Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/c7a255-16a5-4d4c-a737-692f6a89839a/1/_gew8lP5Ugall_zbuqZAxsHSS3U.roa
File: _gew8lP5Ugall_zbuqZAxsHSS3U.roa (raw, json)
Hash identifier: q53N15QX8FvLR/+6ehkKO8VfVr/1/VASOW+c94PFy9c=
Subject key identifier: FE:07:B0:F2:53:F9:52:06:A5:97:FC:DB:BA:A6:40:C6:C1:D2:4B:75
Certificate issuer: /CN=71f6cf046dc0060cc53f39a94f62557ef00a8993
Certificate serial: 0183216C38908941BB9A8B8E05CF32EA92BF
Authority key identifier: 71:F6:CF:04:6D:C0:06:0C:C5:3F:39:A9:4F:62:55:7E:F0:0A:89:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cfbPBG3ABgzFPzmpT2JVfvAKiZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/c7a255-16a5-4d4c-a737-692f6a89839a/1/_gew8lP5Ugall_zbuqZAxsHSS3U.roa
Signing time: Fri 09 Sep 2022 08:44:43 +0000
ROA not before: Fri 09 Sep 2022 08:44:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50225
IP address blocks: 147.78.103.0/24 maxlen: 24
147.78.100.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:21:6c:38:90:89:41:bb:9a:8b:8e:05:cf:32:ea:92:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71f6cf046dc0060cc53f39a94f62557ef00a8993
Validity
Not Before: Sep 9 08:44:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fe07b0f253f95206a597fcdbbaa640c6c1d24b75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:7c:2a:7f:63:fd:fb:0c:3f:fe:33:99:f4:29:
34:2d:13:30:74:87:06:c5:db:f3:7f:a4:86:9e:84:
04:70:db:99:fc:5d:9f:17:1b:db:df:c9:16:5d:50:
96:f4:6b:8d:9d:04:9a:95:bd:af:3f:42:f4:83:f0:
c9:38:5f:a7:b8:2d:6e:b0:55:fc:7d:bf:13:a0:da:
d0:ac:d3:d6:13:f5:96:53:ba:2e:c1:b9:b0:70:54:
c3:45:fd:69:ac:cd:d6:79:2a:3d:c5:37:57:01:47:
11:15:3a:6c:94:f9:3a:12:94:11:b8:a4:d5:69:40:
74:f2:6a:7b:61:fc:d9:7a:1e:07:2e:ee:5f:6e:c8:
aa:f5:71:ea:4c:8b:83:c2:53:ed:9d:26:4f:90:28:
ac:ac:bb:34:47:23:3a:eb:af:2e:bf:c9:de:3d:01:
ab:4e:4a:1f:13:a5:82:69:9b:e1:18:2e:f0:15:b4:
ea:f9:1c:4b:9b:6a:38:cc:6b:ca:7b:99:5a:db:68:
90:34:cb:45:45:0b:8a:0d:c6:8f:83:2b:22:0e:7e:
b8:37:f0:cf:fb:d1:bf:cf:0d:68:f2:b5:bc:be:41:
89:90:b3:ef:0b:79:9d:85:2d:fb:b9:b7:61:94:d5:
15:1b:10:75:ae:e1:67:3d:a2:ec:c1:5b:62:9c:4a:
41:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:07:B0:F2:53:F9:52:06:A5:97:FC:DB:BA:A6:40:C6:C1:D2:4B:75
X509v3 Authority Key Identifier:
keyid:71:F6:CF:04:6D:C0:06:0C:C5:3F:39:A9:4F:62:55:7E:F0:0A:89:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cfbPBG3ABgzFPzmpT2JVfvAKiZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c7a255-16a5-4d4c-a737-692f6a89839a/1/_gew8lP5Ugall_zbuqZAxsHSS3U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c7a255-16a5-4d4c-a737-692f6a89839a/1/cfbPBG3ABgzFPzmpT2JVfvAKiZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.78.100.0/24
