dd:c7:7b:60:56:0c:4b:99:11:8b:4a:3a:0d:ca:21:f3:16:ca:
bf:d2:7e:1c:b9:b1:fe:ca:9a:e2:f4:84:9c:29:49:35:ce:6d:
1e:5a:36:35:6c:bc:28:aa:70:cf:e1:34:3d:bd:12:e6:4a:98:
de:b3:46:76:79:87:74:b1:e8:d5:06:26:20:c6:b7:76:4a:65:
fd:50:f2:fb
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVy6D5XQBSaf/uGx1pvJyqMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzMzg5N2ZjN2E5NjNmMTQyMTVkNThlMTgyNDE0NGFiMTlm
ZDU4MTAwHhcNMjMwMTAyMTQzNTAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZDg2NGM3OWUwZmJhM2I4ZGViNzU0ODg3MGQ5ZGQ5Y2FmMDI4MTAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBycC8gWGg2NEnpvzXUgdwxh3+CR
PuGjHFg4BH7YIiY8PE3gMun8ZO/ad+mi4JfUYRWPR8ChEJuvbsZZM+io7v5b74t7
36IYTAEFIV97lo6h7yxnVjIT759EZJb2zRF3gRwHnMIgLjOkgyvYfSQr80Z3Xii/
LnH9buVef/XwQFHSlDjDbAMvhGqWDGusNmyb/yRGiY9enBQ1Pj2WfMzBgXc2uYTl
DccW1C36860AMa6sRwTLYFSzERfqvZZXyi1nE+svuupbIdF7KBazSbURAjte9rTS
57F8ioDfqWbg6X8OAeV2rWSKM1jd4BoIBq7f89mpGjDLYTFw0ATFhXajzQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFI2GTHng+6O43rdUiHDZ3ZyvAoEAMB8GA1UdIwQY
MBaAFBM4l/x6lj8UIV1Y4YJBRKsZ/VgQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXppWF9IcVdQeFFoWFZqaGdrRkVxeG45V0JBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy84YmU0YWYtNjJiZS00MTgwLWJlYzkt
ZjJiODdmMzhiOWRkLzEvallaTWVlRDdvN2pldDFTSWNObmRuSzhDZ1FBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy84YmU0YWYtNjJiZS00MTgwLWJlYzktZjJiODdmMzhiOWRk
LzEvRXppWF9IcVdQeFFoWFZqaGdrRkVxeG45V0JBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUOmEAwQA
UOmxMA0GCSqGSIb3DQEBCwUAA4IBAQCpYtiEW42ZqdLGYCI9EqWlq7dS0nAbb+T8
Uvi4kmPIQTEthvxMY9ctuv1+FpTmolD78mTHzFfzTkW03MYkGhP+RYhdVHBT0Vcs
eFvwPECncAzkj6mp6Iqjyre0EGPX7Qo4tUsRH8vx1TJc7Bi2t8v/5cgZSVrRW3IZ
BWrJbAHnmhutNUY7qiHfIfaAOQXBdEIPcst9s2f656xDlleX5CUjrN+W1eeQFOZq
k0uN42O+QwQcTbfdx3tgVgxLmRGLSjoNyiHzFsq/0n4cubH+ypri9IScKUk1zm0e
WjY1bLwoqnDP4TQ9vRLmSpjes0Z2eYd0sejVBiYgxrd2SmX9UPL7
-----END CERTIFICATE-----
Generated at Fri Sep 15 08:34:47 2023 by rpki-client on console-ams.rpki-client.org