Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/uhFs2vlrNKQCBdu6aeMKfXR4eiE.roa
File: uhFs2vlrNKQCBdu6aeMKfXR4eiE.roa (raw, json)
Hash identifier: VA2NJKeeuZq21aoFYjgkaFNR4E09AjQuJf31sZF4VuE=
Subject key identifier: BA:11:6C:DA:F9:6B:34:A4:02:05:DB:BA:69:E3:0A:7D:74:78:7A:21
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 01937104F4214B81CC143198E222C18AFBD6
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/uhFs2vlrNKQCBdu6aeMKfXR4eiE.roa
Signing time: Thu 28 Nov 2024 04:26:10 +0000
ROA not before: Thu 28 Nov 2024 04:26:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 83.147.16.0/22 maxlen: 24
83.147.20.0/24 maxlen: 24
83.147.21.0/24 maxlen: 24
83.147.26.0/23 maxlen: 24
83.147.28.0/24 maxlen: 24
83.147.40.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:71:04:f4:21:4b:81:cc:14:31:98:e2:22:c1:8a:fb:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Nov 28 04:26:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ba116cdaf96b34a40205dbba69e30a7d74787a21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a4:6e:27:11:06:2d:55:ec:54:5b:8b:1b:f1:
b7:98:fc:fa:23:b7:14:60:af:d0:67:c9:d0:e1:d3:
cd:28:85:c7:3c:ed:7d:94:b4:6b:86:0c:8f:c2:70:
9c:ae:de:13:37:55:f3:32:01:90:78:80:4a:e2:ea:
76:10:31:3b:0f:41:d7:d2:50:e1:88:bb:87:0d:69:
67:19:65:b1:1f:2e:7f:30:6c:37:ea:dd:57:a9:e7:
53:20:10:fd:0b:9a:09:ff:9e:82:4c:21:ca:fe:1a:
04:d9:4a:30:a1:c7:95:fb:e9:43:30:df:fc:83:43:
4e:7e:ee:e9:b5:cd:99:04:69:6b:1f:44:8f:e1:e9:
a2:88:dc:68:08:44:f1:1c:8e:94:45:f8:fe:1c:8c:
f6:f4:25:27:1b:a3:32:b9:bd:6a:4c:99:4a:6c:36:
51:f2:f9:d0:89:c4:02:8e:64:f0:ee:70:0e:6e:49:
50:13:1b:64:f1:97:00:cf:f1:d3:35:b4:de:40:4e:
d7:10:e5:c6:90:cb:f7:30:a3:fe:5e:07:f2:59:17:
d2:f3:12:93:6c:93:0a:16:2c:50:4e:21:cf:c0:63:
d6:22:69:5f:8c:8e:6b:54:78:4a:69:0a:96:8a:31:
1b:fb:64:bb:06:82:6f:7a:9d:d0:b8:c4:89:a4:a7:
37:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:11:6C:DA:F9:6B:34:A4:02:05:DB:BA:69:E3:0A:7D:74:78:7A:21
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/uhFs2vlrNKQCBdu6aeMKfXR4eiE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.16.0-83.147.21.255
83.147.26.0-83.147.28.255
83.147.40.0/22
Signature Algorithm: sha256WithRSAEncryption
a7:ab:23:c3:d6:c0:08:dc:ea:91:3c:a5:79:a7:70:3b:5b:3b:
ba:7d:4b:1a:c9:85:23:c9:e7:f4:38:af:02:e2:7e:72:e3:b9:
7e:16:94:ec:02:73:65:fe:b1:f1:e6:56:06:2f:87:0f:dd:47:
