Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/41bbbf-c667-48a2-a51c-33a3fd924275/1/Yd2wlGqEGKFrhHEwQzYEuV-H1Ew.roa
File: Yd2wlGqEGKFrhHEwQzYEuV-H1Ew.roa (raw, json)
Hash identifier: KeUY6ADXqRuVW4caYDU8w2L+rzRP2NHoxi66lv2/OxI=
Subject key identifier: 61:DD:B0:94:6A:84:18:A1:6B:84:71:30:43:36:04:B9:5F:87:D4:4C
Certificate issuer: /CN=365602f8a67da0e0b813018047b7847a723b39ff
Certificate serial: 023E4CDB
Authority key identifier: 36:56:02:F8:A6:7D:A0:E0:B8:13:01:80:47:B7:84:7A:72:3B:39:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NlYC-KZ9oOC4EwGAR7eEenI7Of8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/41bbbf-c667-48a2-a51c-33a3fd924275/1/Yd2wlGqEGKFrhHEwQzYEuV-H1Ew.roa
Signing time: Thu 03 Mar 2022 19:41:20 +0000
ROA not before: Thu 03 Mar 2022 19:41:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59631
IP address blocks: 185.83.105.0/24 maxlen: 24
185.83.104.0/24 maxlen: 24
185.83.104.0/22 maxlen: 22
185.83.106.0/24 maxlen: 24
185.83.107.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37637339 (0x23e4cdb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=365602f8a67da0e0b813018047b7847a723b39ff
Validity
Not Before: Mar 3 19:41:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=61ddb0946a8418a16b847130433604b95f87d44c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:3a:6d:01:d1:1a:e3:dc:72:e1:20:19:08:68:
50:d8:90:67:79:b8:fd:eb:d1:cd:fc:92:fd:8d:e8:
eb:0a:22:e9:88:2b:2c:13:d4:e7:c2:40:40:2f:58:
b7:24:1c:8b:f5:2b:e7:12:40:06:74:d9:75:25:8b:
c7:70:18:00:7b:bd:e1:f0:1a:88:3a:34:79:e2:e8:
5b:69:10:c8:6c:02:5e:6c:b0:9a:66:0a:9a:c4:40:
a0:cf:cb:86:be:d1:fc:a9:b6:b6:23:56:a2:ed:07:
ff:66:51:4d:06:82:aa:43:c8:fd:8c:b9:4b:a6:a2:
7e:07:c3:0d:60:29:57:ff:c9:f1:bc:43:64:e5:4b:
8f:54:67:ab:9c:67:8d:a4:50:ef:06:f9:62:53:4a:
57:d8:1d:e1:95:f5:1e:ca:8d:f8:ff:ca:7f:44:5a:
fe:14:c9:1a:81:a7:ad:7c:ea:ec:5d:d4:c6:46:b9:
0e:04:ff:9a:33:04:78:45:51:11:4b:cf:85:ee:17:
e4:4b:21:40:55:7a:5d:dc:24:b5:01:65:dd:e9:a1:
af:21:bc:a8:99:f8:68:9a:af:25:51:21:60:fb:ce:
24:3c:56:42:6d:c5:e3:6f:d0:19:d2:64:a1:6a:bd:
ba:27:e3:56:c0:70:32:ff:b5:72:23:dd:d5:99:16:
c4:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:DD:B0:94:6A:84:18:A1:6B:84:71:30:43:36:04:B9:5F:87:D4:4C
X509v3 Authority Key Identifier:
keyid:36:56:02:F8:A6:7D:A0:E0:B8:13:01:80:47:B7:84:7A:72:3B:39:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NlYC-KZ9oOC4EwGAR7eEenI7Of8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/41bbbf-c667-48a2-a51c-33a3fd924275/1/Yd2wlGqEGKFrhHEwQzYEuV-H1Ew.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/41bbbf-c667-48a2-a51c-33a3fd924275/1/NlYC-KZ9oOC4EwGAR7eEenI7Of8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.83.104.0/22
Signature Algorithm: sha256WithRSAEncryption
27:8f:f8:05:1a:01:54:e8:8f:4f:f6:22:a2:e0:39:a3:de:d3:
cf:38:9b:7f:b7:52:34:e5:be:2c:b4:6a:09:00:8b:16:b8:7f:
82:fc:ca:d6:93:c6:45:3f:89:33:4c:25:69:02:d2:ea:c4:bb:
54:c6:c8:42:b2:1a:70:fa:63:c5:8c:e7:93:0d:71:e2:01:bd:
9a:af:0b:a5:15:c0:bd:f7:45:2d:61:08:d4:ee:b1:a7:34:da:
f5:59:cd:19:96:73:b7:05:9c:0e:1c:3d:f5:43:4d:34:03:76:
0a:1f:04:4d:d0:dc:d8:00:ab:e3:a6:c5:34:6b:d5:61:ce:42:
76:e1:f4:f7:87:f2:a9:57:b1:86:1d:d8:20:6b:f1:fb:a0:0b:
fe:55:b0:4b:95:cb:f8:69:2d:ab:37:e1:e5:d7:db:3a:f0:5b:
42:9a:49:ce:49:45:d9:53:3c:02:e9:d4:30:d1:79:c0:8b:7f:
98:ea:24:f4:8e:c7:10:d4:3f:44:b3:7a:8d:2e:66:22:78:dc:
01:1c:8e:34:62:56:82:05:59:e5:cf:bf:b8:0d:90:54:6b:7a:
3a:4d:d3:16:e2:92:22:01:82:43:34:10:f3:1b:af:cd:58:24:
ca:71:f3:fc:5b:02:1c:df:b5:02:ee:7d:d5:a4:da:43:90:58:
89:75:b4:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:13:06 2025 by rpki-client