Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/41bbbf-c667-48a2-a51c-33a3fd924275/1/u59nUYNzkLTzVVzaekCOKdb2tF8.roa
File: u59nUYNzkLTzVVzaekCOKdb2tF8.roa (raw, json)
Hash identifier: s0XwADLWUitPS4Uq0Y75ykyMvdFu6StePme0ngM9HUQ=
Subject key identifier: BB:9F:67:51:83:73:90:B4:F3:55:5C:DA:7A:40:8E:29:D6:F6:B4:5F
Certificate issuer: /CN=365602f8a67da0e0b813018047b7847a723b39ff
Certificate serial: 0220406F
Authority key identifier: 36:56:02:F8:A6:7D:A0:E0:B8:13:01:80:47:B7:84:7A:72:3B:39:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NlYC-KZ9oOC4EwGAR7eEenI7Of8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/41bbbf-c667-48a2-a51c-33a3fd924275/1/u59nUYNzkLTzVVzaekCOKdb2tF8.roa
Signing time: Fri 18 Feb 2022 10:07:16 +0000
ROA not before: Fri 18 Feb 2022 10:07:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200845
IP address blocks: 185.83.104.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35668079 (0x220406f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=365602f8a67da0e0b813018047b7847a723b39ff
Validity
Not Before: Feb 18 10:07:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bb9f6751837390b4f3555cda7a408e29d6f6b45f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:32:14:b5:02:0a:59:c2:15:7f:78:8d:92:7e:
d9:ed:1f:ba:4e:d6:1c:eb:3c:a1:a4:45:e4:e5:35:
f2:47:d5:5a:4e:0b:b9:9f:a9:05:8a:dd:8a:ff:83:
dc:81:fe:b9:bb:ae:ff:cb:98:8d:9f:f3:99:b0:f6:
e7:a2:7c:e7:da:a8:17:cb:fb:bd:5e:dc:dc:39:3c:
0a:1a:83:8a:18:c7:ff:ae:f7:21:1e:0b:f0:d6:7e:
5d:a9:0f:07:a6:0f:d7:ce:1f:7c:f4:cd:09:c4:b1:
cf:6e:85:bf:50:ed:06:f2:09:07:aa:3b:82:c4:d6:
82:f6:4b:36:1f:c3:cc:e5:88:46:0d:4f:15:aa:5a:
2b:4f:f4:43:31:77:ad:be:a9:d1:8b:79:ac:b5:49:
d8:55:ff:70:a5:ac:57:46:66:2b:13:c0:c9:11:4f:
77:ab:66:e8:ff:1f:25:78:08:9d:de:7e:09:d3:04:
ad:18:62:06:1f:9f:3d:a4:b4:ff:c0:b7:c6:1c:6b:
9a:1c:36:78:8a:aa:31:0a:c8:d5:6d:c4:60:5e:bf:
58:58:0f:6d:08:db:17:8f:5b:4f:10:c2:c6:99:8c:
c3:33:01:35:48:07:50:f1:83:e0:47:d7:4a:5e:e7:
e3:4a:c8:f6:95:b0:7d:54:c1:e2:67:ef:57:ce:9c:
a6:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:9F:67:51:83:73:90:B4:F3:55:5C:DA:7A:40:8E:29:D6:F6:B4:5F
X509v3 Authority Key Identifier:
keyid:36:56:02:F8:A6:7D:A0:E0:B8:13:01:80:47:B7:84:7A:72:3B:39:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NlYC-KZ9oOC4EwGAR7eEenI7Of8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/41bbbf-c667-48a2-a51c-33a3fd924275/1/u59nUYNzkLTzVVzaekCOKdb2tF8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/41bbbf-c667-48a2-a51c-33a3fd924275/1/NlYC-KZ9oOC4EwGAR7eEenI7Of8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.83.104.0/22
Signature Algorithm: sha256WithRSAEncryption
23:14:c3:04:ab:94:c6:4d:b1:0a:60:a5:4a:6d:cf:02:0d:af:
d6:04:4a:ad:df:c0:80:3a:34:7f:6c:de:6e:8c:48:ba:30:e9:
55:64:f5:08:f5:83:6c:c4:16:5c:d9:00:4f:c1:25:5c:98:34:
8f:73:ab:6a:d9:6a:bd:f3:3d:3f:fe:08:0f:8a:12:00:e3:0b:
2c:a9:8c:c3:4d:5a:0a:62:a2:2f:b0:64:9c:0e:a6:2c:ba:36:
65:1a:91:30:96:09:88:20:ba:88:23:7a:9f:9d:9d:02:31:a2:
55:22:e4:1a:e9:69:fb:2f:48:f1:46:6b:e2:8d:66:0f:94:82:
41:03:e4:62:02:65:1c:76:43:35:bf:37:7e:6e:77:18:23:e8:
bb:6c:22:6b:d4:37:20:cf:29:cb:a5:87:a5:53:7c:b7:39:20:
61:d3:4b:5c:ab:19:ec:ca:04:cf:d5:e3:96:e4:70:cd:a8:c3:
f4:15:81:3e:8d:57:6b:3b:d6:c0:72:47:22:8c:f0:fb:07:a6:
80:c2:6c:b4:ae:90:67:42:04:4c:b0:3b:2b:f3:3d:73:0c:c2:
8f:ed:0f:f1:25:c0:42:72:9f:81:0c:03:d9:59:d1:05:2f:d4:
c7:0c:f8:83:ea:a6:30:ea:96:ef:7b:fe:1c:01:a7:4b:c1:8e:
51:d3:dd:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:19:58 2025 by rpki-client