Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/047ce4-44ae-4273-94fa-dc634e8aa2a3/1/ZYEY5YW1xGXFrB3GzZ6jTrBcf9w.roa
File: ZYEY5YW1xGXFrB3GzZ6jTrBcf9w.roa (raw, json)
Hash identifier: pOwNfstFAL1zr5tNQSEDWIMsfqU4J9T9Io0xMgEThiM=
Subject key identifier: 65:81:18:E5:85:B5:C4:65:C5:AC:1D:C6:CD:9E:A3:4E:B0:5C:7F:DC
Certificate issuer: /CN=11efdbd727fb5bd53cec6957a29b47c2c34a834c
Certificate serial: 01941F8C7EF231D7D97A0C76B233502DA875
Authority key identifier: 11:EF:DB:D7:27:FB:5B:D5:3C:EC:69:57:A2:9B:47:C2:C3:4A:83:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ee_b1yf7W9U87GlXoptHwsNKg0w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/047ce4-44ae-4273-94fa-dc634e8aa2a3/1/ZYEY5YW1xGXFrB3GzZ6jTrBcf9w.roa
Signing time: Wed 01 Jan 2025 01:48:08 +0000
ROA not before: Wed 01 Jan 2025 01:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202859
IP address blocks: 185.152.20.0/24 maxlen: 24
185.152.21.0/24 maxlen: 24
185.152.22.0/24 maxlen: 24
185.152.23.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:7e:f2:31:d7:d9:7a:0c:76:b2:33:50:2d:a8:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11efdbd727fb5bd53cec6957a29b47c2c34a834c
Validity
Not Before: Jan 1 01:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=658118e585b5c465c5ac1dc6cd9ea34eb05c7fdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b7:27:ad:5b:7d:38:c8:4f:a8:9b:ff:15:1b:
bf:33:fd:ed:44:8c:88:2b:77:fe:9b:6d:4c:c2:5c:
32:ba:db:2d:3b:b9:ad:68:48:6a:34:a3:91:41:50:
db:09:8c:27:8a:58:be:b9:c3:eb:05:cf:07:fc:75:
bc:5e:33:52:56:19:6e:4d:38:9c:d1:7c:59:bf:ca:
1d:68:26:4c:c4:4b:ce:66:9f:bf:4c:82:69:e9:c3:
8a:28:35:30:7a:de:2b:30:48:6a:5c:27:83:88:df:
a5:68:dc:15:ec:5a:e7:a3:7c:6f:d2:75:b2:ac:0e:
aa:19:ab:d7:ee:22:d5:a1:2e:02:a5:1f:6f:fc:e3:
80:a8:63:bc:84:12:8a:02:e8:c1:3d:e2:a4:74:34:
58:61:a7:63:49:36:ac:04:8e:8d:ad:3e:e0:06:ba:
55:a2:68:4e:86:65:20:25:24:16:14:1c:13:9c:cf:
19:31:5f:08:74:fe:1a:2e:cc:c7:0d:40:b9:73:f9:
49:64:12:b1:14:93:39:9c:84:99:1b:c1:44:48:26:
c8:72:ea:5b:38:02:d6:c8:f2:97:83:51:84:03:2e:
a1:6d:68:28:8e:c0:65:e1:b1:7c:49:c4:cb:86:ca:
14:53:a5:3a:41:e7:1a:42:15:83:5d:14:21:50:fc:
27:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:81:18:E5:85:B5:C4:65:C5:AC:1D:C6:CD:9E:A3:4E:B0:5C:7F:DC
X509v3 Authority Key Identifier:
keyid:11:EF:DB:D7:27:FB:5B:D5:3C:EC:69:57:A2:9B:47:C2:C3:4A:83:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ee_b1yf7W9U87GlXoptHwsNKg0w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/047ce4-44ae-4273-94fa-dc634e8aa2a3/1/ZYEY5YW1xGXFrB3GzZ6jTrBcf9w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/047ce4-44ae-4273-94fa-dc634e8aa2a3/1/Ee_b1yf7W9U87GlXoptHwsNKg0w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.152.20.0/22
Signature Algorithm: sha256WithRSAEncryption
48:d2:c6:a8:f6:ae:2b:96:47:fb:8b:2a:e8:30:37:60:9c:75:
95:24:82:17:de:93:45:cb:5f:bc:1d:cf:ba:e7:21:89:67:be:
62:61:45:43:e1:71:36:16:72:d8:ec:a2:cf:cc:66:1e:0f:db:
5b:44:f2:d8:57:d0:55:8f:6d:4a:b2:fa:bb:10:b4:a0:0d:59:
0f:05:4b:2e:36:a2:18:5c:66:d6:43:77:17:7b:e4:5d:fb:e3:
76:4b:c2:e8:99:70:44:01:83:33:19:36:3d:52:e3:1c:6f:b9:
38:60:57:d2:c8:60:78:2d:da:ea:26:e5:08:32:de:3c:85:5b:
03:ab:fe:27:d7:ed:c7:e9:0c:f5:ff:e9:4f:46:16:e8:3d:e4:
5e:71:00:c3:4e:25:2e:fa:62:4e:28:c6:d2:a4:84:2e:01:e0:
8d:e3:31:e7:68:17:b6:37:e8:de:62:e2:0a:62:b5:b3:8a:cc:
12:1f:00:50:29:83:33:bc:49:15:6c:47:d2:e2:a8:2b:cb:e0:
5a:fe:49:bb:d2:99:92:d6:30:87:34:9f:f8:f0:db:65:ec:bd:
95:91:8c:4b:2a:63:29:7e:6a:3d:78:e2:b8:b4:6a:73:78:df:
ca:2c:c9:88:0c:79:f7:ea:2b:a6:9a:da:0e:47:fb:94:81:b7:
9e:b8:59:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:56 2025 by rpki-client on console.sobornost.net