Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/BfeZy91ACk3Ln06Zy7umJGiMTGc.roa
File: BfeZy91ACk3Ln06Zy7umJGiMTGc.roa (raw, json)
Hash identifier: x8NOwRkMV0ej2rciZRNhGCFfZrKUPA7tz5tz6biA4ho=
Subject key identifier: 05:F7:99:CB:DD:40:0A:4D:CB:9F:4E:99:CB:BB:A6:24:68:8C:4C:67
Certificate issuer: /CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Certificate serial: 043CB1C0
Authority key identifier: 21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/BfeZy91ACk3Ln06Zy7umJGiMTGc.roa
Signing time: Sun 01 May 2022 08:11:27 +0000
ROA not before: Sun 01 May 2022 08:11:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 82.118.26.0/23 maxlen: 24
82.118.28.0/22 maxlen: 24
82.118.25.0/24 maxlen: 24
213.225.236.0/22 maxlen: 24
213.225.238.0/24 maxlen: 24
213.225.237.0/24 maxlen: 24
92.114.4.0/24 maxlen: 24
212.2.236.0/22 maxlen: 24
45.80.4.0/22 maxlen: 24
45.132.96.0/22 maxlen: 24
45.146.104.0/24 maxlen: 24
45.146.106.0/24 maxlen: 24
141.98.74.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71086528 (0x43cb1c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Validity
Not Before: May 1 08:11:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=05f799cbdd400a4dcb9f4e99cbbba624688c4c67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:95:35:d1:f6:df:25:87:ad:73:1b:87:b4:d3:
74:f4:b8:75:12:e4:d4:b6:0c:48:99:f6:9d:a6:6b:
1e:07:08:3d:be:81:f9:4c:43:9c:77:fe:ce:71:ff:
25:79:89:88:34:ee:c7:32:2b:14:b4:ba:8f:9e:25:
6f:c5:fb:62:c5:83:8f:dd:b8:cb:44:d4:10:59:30:
8e:30:66:ab:71:06:ba:74:a2:4f:8b:d6:4d:e7:da:
1f:ad:da:a7:b2:28:d0:5d:84:5b:ca:42:ec:d0:19:
66:f8:eb:c1:10:8e:42:2a:f5:d2:50:f0:da:ab:56:
1a:fb:35:ad:26:18:32:82:72:47:93:c9:9f:16:e6:
98:4d:32:ef:9e:dd:01:6d:9c:29:a9:9c:e0:90:e7:
14:e7:a9:9c:9a:5c:f4:a3:77:19:96:70:9c:d8:35:
4c:8f:4b:ce:12:48:fa:eb:a3:73:a9:22:81:b3:b9:
f4:37:bb:99:a2:70:be:60:9e:79:da:92:3d:42:5d:
ab:c4:36:9b:a8:21:5c:ee:d5:b2:97:7d:67:72:db:
a1:3a:59:3f:a1:b2:72:8d:3e:b6:96:b6:ba:b2:cb:
3e:b8:61:c6:60:6b:9c:22:8f:b2:55:6f:2d:68:9b:
10:d3:c1:74:ef:cc:84:81:4f:d4:de:c7:7e:13:72:
8f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:F7:99:CB:DD:40:0A:4D:CB:9F:4E:99:CB:BB:A6:24:68:8C:4C:67
X509v3 Authority Key Identifier:
keyid:21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/BfeZy91ACk3Ln06Zy7umJGiMTGc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/IYFM8so-F5k0nM1Mfmp21j-DSj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.4.0/22
45.132.96.0/22
45.146.104.0/24
45.146.106.0/24
82.118.25.0-82.118.31.255
92.114.4.0/24
141.98.74.0/23
212.2.236.0/22
213.225.236.0/22
Signature Algorithm: sha256WithRSAEncryption