147.78.103.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:a8:7a:2d:82:bd:78:c8:ab:c7:5d:ef:6e:45:a4:ae:2c:6e:
29:53:9c:93:ee:22:63:67:94:e1:45:93:0b:bf:bb:ef:8a:b3:
cb:e4:34:32:3c:ab:83:09:0b:f5:1b:1c:8d:59:05:39:70:82:
66:81:28:27:fb:f5:71:35:f6:7e:e2:da:4d:73:33:55:12:5f:
e5:5c:37:c7:79:11:bc:a1:7a:7e:3b:5f:00:bf:e0:87:dd:d9:
a6:3e:48:b3:09:77:bb:18:ab:62:c1:da:1f:25:5b:b5:f2:08:
d7:7c:44:ed:ab:b1:6c:63:75:f7:48:e3:49:ba:09:07:38:d8:
a9:63:d3:f6:1d:6b:48:db:4b:02:45:e2:19:05:7b:92:8a:7b:
2f:dd:2e:5f:0e:ce:8e:2a:66:ae:d0:0b:06:11:2d:62:08:e2:
49:b3:15:bc:9e:4c:e7:ba:51:fb:73:74:c3:5d:b4:9f:18:13:
11:e3:30:c3:c6:a1:3e:64:d6:be:de:42:df:98:24:6d:bf:0e:
df:8b:cd:05:7f:df:f0:10:be:40:12:47:77:b7:1c:fd:5c:5f:
66:88:c2:3b:76:8a:d8:7d:a5:64:e0:ff:83:49:3e:a1:94:55:
31:80:e3:c2:93:cb:a1:ab:24:56:d5:f9:40:cb:64:dd:3d:e4:
ed:f4:da:3b
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYMhbDiQiUG7mouOBc8y6pK/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxZjZjZjA0NmRjMDA2MGNjNTNmMzlhOTRmNjI1NTdlZjAw
YTg5OTMwHhcNMjIwOTA5MDg0NDQzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZTA3YjBmMjUzZjk1MjA2YTU5N2ZjZGJiYWE2NDBjNmMxZDI0Yjc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgnwqf2P9+ww//jOZ9Ck0LRMwdIcG
xdvzf6SGnoQEcNuZ/F2fFxvb38kWXVCW9GuNnQSalb2vP0L0g/DJOF+nuC1usFX8
fb8ToNrQrNPWE/WWU7ouwbmwcFTDRf1prM3WeSo9xTdXAUcRFTpslPk6EpQRuKTV
aUB08mp7YfzZeh4HLu5fbsiq9XHqTIuDwlPtnSZPkCisrLs0RyM6668uv8nePQGr
TkofE6WCaZvhGC7wFbTq+RxLm2o4zGvKe5la22iQNMtFRQuKDcaPgysiDn64N/DP
+9G/zw1o8rW8vkGJkLPvC3mdhS37ubdhlNUVGxB1ruFnPaLswVtinEpBdwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFP4HsPJT+VIGpZf827qmQMbB0kt1MB8GA1UdIwQY
MBaAFHH2zwRtwAYMxT85qU9iVX7wComTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2ZiUEJHM0FCZ3pGUHptcFQySlZmdkFLaVpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi9jN2EyNTUtMTZhNS00ZDRjLWE3Mzct
NjkyZjZhODk4MzlhLzEvX2dldzhsUDVVZ2FsbF96YnVxWkF4c0hTUzNVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi9jN2EyNTUtMTZhNS00ZDRjLWE3MzctNjkyZjZhODk4Mzlh
LzEvY2ZiUEJHM0FCZ3pGUHptcFQySlZmdkFLaVpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAk05kAwQA
k05nMA0GCSqGSIb3DQEBCwUAA4IBAQAMqHotgr14yKvHXe9uRaSuLG4pU5yT7iJj
Z5ThRZMLv7vvirPL5DQyPKuDCQv1GxyNWQU5cIJmgSgn+/VxNfZ+4tpNczNVEl/l
XDfHeRG8oXp+O18Av+CH3dmmPkizCXe7GKtiwdofJVu18gjXfETtq7FsY3X3SONJ
ugkHONipY9P2HWtI20sCReIZBXuSinsv3S5fDs6OKmau0AsGES1iCOJJsxW8nkzn
ulH7c3TDXbSfGBMR4zDDxqE+ZNa+3kLfmCRtvw7fi80Ff9/wEL5AEkd3txz9XF9m
iMI7dorYfaVk4P+DST6hlFUxgOPCk8uhqyRW1flAy2TdPeTt9No7
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:52 2024 by rpki-client on console-ams.rpki-client.org