Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/41bbbf-c667-48a2-a51c-33a3fd924275/1/UuTc9oFO9Inscpv4zMtXU_8LHdo.roa
File: UuTc9oFO9Inscpv4zMtXU_8LHdo.roa (raw, json)
Hash identifier: nDmvKQRggmJo7hJuCe8SHFW53xQdD0mOjEe4/LjZYN4=
Subject key identifier: 52:E4:DC:F6:81:4E:F4:89:EC:72:9B:F8:CC:CB:57:53:FF:0B:1D:DA
Certificate issuer: /CN=365602f8a67da0e0b813018047b7847a723b39ff
Certificate serial: 023FAF70
Authority key identifier: 36:56:02:F8:A6:7D:A0:E0:B8:13:01:80:47:B7:84:7A:72:3B:39:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NlYC-KZ9oOC4EwGAR7eEenI7Of8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/41bbbf-c667-48a2-a51c-33a3fd924275/1/UuTc9oFO9Inscpv4zMtXU_8LHdo.roa
Signing time: Thu 03 Mar 2022 19:41:21 +0000
ROA not before: Thu 03 Mar 2022 19:41:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200845
IP address blocks: 185.83.105.0/24 maxlen: 24
185.83.104.0/22 maxlen: 22
185.83.104.0/24 maxlen: 24
185.83.107.0/24 maxlen: 24
185.83.106.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37728112 (0x23faf70)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=365602f8a67da0e0b813018047b7847a723b39ff
Validity
Not Before: Mar 3 19:41:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=52e4dcf6814ef489ec729bf8cccb5753ff0b1dda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:44:f1:b9:48:5f:66:05:2b:47:93:1b:43:65:
53:03:83:98:3c:28:06:e2:b2:98:0f:d1:6a:0c:59:
85:77:03:f9:9c:2c:ab:d4:51:a7:85:e3:b0:65:77:
59:13:29:1c:cb:c0:82:8c:f0:40:2a:2d:7a:22:b9:
7d:a1:d2:6e:92:85:2c:d6:42:ff:d7:2a:d4:5f:63:
9f:95:01:de:db:f0:01:06:5d:aa:3b:ee:44:5c:bb:
49:70:4d:05:e4:12:81:cd:f4:7c:1d:59:62:af:5d:
2b:ab:35:da:0e:18:dc:49:12:85:1c:26:51:d8:46:
72:33:76:ad:bc:97:5a:b1:03:ff:b2:aa:f3:41:9a:
b0:4a:6b:c4:04:4b:6a:de:24:df:5f:26:29:b5:47:
5d:14:25:2e:fe:2b:2b:6f:cc:4c:c5:23:91:85:32:
1b:e3:cd:ff:a3:3e:df:25:77:49:2f:ec:1d:aa:bb:
69:be:cb:be:0c:99:0f:1c:c2:f8:5e:4e:a4:a0:09:
c3:be:f3:7e:46:b3:22:fb:d1:6c:65:6d:20:7d:9c:
1a:08:9c:04:67:85:e1:f1:b5:33:27:7c:d8:b5:28:
7e:f3:62:05:47:c1:17:0b:cb:19:88:7b:77:bb:9c:
5e:af:ea:bc:15:97:a7:7e:22:31:e0:37:f2:a7:ac:
da:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:E4:DC:F6:81:4E:F4:89:EC:72:9B:F8:CC:CB:57:53:FF:0B:1D:DA
X509v3 Authority Key Identifier:
keyid:36:56:02:F8:A6:7D:A0:E0:B8:13:01:80:47:B7:84:7A:72:3B:39:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NlYC-KZ9oOC4EwGAR7eEenI7Of8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/41bbbf-c667-48a2-a51c-33a3fd924275/1/UuTc9oFO9Inscpv4zMtXU_8LHdo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/41bbbf-c667-48a2-a51c-33a3fd924275/1/NlYC-KZ9oOC4EwGAR7eEenI7Of8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.83.104.0/22
Signature Algorithm: sha256WithRSAEncryption
9e:3a:bf:e5:f2:6b:88:ff:30:5d:02:0c:0e:ec:56:ab:41:f3:
90:20:09:d2:63:cd:61:38:5d:aa:75:e3:82:ac:a6:1f:49:19:
6d:99:59:79:8d:49:b0:f2:cb:ac:1c:e6:88:34:f7:02:90:3d:
01:3e:b0:b6:4a:57:e2:12:98:ff:0c:25:a8:65:f1:51:6b:d7:
57:42:b0:71:04:23:3b:2f:b7:f3:85:89:e7:5e:87:72:6d:40:
23:84:7d:25:f0:5d:72:1d:dd:75:e6:4d:54:7a:7f:04:d7:b2:
85:23:10:ec:ef:62:36:13:25:31:97:1e:c2:85:08:0b:92:00:
eb:3a:3b:3b:82:22:17:4b:40:81:ee:d9:59:84:ed:41:af:a4:
3f:c7:8f:8c:6b:7e:a4:6e:3c:c9:86:51:2f:0c:f1:f4:d3:29:
35:81:20:1a:af:82:f5:12:7a:ab:90:4c:f0:0b:6e:c0:f3:50:
b1:9f:30:1b:df:20:24:cb:71:f5:79:2b:21:b1:e2:f5:a6:41:
83:a2:35:a8:43:0b:ad:af:aa:ae:b6:7e:a3:47:f9:7c:ff:fd:
4a:12:7e:b5:8a:dd:96:23:13:d6:d4:85:18:83:9e:43:d5:d7:
a5:37:e4:a9:f4:d3:73:d2:2a:22:0e:0b:73:2f:c8:a7:c3:20:
6e:e3:ee:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:10:38 2025 by rpki-client