5b:48:d7:7d:df:3b:0c:3d:80:96:c2:ae:74:8d:46:5c:80:8b:
b6:fb:21:6d:99:a9:b4:f0:0b:90:27:7c:b6:e1:a8:e4:36:bf:
5e:75:78:82:cc:e7:1a:5c:3e:10:f6:29:e7:fe:f8:a9:ee:c0:
70:ad:96:c1:ac:98:a2:3e:34:0c:cf:29:fe:f2:db:da:bf:2b:
ca:e5:69:6b:c7:e4:ea:d3:26:49:db:fa:0e:ad:5b:e4:25:9b:
7e:4f:b5:f5:c8:29:4c:b3:a8:45:4c:e0:40:a3:58:b6:97:c4:
d9:a2:0f:6c:b2:e2:6d:7b:67:33:f0:f1:d0:4a:72:94:40:48:
7b:b0:c9:a8:10:03:7d:36:7c:2a:23:8d:b4:79:e4:6b:ae:ee:
49:8f:66:d1:f3:ff:a2:1c:90:c8:f6:39:5b:d0:87:4d:92:fd:
c4:c1:1c:d8:f4:9f:03:31:0b:85:ef:5a:08:f1:10:4c:3d:c0:
3d:07:eb:6f:61:82:22:c3:4a:f5:c4:cb:98:03:b2:9a:d6:2e:
a7:ea:56:98:51:9b:dd:c7:c4:83:e4:27:24:00:77:fe:00:e9:
7a:10:4a:f8:8f:4c:c3:6a:42:9c:dd:81:39:a3:93:a3:f5:54:
2b:05:4b:e5:c3:6b:86:6c:a6:5b:78:5e:de:59:e4:18:a5:ca:
6e:95:86:c4
-----BEGIN CERTIFICATE-----
MIIFJzCCBA+gAwIBAgIEBDyxwDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
MTgxNGNmMmNhM2UxNzk5MzQ5Y2NkNGM3ZTZhNzZkNjNmODM0YTNkMB4XDTIyMDUw
MTA4MTEyN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMDVmNzk5Y2JkZDQw
MGE0ZGNiOWY0ZTk5Y2JiYmE2MjQ2ODhjNGM2NzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANWVNdH23yWHrXMbh7TTdPS4dRLk1LYMSJn2naZrHgcIPb6B
+UxDnHf+znH/JXmJiDTuxzIrFLS6j54lb8X7YsWDj924y0TUEFkwjjBmq3EGunSi
T4vWTefaH63ap7Io0F2EW8pC7NAZZvjrwRCOQir10lDw2qtWGvs1rSYYMoJyR5PJ
nxbmmE0y757dAW2cKamc4JDnFOepnJpc9KN3GZZwnNg1TI9LzhJI+uujc6kigbO5
9De7maJwvmCeedqSPUJdq8Q2m6ghXO7Vspd9Z3LboTpZP6Gyco0+tpa2urLLPrhh
xmBrnCKPslVvLWibENPBdO/MhIFP1N7HfhNyj/kCAwEAAaOCAkEwggI9MB0GA1Ud
DgQWBBQF95nL3UAKTcufTpnLu6YkaIxMZzAfBgNVHSMEGDAWgBQhgUzyyj4XmTSc
zUx+anbWP4NKPTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0lZRk04c28tRjVrMG5NMU1mbXAyMWotRFNqMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMTgvMDFmODUzLWQ0NDUtNGFjZS1hOGQ4LTIyNzAxYjRiYjQwNy8x
L0JmZVp5OTFBQ2szTG4wNlp5N3VtSkdpTVRHYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTgv
MDFmODUzLWQ0NDUtNGFjZS1hOGQ4LTIyNzAxYjRiYjQwNy8xL0lZRk04c28tRjVr
MG5NMU1mbXAyMWotRFNqMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBX
BggrBgEFBQcBBwEB/wRIMEYwRAQCAAEwPgMEAi1QBAMEAi2EYAMEAC2SaAMEAC2S
ajAMAwQAUnYZAwQFUnYAAwQAXHIEAwQBjWJKAwQC1ALsAwQC1eHsMA0GCSqGSIb3
DQEBCwUAA4IBAQBbSNd93zsMPYCWwq50jUZcgIu2+yFtmam08AuQJ3y24ajkNr9e
dXiCzOcaXD4Q9inn/vip7sBwrZbBrJiiPjQMzyn+8tvavyvK5Wlrx+Tq0yZJ2/oO
rVvkJZt+T7X1yClMs6hFTOBAo1i2l8TZog9ssuJte2cz8PHQSnKUQEh7sMmoEAN9
NnwqI420eeRrru5Jj2bR8/+iHJDI9jlb0IdNkv3EwRzY9J8DMQuF71oI8RBMPcA9
B+tvYYIiw0r1xMuYA7Ka1i6n6laYUZvdx8SD5CckAHf+AOl6EEr4j0zDakKc3YE5
o5Oj9VQrBUvlw2uGbKZbeF7eWeQYpcpulYbE
-----END CERTIFICATE-----
Generated at Sun Apr 13 03:02:35 2025 by rpki-client