Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/7f9a4f-e7e3-4973-b039-755e3b96d5ed/1/ZaqC_eqAOQjtM4jTMkAtfUr_HnA.roa
File: ZaqC_eqAOQjtM4jTMkAtfUr_HnA.roa (raw, json)
Hash identifier: qyBeXguoUs9hwnrHmonqUvuWFW9pHnQHNdEGLzV2NBY=
Subject key identifier: 65:AA:82:FD:EA:80:39:08:ED:33:88:D3:32:40:2D:7D:4A:FF:1E:70
Certificate issuer: /CN=2097a3117ca1c1d6292ae52911b4f0ca4f8e9019
Certificate serial: 019428254033EEE3ED4258468DC6B4610007
Authority key identifier: 20:97:A3:11:7C:A1:C1:D6:29:2A:E5:29:11:B4:F0:CA:4F:8E:90:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IJejEXyhwdYpKuUpEbTwyk-OkBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/7f9a4f-e7e3-4973-b039-755e3b96d5ed/1/ZaqC_eqAOQjtM4jTMkAtfUr_HnA.roa
Signing time: Thu 02 Jan 2025 17:51:57 +0000
ROA not before: Thu 02 Jan 2025 17:51:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205889
IP address blocks: 185.203.52.0/22 maxlen: 22
185.203.52.0/23 maxlen: 23
185.203.52.0/24 maxlen: 24
185.203.53.0/24 maxlen: 24
185.203.54.0/23 maxlen: 23
185.203.54.0/24 maxlen: 24
185.203.55.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:40:33:ee:e3:ed:42:58:46:8d:c6:b4:61:00:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2097a3117ca1c1d6292ae52911b4f0ca4f8e9019
Validity
Not Before: Jan 2 17:51:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=65aa82fdea803908ed3388d332402d7d4aff1e70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:6d:e4:f0:9d:80:c8:5d:09:22:ef:5d:53:ec:
02:20:59:06:fa:a0:7c:79:14:33:5a:13:5c:f2:7f:
a5:1a:06:9a:df:24:00:cf:28:d7:c4:89:18:f9:d6:
fb:8a:9b:53:ca:10:80:e2:68:15:94:48:2e:90:5a:
14:1f:d0:cc:c9:e1:8d:d5:15:71:9e:71:ac:bf:ed:
f9:d8:a1:1b:b6:ff:57:6c:b4:f6:cb:9e:f2:6d:f7:
c9:d4:d3:ef:68:9c:23:86:7f:e6:a5:89:cf:82:28:
27:9b:9d:ac:67:88:85:fb:ee:48:ed:a4:ba:2a:a1:
43:4d:ee:16:98:cb:d7:05:8f:aa:34:75:17:3f:f5:
3c:58:41:8d:85:9b:d0:7c:9f:dc:ac:ad:83:ef:ec:
ee:75:52:08:b5:23:49:ed:d3:7a:63:c1:5a:5d:70:
d3:cf:d0:77:3e:79:9b:f0:8c:ba:f6:7b:8a:8d:ed:
0c:19:e6:36:9e:0a:35:83:ca:94:f7:e4:20:8c:6c:
d3:27:21:32:3c:ab:16:82:79:aa:d7:20:6b:80:00:
ab:94:6b:9b:e0:a6:e4:95:47:b3:65:6b:55:70:f7:
22:36:ea:e9:34:6b:86:1c:fe:a1:00:97:41:05:f2:
df:7b:cd:77:d9:65:2d:42:fe:af:d9:c9:7c:8e:e6:
fa:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:AA:82:FD:EA:80:39:08:ED:33:88:D3:32:40:2D:7D:4A:FF:1E:70
X509v3 Authority Key Identifier:
keyid:20:97:A3:11:7C:A1:C1:D6:29:2A:E5:29:11:B4:F0:CA:4F:8E:90:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IJejEXyhwdYpKuUpEbTwyk-OkBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7f9a4f-e7e3-4973-b039-755e3b96d5ed/1/ZaqC_eqAOQjtM4jTMkAtfUr_HnA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7f9a4f-e7e3-4973-b039-755e3b96d5ed/1/IJejEXyhwdYpKuUpEbTwyk-OkBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.203.52.0/22
Signature Algorithm: sha256WithRSAEncryption
2f:7d:3b:9a:77:3f:36:c0:5b:e0:11:51:73:59:4b:eb:81:ca:
a8:71:5b:d7:e4:21:d6:fd:ae:49:7b:66:da:c5:8c:9c:cf:8d:
93:a7:ef:6f:51:44:50:19:f4:36:f6:fc:29:94:5a:d2:df:a5:
31:85:47:b1:c2:f2:7b:72:ba:97:f4:d5:5f:f5:c4:95:a9:b0:
75:8b:85:e9:4c:7e:b5:e5:42:0e:ae:5c:b5:2b:bc:e9:27:4c:
e3:e9:31:55:fe:cd:66:af:2a:36:3a:9a:2f:be:85:39:64:ba:
9d:ab:ba:40:10:b8:61:e2:0c:ac:71:3f:ff:3d:38:8f:8e:0c:
2e:28:be:a2:ef:4e:5a:38:cc:25:b2:4f:65:e7:15:0b:0b:fc:
0e:82:4e:3c:a9:31:84:17:1d:26:c8:36:e8:37:0e:ef:20:b6:
4b:eb:b0:19:eb:d5:b5:d9:2b:95:a3:77:7c:c9:fb:20:c4:cc:
63:aa:4a:28:83:90:f5:77:14:80:57:63:02:a6:17:59:86:da:
14:c3:05:95:5a:54:f1:08:16:f7:21:e9:2a:43:17:f5:94:bd:
fa:3f:b4:3f:6b:e2:7b:51:41:66:c0:6d:b7:ee:17:fd:67:3a:
4b:c2:40:3d:fb:b4:ca:72:43:3c:29:02:09:8e:c6:29:82:9d:
7a:a5:d9:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:47 2025 by rpki-client on console.sobornost.net