Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/l-4PiSvHeaAXvEsUoD0puV7PTL4.roa
File: l-4PiSvHeaAXvEsUoD0puV7PTL4.roa (raw, json)
Hash identifier: WQshFIvdO1jWLHpasNmipaoYCg51blDgFRO6A3+xNZY=
Subject key identifier: 97:EE:0F:89:2B:C7:79:A0:17:BC:4B:14:A0:3D:29:B9:5E:CF:4C:BE
Certificate issuer: /CN=133897fc7a963f14215d58e1824144ab19fd5810
Certificate serial: 018572E83B147F9A78F9A8762ABA8AB4070A
Authority key identifier: 13:38:97:FC:7A:96:3F:14:21:5D:58:E1:82:41:44:AB:19:FD:58:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EziX_HqWPxQhXVjhgkFEqxn9WBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/l-4PiSvHeaAXvEsUoD0puV7PTL4.roa
Signing time: Mon 02 Jan 2023 14:35:00 +0000
ROA not before: Mon 02 Jan 2023 14:35:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199577
IP address blocks: 80.233.187.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:e8:3b:14:7f:9a:78:f9:a8:76:2a:ba:8a:b4:07:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=133897fc7a963f14215d58e1824144ab19fd5810
Validity
Not Before: Jan 2 14:35:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=97ee0f892bc779a017bc4b14a03d29b95ecf4cbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:80:e6:48:0b:7f:1c:1f:7b:15:44:ad:13:34:
4a:6c:04:66:76:84:e1:f9:a6:90:3a:22:e8:84:cb:
00:04:4e:6e:81:91:f3:62:5c:11:92:4c:f9:73:af:
96:8e:d3:91:fe:eb:51:5c:83:3c:e3:f8:38:5d:3d:
11:bc:d5:d2:aa:f1:15:44:ec:df:20:9a:6d:f0:ab:
0d:fa:97:11:79:0e:76:70:3c:96:2e:9c:f5:45:f2:
2b:8e:84:7f:8f:73:48:85:7d:b2:2d:00:53:63:99:
86:7b:38:98:c3:10:00:aa:c3:b4:92:3d:4d:6d:77:
05:04:cf:ec:0e:aa:6d:69:73:5e:c9:0a:c3:ea:55:
26:c7:cd:7d:1c:51:fa:63:cd:fd:27:b2:63:31:6d:
d8:07:2a:88:a5:6f:c2:7b:68:af:57:45:c2:f4:ae:
60:4f:9e:af:40:12:d0:22:25:ae:b4:ab:35:89:ff:
cf:81:90:f3:9e:d3:8a:b3:31:c4:31:9c:e5:85:e1:
bf:c4:01:7e:67:01:36:23:c6:82:32:c7:67:81:2a:
32:47:05:6e:68:c4:37:21:ae:7c:68:cb:60:54:77:
ac:b3:bc:03:97:32:b9:82:b1:32:2b:af:de:69:76:
4d:35:51:51:f8:27:0d:e8:3f:27:b0:6e:e0:83:3e:
36:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:EE:0F:89:2B:C7:79:A0:17:BC:4B:14:A0:3D:29:B9:5E:CF:4C:BE
X509v3 Authority Key Identifier:
keyid:13:38:97:FC:7A:96:3F:14:21:5D:58:E1:82:41:44:AB:19:FD:58:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EziX_HqWPxQhXVjhgkFEqxn9WBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/l-4PiSvHeaAXvEsUoD0puV7PTL4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/EziX_HqWPxQhXVjhgkFEqxn9WBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.233.187.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:85:c9:77:5e:6a:85:5e:0b:73:6c:13:f9:52:93:2c:10:6d:
0a:7c:dd:6b:8d:81:c2:e5:61:2d:d2:33:ac:75:e1:3d:2d:be:
e2:a5:9d:24:90:6c:11:ab:1a:b8:60:1e:8b:9f:a9:83:c6:65:
21:23:c1:c1:99:3b:f8:e2:95:5b:dd:73:e1:a3:67:00:ee:64:
ec:b4:a5:84:da:cb:fc:2e:1f:df:26:ae:ef:72:6e:c4:ec:c8:
ba:cf:c2:ab:f0:02:28:4d:15:01:92:60:fe:17:52:79:a7:15:
48:04:6d:ae:20:c7:0c:e3:60:6d:3f:26:5b:39:64:5b:26:b5:
d0:de:96:12:a6:07:9c:48:c8:51:93:b6:ff:10:a8:d6:ca:20:
9f:5d:61:15:22:e7:76:66:ab:d9:5d:41:be:a2:92:c1:af:46:
47:cd:8f:e3:ef:6a:02:a7:ba:75:c1:f4:8a:aa:77:b1:cc:60:
13:e9:df:a5:4d:94:20:03:7f:ab:b4:26:c8:56:ab:58:fd:1f:
32:be:4d:12:93:03:c0:04:a1:8c:bb:8f:00:1b:76:6c:2c:ba:
87:a3:d6:4b:b5:78:53:99:10:05:32:02:62:b2:34:cf:af:e2:
de:b2:30:a2:e0:36:4c:ca:56:a7:33:58:cc:6d:4f:a5:a4:5d:
d5:e0:d0:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 15 08:34:47 2023 by rpki-client on console-ams.rpki-client.org