Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/60f037-9ddc-40aa-88c6-15b6f1dea37b/1/eqxL6jIp5lCDuJ8hg8qbetbmoqw.roa
File: eqxL6jIp5lCDuJ8hg8qbetbmoqw.roa (raw, json)
Hash identifier: U0gZvRQUNm1qEu/99PIG8sSzSkLgT8DVrk9byTKKgvY=
Subject key identifier: 7A:AC:4B:EA:32:29:E6:50:83:B8:9F:21:83:CA:9B:7A:D6:E6:A2:AC
Certificate issuer: /CN=19dcc560daf3e2ac85b60b8661387f06c1fa1315
Certificate serial: 018CC2DB032A2AD2B15EF9E80439A6D0BE55
Authority key identifier: 19:DC:C5:60:DA:F3:E2:AC:85:B6:0B:86:61:38:7F:06:C1:FA:13:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GdzFYNrz4qyFtguGYTh_BsH6ExU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/60f037-9ddc-40aa-88c6-15b6f1dea37b/1/eqxL6jIp5lCDuJ8hg8qbetbmoqw.roa
Signing time: Mon 01 Jan 2024 02:29:42 +0000
ROA not before: Mon 01 Jan 2024 02:29:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58061
IP address blocks: 195.64.112.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:03:2a:2a:d2:b1:5e:f9:e8:04:39:a6:d0:be:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19dcc560daf3e2ac85b60b8661387f06c1fa1315
Validity
Not Before: Jan 1 02:29:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7aac4bea3229e65083b89f2183ca9b7ad6e6a2ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:e4:d7:18:95:82:12:6b:48:7a:30:8d:ad:b3:
17:71:6a:06:82:59:89:bd:46:4c:f4:fc:af:ff:6c:
8a:02:31:71:80:db:f2:e7:19:45:cc:94:fb:9a:4d:
3f:b6:7d:c9:bd:b9:d0:dc:82:8f:0c:45:07:6e:9c:
a0:07:d1:1b:09:f0:f4:1f:b3:80:16:70:ad:7a:38:
8b:06:86:09:8b:62:af:2a:0c:7e:a0:2d:30:15:c6:
00:c6:75:52:3a:57:f2:12:d7:b2:40:31:bb:b2:28:
47:aa:5d:65:0e:2b:7e:45:18:9d:ad:86:8d:21:77:
e5:b2:61:e4:87:4d:03:45:b3:40:c3:2e:04:07:5e:
e8:bd:dc:ff:08:df:06:50:31:b7:e9:87:5e:0f:eb:
4f:d3:79:a0:d4:71:de:6d:4b:ba:32:3c:75:0e:0b:
73:49:f0:a0:a8:3c:52:25:c9:bb:b8:87:4d:9f:25:
2c:4f:f2:3f:05:d7:78:8f:a7:fa:11:02:68:39:53:
51:4c:1a:3b:24:80:1b:4e:48:2f:bc:99:6f:c4:89:
53:6d:93:99:c5:f9:31:fd:b1:87:55:88:9a:e0:42:
e6:e2:fb:8f:9d:b1:2c:20:56:d5:d7:54:88:41:4d:
ec:10:87:16:40:85:d1:bf:a1:9a:ae:28:83:2c:99:
c4:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:AC:4B:EA:32:29:E6:50:83:B8:9F:21:83:CA:9B:7A:D6:E6:A2:AC
X509v3 Authority Key Identifier:
keyid:19:DC:C5:60:DA:F3:E2:AC:85:B6:0B:86:61:38:7F:06:C1:FA:13:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GdzFYNrz4qyFtguGYTh_BsH6ExU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/60f037-9ddc-40aa-88c6-15b6f1dea37b/1/eqxL6jIp5lCDuJ8hg8qbetbmoqw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/60f037-9ddc-40aa-88c6-15b6f1dea37b/1/GdzFYNrz4qyFtguGYTh_BsH6ExU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.64.112.0/24
Signature Algorithm: sha256WithRSAEncryption
15:c9:44:16:81:2a:6e:a0:bd:63:b3:ef:3b:5a:e0:cb:f1:7a:
2b:e1:8f:e4:d2:ba:4a:93:49:08:65:e9:46:23:81:6c:5e:55:
c2:bf:09:33:96:01:47:a9:96:9f:1d:2f:e7:0b:30:62:af:38:
8e:01:09:03:58:69:3f:b7:2f:e3:67:c4:7d:ae:f6:32:77:2a:
5e:d7:aa:cc:2b:b4:2b:a6:9c:fe:80:80:26:75:75:08:18:7a:
6d:6a:21:5c:b2:01:3b:03:a7:79:ca:1e:dc:5f:b5:88:b8:be:
76:cf:4e:5d:39:56:6e:bc:b2:8d:03:2b:37:33:92:59:f9:79:
b9:90:82:70:18:21:83:38:a5:e1:30:76:a6:56:e6:d9:b6:d7:
10:54:de:10:54:e0:22:2f:6e:87:fd:5b:3b:21:bf:a1:c3:f5:
1d:64:cf:6c:39:22:9a:a7:33:6f:9a:8d:57:18:f3:b6:b6:74:
41:cb:92:89:67:d8:82:39:a5:f3:0a:22:68:b0:96:de:62:0a:
81:3c:8f:26:8a:ab:42:60:ad:84:6d:c3:17:6c:28:f6:a9:a9:
8e:b4:04:03:93:22:49:b1:a2:ae:a4:52:fe:7d:44:44:33:9d:
af:4f:65:b9:de:6d:42:c0:36:6a:20:31:9a:d3:aa:fd:e9:88:
87:e7:b6:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:30:50 2025 by rpki-client