Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/G237Ml8omBx3uoI1qmXJEWjXKzE.roa
File: G237Ml8omBx3uoI1qmXJEWjXKzE.roa (raw, json)
Hash identifier: tEBdYWJ/S+97SYHpbSXskzcwUjgpYQwlcFkXcnS1VlM=
Subject key identifier: 1B:6D:FB:32:5F:28:98:1C:77:BA:82:35:AA:65:C9:11:68:D7:2B:31
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 01938597FBE227A17EBFE1A3C59D5E1B926B
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/G237Ml8omBx3uoI1qmXJEWjXKzE.roa
Signing time: Mon 02 Dec 2024 04:19:10 +0000
ROA not before: Mon 02 Dec 2024 04:19:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 83.147.16.0/22 maxlen: 24
83.147.20.0/24 maxlen: 24
83.147.21.0/24 maxlen: 24
83.147.22.0/24 maxlen: 24
83.147.26.0/23 maxlen: 24
83.147.26.0/24 maxlen: 24
83.147.27.0/24 maxlen: 24
83.147.28.0/24 maxlen: 24
83.147.40.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:85:97:fb:e2:27:a1:7e:bf:e1:a3:c5:9d:5e:1b:92:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Dec 2 04:19:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1b6dfb325f28981c77ba8235aa65c91168d72b31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:6f:a0:45:e2:99:aa:3b:4f:7c:7f:b1:d3:6d:
a9:f3:85:83:02:51:9f:96:c1:c5:56:a5:8f:f0:74:
c8:ce:cc:e1:57:0f:a6:44:50:00:06:7c:2f:87:25:
ac:96:cd:01:55:c2:7f:39:a7:64:98:23:ea:1d:53:
26:ef:ac:bf:8b:cf:ac:5c:b4:26:a1:4d:81:ce:9f:
e7:b6:86:d5:b3:cf:f6:af:f1:ad:09:ad:09:fc:1c:
d6:6a:bb:c7:46:1a:2c:c8:eb:da:aa:a7:7a:2c:88:
ad:83:bf:bb:e5:97:32:11:32:8b:e3:9f:a3:6a:ff:
b8:53:80:d7:60:9a:e6:3b:fe:f4:16:a7:84:c6:fb:
dd:a1:c1:f9:18:21:d9:11:81:3f:d4:ef:16:6a:a9:
2a:ac:08:39:ec:82:90:1b:ca:8f:14:b5:a4:6e:4a:
2c:eb:2d:f8:81:c1:75:78:37:dc:d1:a5:63:85:2c:
9e:30:cd:57:da:c9:9d:4c:aa:31:8e:b5:d2:f9:c5:
ea:f3:02:13:0e:cb:65:ef:55:c5:c5:7d:db:8e:10:
1d:a5:63:d7:22:34:5d:01:21:59:a9:35:39:d5:9f:
cb:10:eb:71:8f:99:fc:6b:12:fb:6d:dd:4c:89:39:
13:2a:28:5e:3f:31:5f:a7:7d:30:71:e1:a9:b6:20:
91:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:6D:FB:32:5F:28:98:1C:77:BA:82:35:AA:65:C9:11:68:D7:2B:31
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/G237Ml8omBx3uoI1qmXJEWjXKzE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.16.0-83.147.22.255
83.147.26.0-83.147.28.255
83.147.40.0/22
Signature Algorithm: sha256WithRSAEncryption
8d:9a:bf:78:32:d2:66:54:43:42:33:65:de:eb:77:2e:bf:18:
86:6d:26:b0:2a:2a:ee:e0:45:42:c4:ec:0b:88:cb:ba:9c:99:
3f:55:13:4d:8c:71:29:f5:0d:27:2a:8e:f4:ed:cf:a4:aa:60:
a3:a8:0e:62:a9:5d:70:2b:14:f9:c5:c7:59:bd:6e:e6:6f:c6:
61:98:c9:47:d5:ca:f8:6b:a5:8f:c2:85:a0:52:5b:b9:58:54:
a8:fc:4b:ef:2e:6c:03:b5:ba:70:61:f6:4f:b0:a7:07:e2:45:
c4:f0:f8:c7:ca:d5:53:fb:5f:08:83:15:db:4a:a2:a4:37:8d:
11:59:b0:7d:47:9a:04:ae:ca:ea:71:10:2e:07:93:94:97:00:
0e:69:55:84:f4:7e:b7:54:54:eb:f1:97:b1:1d:be:61:9e:39:
c4:ec:1a:19:e7:c0:71:01:a2:ae:97:72:13:89:68:82:96:5c:
b4:c6:c9:84:f2:6f:2d:00:2d:0b:92:f9:7c:fc:4d:73:84:e1:
7f:99:5e:79:4d:7a:85:35:5c:51:06:de:46:11:ab:c9:65:eb:
4a:02:cc:ce:af:19:cf:0b:fb:20:aa:f3:1b:31:6c:63:73:a3:
59:e1:48:37:eb:7b:d6:b3:e2:71:d0:2b:c7:25:6d:ca:d3:44:
17:14:70:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:22:17 2025 by rpki-client