Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/EqYoYfSSuHO4ZXymegrqik-Htrk.roa
File: EqYoYfSSuHO4ZXymegrqik-Htrk.roa (raw, json)
Hash identifier: 8v4APsy7t8eGT/7UldLhNCClDHzeBHejHmhxpQ5qjBU=
Subject key identifier: 12:A6:28:61:F4:92:B8:73:B8:65:7C:A6:7A:0A:EA:8A:4F:87:B6:B9
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 019424B39F5D5BB33C811B01DA6C386EF589
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/EqYoYfSSuHO4ZXymegrqik-Htrk.roa
Signing time: Thu 02 Jan 2025 01:48:59 +0000
ROA not before: Thu 02 Jan 2025 01:48:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 133153
IP address blocks: 45.158.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:9f:5d:5b:b3:3c:81:1b:01:da:6c:38:6e:f5:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Jan 2 01:48:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=12a62861f492b873b8657ca67a0aea8a4f87b6b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:43:4e:df:bf:73:c6:8a:36:11:79:23:dd:f1:
c6:b0:97:5a:c3:39:8f:95:ad:c8:29:ea:31:6f:f1:
47:be:ad:df:14:ff:85:cb:50:09:8d:30:26:a3:7a:
63:e6:be:a8:6a:5a:34:13:c8:16:b5:6f:59:03:b4:
17:cf:f8:9c:12:ae:1c:59:01:d6:8d:96:0e:b3:8e:
e6:d0:7b:0e:9c:39:95:44:72:19:82:13:3f:9b:57:
c2:8a:4b:42:12:78:55:15:a8:f0:c8:1a:95:71:b2:
9a:8c:ff:3b:4f:29:b7:49:14:53:f2:9c:d9:60:b0:
00:89:80:c9:c9:17:0e:53:73:cf:03:26:3e:2a:11:
73:c0:71:47:de:c5:75:31:f6:a5:4a:9b:34:bc:f4:
e4:d3:ae:2e:34:db:d4:5e:2e:d0:13:e8:7e:84:90:
34:46:fa:d1:80:23:04:25:b9:6d:95:83:57:88:37:
5d:8a:b3:c3:59:e3:1b:3a:2d:cb:3e:20:22:9c:1e:
8c:14:59:d1:3e:58:85:36:30:60:63:94:a2:11:61:
54:da:0d:17:14:17:37:81:25:66:5c:57:35:fb:43:
d8:46:dc:c1:76:bb:72:48:1a:da:67:57:fe:6b:cf:
be:be:03:d3:ff:dc:6b:af:ec:13:78:b7:ed:21:76:
14:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:A6:28:61:F4:92:B8:73:B8:65:7C:A6:7A:0A:EA:8A:4F:87:B6:B9
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/EqYoYfSSuHO4ZXymegrqik-Htrk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.158.253.0/24
Signature Algorithm: sha256WithRSAEncryption
62:dc:61:96:3e:37:46:a1:43:01:03:02:9e:c4:ba:d2:3d:28:
56:18:46:7f:5e:9c:d4:66:01:4f:43:ec:9d:c5:50:2c:2b:0d:
eb:c6:12:25:e1:77:a7:05:77:bb:5e:b1:c8:5a:5a:fb:cf:8c:
c6:4b:e5:e0:76:eb:ab:2e:b4:84:0c:12:05:60:53:b0:a3:7d:
07:a2:e4:e2:65:10:6d:7f:ed:eb:e8:f8:de:b1:5e:e7:f0:36:
7b:54:62:59:ff:72:f5:c5:df:d1:3e:bb:a9:a1:d3:d2:fa:d9:
5e:fa:d9:d8:66:1a:62:6f:d8:a8:3a:29:f5:b8:8b:7e:8d:41:
80:6e:5a:00:c6:e3:32:46:92:57:a6:a6:4f:9b:c8:b8:2b:37:
99:a9:82:b5:b8:d2:57:6a:7b:9f:5e:b1:cb:2f:07:52:75:cb:
10:35:96:77:c4:f0:ed:e2:47:2a:39:2b:ca:57:0f:07:4c:21:
79:e9:63:3c:3a:20:73:f1:b1:02:03:26:f5:af:57:ea:5a:36:
d6:e2:91:b0:30:c4:dc:16:9d:8b:1f:6f:44:f3:67:a9:2f:37:
63:9d:59:9a:a1:00:80:7f:b0:a9:69:e4:d7:a0:cc:bd:43:df:
c3:cc:03:6d:83:be:e8:53:69:cb:a2:a2:c5:b1:6c:1f:c7:3a:
6c:ea:f1:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:37:44 2025 by rpki-client