5b:53:7c:ea:02:25:8c:43:f8:b9:e8:22:52:a5:bb:c4:f5:43:
ae:ef:ee:58:1e:96:86:d1:da:b9:40:02:24:92:50:82:f1:e0:
1d:a2:e8:f2:ca:8b:e3:fd:bf:42:a6:b9:b5:ba:3b:33:93:9c:
a8:4d:63:f9:7d:37:da:0d:8a:a3:40:93:16:fa:58:e1:4f:76:
c7:67:7b:b1:2b:11:60:bd:53:7d:82:a2:e5:65:7f:04:77:48:
6d:49:b9:e7:82:dd:a6:45:be:6f:d0:0c:f8:23:7c:a5:de:7f:
91:95:d5:c5:49:5b:e2:59:f5:25:d0:4b:79:27:f5:8e:cd:4e:
8b:89:56:24:e7:2d:7a:8c:7f:f7:58:3b:9c:7c:52:7e:32:25:
6c:e3:4c:03:5e:98:a3:98:92:16:d7:a6:24:dd:d7:6c:13:a8:
69:a7:b5:7e:d1:e9:a7:98:bf:ea:56:4e:ca:de:9a:5e:50:93:
83:5a:c9:a4:e8:12:e3:f1:82:13:a8:19:56:24:a5:1c:d5:76:
78:3b:d7:e8
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZNxBPQhS4HMFDGY4iLBivvWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxOTNmZmU5ZGIzNzYyNmIxM2Y4NWQ3Y2M0NTdhYWQ1YzFm
MzBjOWYwHhcNMjQxMTI4MDQyNjEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYTExNmNkYWY5NmIzNGE0MDIwNWRiYmE2OWUzMGE3ZDc0Nzg3YTIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuaRuJxEGLVXsVFuLG/G3mPz6I7cU
YK/QZ8nQ4dPNKIXHPO19lLRrhgyPwnCcrt4TN1XzMgGQeIBK4up2EDE7D0HX0lDh
iLuHDWlnGWWxHy5/MGw36t1XqedTIBD9C5oJ/56CTCHK/hoE2UowoceV++lDMN/8
g0NOfu7ptc2ZBGlrH0SP4emiiNxoCETxHI6URfj+HIz29CUnG6Myub1qTJlKbDZR
8vnQicQCjmTw7nAObklQExtk8ZcAz/HTNbTeQE7XEOXGkMv3MKP+XgfyWRfS8xKT
bJMKFixQTiHPwGPWImlfjI5rVHhKaQqWijEb+2S7BoJvep3QuMSJpKc3aQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFLoRbNr5azSkAgXbumnjCn10eHohMB8GA1UdIwQY
MBaAFIGT/+nbN2JrE/hdfMRXqtXB8wyfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1pQXzZkczNZbXNULUYxOHhGZXExY0h6REo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy83NmJjMWUtYjZmNC00MDhhLWJiODkt
MDhkMTI3MGMyZTcxLzEvdWhGczJ2bHJOS1FDQmR1NmFlTUtmWFI0ZWlFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy83NmJjMWUtYjZmNC00MDhhLWJiODktMDhkMTI3MGMyZTcx
LzEvZ1pQXzZkczNZbXNULUYxOHhGZXExY0h6REo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjAoBAIAATAiMAwDBARTkxAD
BAFTkxQwDAMEAVOTGgMEAFOTHAMEAlOTKDANBgkqhkiG9w0BAQsFAAOCAQEAp6sj
w9bACNzqkTyleadwO1s7un1LGsmFI8nn9DivAuJ+cuO5fhaU7AJzZf6x8eZWBi+H
D91HW1N86gIljEP4uegiUqW7xPVDru/uWB6WhtHauUACJJJQgvHgHaLo8sqL4/2/
Qqa5tbo7M5OcqE1j+X032g2Ko0CTFvpY4U92x2d7sSsRYL1TfYKi5WV/BHdIbUm5
54LdpkW+b9AM+CN8pd5/kZXVxUlb4ln1JdBLeSf1js1Oi4lWJOcteox/91g7nHxS
fjIlbONMA16Yo5iSFtemJN3XbBOoaae1ftHpp5i/6lZOyt6aXlCTg1rJpOgS4/GC
E6gZViSlHNV2eDvX6A==
-----END CERTIFICATE-----
Generated at Mon Apr 7 18:10:35 2025 by rpki-client