Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/ma4SJGsTQWAvQdjgoA2hSHd-I7Y.roa
File: ma4SJGsTQWAvQdjgoA2hSHd-I7Y.roa (raw, json)
Hash identifier: 174AJxqlu54O5t5smP1x2wPJYClF89M0fwtgSNHNgLI=
Subject key identifier: 99:AE:12:24:6B:13:41:60:2F:41:D8:E0:A0:0D:A1:48:77:7E:23:B6
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 019300AE469863265DE701C25802C4A1DF10
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/ma4SJGsTQWAvQdjgoA2hSHd-I7Y.roa
Signing time: Wed 06 Nov 2024 08:54:01 +0000
ROA not before: Wed 06 Nov 2024 08:54:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 174
IP address blocks: 83.147.40.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:00:ae:46:98:63:26:5d:e7:01:c2:58:02:c4:a1:df:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Nov 6 08:54:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=99ae12246b1341602f41d8e0a00da148777e23b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:9a:ef:ea:9a:32:2e:6c:02:03:56:2e:27:4c:
ed:fd:02:e9:22:f5:e9:a2:73:07:bd:c9:09:73:46:
52:88:a5:71:95:b5:d7:03:ce:92:15:23:23:e8:f4:
79:dd:54:78:35:8b:19:1f:6b:a2:91:4a:1a:a6:df:
7e:72:92:2c:39:d2:82:6d:4c:3d:75:28:df:75:c7:
c7:f7:33:46:53:3f:1c:cf:f2:cf:61:28:3f:34:43:
2d:79:db:9b:e8:1f:4d:96:83:50:61:84:fa:35:fe:
00:81:b9:90:be:41:39:5f:05:a7:b9:6a:d5:d7:e0:
a7:8c:df:20:a6:cd:0f:87:02:b1:f9:20:cd:03:2d:
29:ba:e7:bd:3a:4f:3d:a9:3e:62:03:aa:43:7d:0b:
c8:7d:3f:6d:95:98:cd:1e:15:0e:1d:3d:61:cf:71:
6c:09:44:9c:60:5e:31:fb:8d:1a:79:6d:08:af:36:
05:8a:f2:52:c2:8e:c5:38:82:12:1e:48:48:ec:66:
d1:aa:4b:3d:03:36:4a:06:2c:d0:2b:83:e5:29:e6:
e6:42:fa:a6:82:32:ff:d9:85:24:3e:9b:4f:0a:fd:
4b:fb:52:9e:26:19:17:b7:85:95:ef:10:6b:0e:58:
b7:68:23:50:da:d3:1d:a2:52:1e:dd:5a:3b:d7:6a:
23:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:AE:12:24:6B:13:41:60:2F:41:D8:E0:A0:0D:A1:48:77:7E:23:B6
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/ma4SJGsTQWAvQdjgoA2hSHd-I7Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.40.0/22
Signature Algorithm: sha256WithRSAEncryption
13:17:19:55:41:b2:b6:4d:04:f5:61:fb:4d:d8:ba:dd:11:c2:
46:1d:40:8a:c5:62:62:03:bf:56:c4:46:57:5c:6f:dc:03:41:
1e:17:54:30:27:60:40:9f:b1:85:93:89:fd:4e:75:d8:24:0e:
e9:fc:7e:c4:e5:80:32:95:da:f2:3e:94:e5:2d:57:ba:38:8d:
4b:bf:4b:12:e6:78:e9:f8:2a:df:f7:55:2c:cb:b7:c9:86:45:
92:3a:9c:cc:b8:17:af:82:ba:b3:d9:07:0c:a2:52:54:6e:58:
4a:31:b7:09:c0:34:d5:6c:c6:a2:4c:86:d0:42:67:e9:ad:dc:
7e:1e:29:04:64:83:7b:dd:9e:55:1a:bf:65:81:fe:87:97:1a:
bd:8e:84:52:50:76:53:0c:8c:87:49:01:ab:f6:c9:f9:cc:51:
ca:e4:d6:f7:7d:52:c0:69:69:ab:0f:0b:20:cb:46:91:31:11:
da:e7:29:d4:83:6d:74:47:86:18:76:60:77:20:88:cf:39:79:
a7:7c:c8:9c:75:82:3a:1d:8c:ab:15:2d:22:79:fa:21:d0:65:
72:12:5f:7f:f9:cb:8b:61:4c:91:a7:88:e7:e5:d2:d3:ef:ed:
6f:fe:e2:f7:f4:8d:45:08:04:9b:f0:2d:7e:b4:7a:e5:25:8b:
22:87:61:45
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZMArkaYYyZd5wHCWALEod8QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxOTNmZmU5ZGIzNzYyNmIxM2Y4NWQ3Y2M0NTdhYWQ1YzFm
MzBjOWYwHhcNMjQxMTA2MDg1NDAxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5OWFlMTIyNDZiMTM0MTYwMmY0MWQ4ZTBhMDBkYTE0ODc3N2UyM2I2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJrv6poyLmwCA1YuJ0zt/QLpIvXp
onMHvckJc0ZSiKVxlbXXA86SFSMj6PR53VR4NYsZH2uikUoapt9+cpIsOdKCbUw9
dSjfdcfH9zNGUz8cz/LPYSg/NEMtedub6B9NloNQYYT6Nf4AgbmQvkE5XwWnuWrV
1+CnjN8gps0PhwKx+SDNAy0puue9Ok89qT5iA6pDfQvIfT9tlZjNHhUOHT1hz3Fs
CUScYF4x+40aeW0IrzYFivJSwo7FOIISHkhI7GbRqks9AzZKBizQK4PlKebmQvqm
gjL/2YUkPptPCv1L+1KeJhkXt4WV7xBrDli3aCNQ2tMdolIe3Vo712ojKwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJmuEiRrE0FgL0HY4KANoUh3fiO2MB8GA1UdIwQY
MBaAFIGT/+nbN2JrE/hdfMRXqtXB8wyfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1pQXzZkczNZbXNULUYxOHhGZXExY0h6REo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy83NmJjMWUtYjZmNC00MDhhLWJiODkt
MDhkMTI3MGMyZTcxLzEvbWE0U0pHc1RRV0F2UWRqZ29BMmhTSGQtSTdZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy83NmJjMWUtYjZmNC00MDhhLWJiODktMDhkMTI3MGMyZTcx
LzEvZ1pQXzZkczNZbXNULUYxOHhGZXExY0h6REo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCU5MoMA0G
CSqGSIb3DQEBCwUAA4IBAQATFxlVQbK2TQT1YftN2LrdEcJGHUCKxWJiA79WxEZX
XG/cA0EeF1QwJ2BAn7GFk4n9TnXYJA7p/H7E5YAyldryPpTlLVe6OI1Lv0sS5njp
+Crf91Usy7fJhkWSOpzMuBevgrqz2QcMolJUblhKMbcJwDTVbMaiTIbQQmfprdx+
HikEZIN73Z5VGr9lgf6Hlxq9joRSUHZTDIyHSQGr9sn5zFHK5Nb3fVLAaWmrDwsg
y0aRMRHa5ynUg210R4YYdmB3IIjPOXmnfMicdYI6HYyrFS0iefoh0GVyEl9/+cuL
YUyRp4jn5dLT7+1v/uL39I1FCASb8C1+tHrlJYsih2FF
-----END CERTIFICATE-----
Generated at Mon Apr 7 18:15:30 2025 by rpki-client