Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/41bbbf-c667-48a2-a51c-33a3fd924275/1/BNP7An49oq0lqLmujYv5GL88RPg.roa
File: BNP7An49oq0lqLmujYv5GL88RPg.roa (raw, json)
Hash identifier: 8DFecXxpyDcyQreDKE36TmKYSPQ0ulJ3o7GKlhsSeos=
Subject key identifier: 04:D3:FB:02:7E:3D:A2:AD:25:A8:B9:AE:8D:8B:F9:18:BF:3C:44:F8
Certificate issuer: /CN=365602f8a67da0e0b813018047b7847a723b39ff
Certificate serial: 01B7239F
Authority key identifier: 36:56:02:F8:A6:7D:A0:E0:B8:13:01:80:47:B7:84:7A:72:3B:39:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NlYC-KZ9oOC4EwGAR7eEenI7Of8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/41bbbf-c667-48a2-a51c-33a3fd924275/1/BNP7An49oq0lqLmujYv5GL88RPg.roa
Signing time: Sat 01 Jan 2022 13:59:54 +0000
ROA not before: Sat 01 Jan 2022 13:59:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59631
IP address blocks: 185.83.105.0/24 maxlen: 24
185.83.104.0/24 maxlen: 24
185.83.104.0/22 maxlen: 22
185.83.104.0/23 maxlen: 23
185.83.106.0/24 maxlen: 24
185.83.106.0/23 maxlen: 23
185.83.107.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28779423 (0x1b7239f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=365602f8a67da0e0b813018047b7847a723b39ff
Validity
Not Before: Jan 1 13:59:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=04d3fb027e3da2ad25a8b9ae8d8bf918bf3c44f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:23:b6:a0:3f:b9:00:4d:bd:d5:cb:ee:50:65:
57:bd:64:25:dc:93:cf:f5:08:04:84:83:96:16:c4:
15:f1:6a:83:1d:40:81:6e:4c:85:c0:55:c4:20:14:
d6:60:cb:f0:14:e1:e8:a6:26:04:e0:e3:c9:49:09:
96:8e:2d:3f:40:5c:ca:91:6c:52:f5:3f:d5:3c:d4:
5d:cd:41:d6:dd:74:7b:da:d2:bb:f9:2d:af:b7:6b:
2e:de:3a:b7:63:0e:79:22:81:36:f3:35:86:1b:91:
2a:48:ab:f2:ab:b9:40:81:25:65:dc:b9:4b:5d:20:
93:9a:5b:0c:5b:48:ce:dd:ce:2b:dd:41:28:05:3b:
7b:95:c4:e4:42:e2:63:05:9a:9f:43:89:9a:c7:d8:
ac:7c:66:89:13:52:95:90:99:db:da:ab:0e:d5:5a:
d3:fb:cb:db:12:65:87:28:6c:ea:66:d9:b9:39:42:
73:4b:86:92:eb:56:f2:0a:45:04:66:06:d1:7f:d1:
e4:48:e2:e5:f6:41:52:53:fb:ac:31:3d:e3:82:c3:
2e:16:58:b0:a0:8a:73:63:31:a7:5a:47:8c:5d:7b:
2b:5d:ba:fa:79:a7:f1:bb:c7:8d:4a:2c:99:32:f7:
cf:17:6b:69:02:74:8e:37:cd:d6:5c:80:fb:4b:17:
91:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:D3:FB:02:7E:3D:A2:AD:25:A8:B9:AE:8D:8B:F9:18:BF:3C:44:F8
X509v3 Authority Key Identifier:
keyid:36:56:02:F8:A6:7D:A0:E0:B8:13:01:80:47:B7:84:7A:72:3B:39:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NlYC-KZ9oOC4EwGAR7eEenI7Of8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/41bbbf-c667-48a2-a51c-33a3fd924275/1/BNP7An49oq0lqLmujYv5GL88RPg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/41bbbf-c667-48a2-a51c-33a3fd924275/1/NlYC-KZ9oOC4EwGAR7eEenI7Of8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.83.104.0/22
Signature Algorithm: sha256WithRSAEncryption
06:fd:72:8b:3b:57:7f:34:93:88:38:8e:aa:bc:d1:81:0f:54:
25:42:e7:a3:77:89:e1:e9:fe:e9:6b:f6:cf:b2:45:20:2c:b8:
77:0e:4a:c4:96:3c:1a:b3:73:3c:a0:11:15:35:0a:de:0b:72:
0c:3c:27:90:d4:eb:d1:2f:4d:40:25:d7:d2:f1:48:26:f8:b3:
60:d8:3d:2c:c9:c1:33:d8:88:ad:7e:35:cf:68:27:e8:7b:00:
2f:02:86:71:53:28:b9:af:e6:10:65:3b:c1:50:5a:78:ca:b0:
5d:cb:ec:96:62:49:9d:26:59:7e:d5:17:1c:fe:0f:29:69:0e:
ce:e3:03:2f:b6:c8:ba:3e:0f:36:98:36:fd:0c:e6:30:42:71:
a6:5d:e2:3f:49:99:ff:dc:b0:80:dc:0b:6a:4e:8c:e2:ec:5c:
f9:d6:21:9c:15:04:af:10:d1:d6:c7:ce:28:2b:5c:dc:c2:8e:
ef:34:99:b1:59:47:25:1a:e3:7b:06:0b:79:81:0e:34:27:87:
78:50:f2:22:56:ca:7f:c5:a0:6a:49:33:73:41:60:05:e4:87:
ec:14:20:e2:42:9b:51:cc:9c:27:be:6d:26:fb:b3:7c:24:19:
7b:47:58:a6:0a:80:7a:ae:97:5a:07:dd:27:50:a0:19:98:c6:
47:39:7d:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:21:03 2025 by rpki-client