Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/EcOXaw-vns6YN_6w7asnTgnwEH0.roa
File: EcOXaw-vns6YN_6w7asnTgnwEH0.roa (raw, json)
Hash identifier: Y7MCM38AmCom5da1NRTrMl56PWxn3kS9P1rsioGOR8o=
Subject key identifier: 11:C3:97:6B:0F:AF:9E:CE:98:37:FE:B0:ED:AB:27:4E:09:F0:10:7D
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 0193778D9E772DC80859A73C42B64AFCE2AC
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/EcOXaw-vns6YN_6w7asnTgnwEH0.roa
Signing time: Fri 29 Nov 2024 10:53:09 +0000
ROA not before: Fri 29 Nov 2024 10:53:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 83.147.16.0/22 maxlen: 24
83.147.20.0/24 maxlen: 24
83.147.21.0/24 maxlen: 24
83.147.22.0/24 maxlen: 24
83.147.26.0/23 maxlen: 24
83.147.28.0/24 maxlen: 24
83.147.40.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:77:8d:9e:77:2d:c8:08:59:a7:3c:42:b6:4a:fc:e2:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Nov 29 10:53:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=11c3976b0faf9ece9837feb0edab274e09f0107d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e8:07:45:03:df:62:3b:c6:41:b0:93:cb:a2:
88:91:96:b5:98:fa:07:cd:87:f5:61:d7:43:0e:be:
85:7a:98:15:11:7e:62:35:f5:18:82:96:c6:1c:c2:
aa:d4:c2:6f:19:15:c9:f9:a9:2c:d5:66:7e:e3:a3:
fe:91:bb:d2:8b:b1:2a:0c:ad:79:c1:d1:6f:87:64:
42:1d:80:dc:2c:e4:ed:00:54:f8:e0:65:90:f8:b2:
9a:ee:f5:d6:82:a7:56:0a:07:4e:8d:7d:e7:21:13:
2e:80:83:05:3c:56:14:83:c2:b6:f9:c4:5d:c8:60:
e2:b4:01:a2:b0:d4:dc:7c:8e:79:c9:cd:76:97:f8:
fe:fc:f4:52:9f:f2:08:bd:9e:4b:db:b6:c4:4a:e3:
f2:af:95:c4:97:fd:bc:84:76:cd:c7:06:4b:5b:f8:
b0:5a:95:b7:f1:a6:42:30:37:44:d2:d3:8e:b6:d1:
ef:28:dd:c2:2a:f3:6e:15:72:5b:fc:3b:db:8b:ac:
d3:a4:1b:43:9d:15:54:34:45:f0:40:0e:31:39:95:
19:07:39:d0:3d:77:30:47:87:5f:c7:c1:4c:0a:15:
75:18:cb:04:aa:81:77:f2:46:25:43:bb:28:bc:8a:
3b:09:e5:9d:61:f0:fc:ac:fc:fe:e8:91:28:2a:31:
2b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:C3:97:6B:0F:AF:9E:CE:98:37:FE:B0:ED:AB:27:4E:09:F0:10:7D
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/EcOXaw-vns6YN_6w7asnTgnwEH0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.16.0-83.147.22.255
83.147.26.0-83.147.28.255
83.147.40.0/22
Signature Algorithm: sha256WithRSAEncryption
0c:42:9f:26:bc:2e:c1:bd:ca:6a:5e:82:35:47:fc:83:b1:0b:
21:02:f3:a6:f2:09:81:44:31:15:a0:d6:8a:54:6f:a9:09:07:
55:0e:e9:3e:8f:9e:a9:3a:9e:8d:d1:47:98:5f:f3:76:5b:b3:
db:fa:87:af:69:59:da:0a:87:3d:0e:7e:c0:43:bb:a4:16:0f:
0e:c2:2c:82:1b:9a:65:17:4a:03:36:49:64:86:f9:7e:b9:78:
2c:76:bd:0c:da:81:78:4f:e5:ee:4d:03:5a:bd:96:67:6f:65:
d6:b3:60:6c:d5:13:7b:98:19:fd:d7:14:ec:ee:17:f7:9e:68:
0d:4b:92:40:ef:e5:27:0e:5c:c1:54:7a:e8:b5:6a:92:1b:b4:
c6:73:98:07:0b:65:05:67:61:b2:52:1d:aa:06:d0:63:70:7d:
f5:6a:c4:e3:98:fb:c0:98:67:69:f9:c1:af:80:db:71:0d:04:
4c:66:11:0a:3b:e2:e0:de:ca:b7:53:83:d8:5d:4f:78:6a:3c:
92:c6:ae:66:3d:c9:c4:5c:8d:16:54:57:40:ca:ec:0c:68:05:
63:23:47:9d:8b:f0:26:26:ef:42:65:0d:6a:f8:db:17:00:dd:
5d:73:19:98:54:f6:7b:82:7a:93:47:41:7e:d6:31:95:94:a9:
d3:4b:59:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:23:43 2025 by rpki-client