Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/EqWJbW00yHom-8ojBy6QYR1H3FM.roa
File: EqWJbW00yHom-8ojBy6QYR1H3FM.roa (raw, json)
Hash identifier: jchk7todvo3pxE5MJlQ/7M5jHRN15mY+WmGn6RIiL74=
Subject key identifier: 12:A5:89:6D:6D:34:C8:7A:26:FB:CA:23:07:2E:90:61:1D:47:DC:53
Certificate issuer: /CN=dff24726df3e77f6f4c8e0436613b35110eeaf38
Certificate serial: 01942067B79A3FC2ACF3A3E3B535D3C29171
Authority key identifier: DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/EqWJbW00yHom-8ojBy6QYR1H3FM.roa
Signing time: Wed 01 Jan 2025 05:47:35 +0000
ROA not before: Wed 01 Jan 2025 05:47:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60781
IP address blocks: 31.43.167.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:b7:9a:3f:c2:ac:f3:a3:e3:b5:35:d3:c2:91:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dff24726df3e77f6f4c8e0436613b35110eeaf38
Validity
Not Before: Jan 1 05:47:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=12a5896d6d34c87a26fbca23072e90611d47dc53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:a7:48:5e:f1:f9:bc:cc:07:a2:47:01:8a:d7:
0e:fc:1a:09:a4:77:4d:8b:55:de:70:43:72:4c:64:
89:9a:3a:3e:ce:7c:b0:c6:14:c8:16:5d:7b:ed:b3:
bd:62:51:ae:b5:0a:fa:b6:d1:98:4a:0b:5d:2c:4a:
88:52:a3:30:4b:65:6f:44:db:d8:e6:f6:34:3e:cb:
80:79:12:31:e8:2d:06:9c:20:02:00:f7:b7:2e:31:
9f:0e:f2:9d:80:e8:52:dd:83:c8:15:ac:61:be:fc:
9d:b0:66:5d:01:bf:d6:4d:5f:ce:7b:bd:be:f6:a9:
86:b2:d8:d9:8d:a3:87:65:b6:86:ea:9f:80:af:69:
44:bc:ab:f8:9d:32:0c:ba:62:70:54:0c:94:9e:f5:
1b:bf:b7:be:7b:93:b5:23:3f:92:ac:ce:84:2e:f5:
d2:84:99:ea:66:8a:aa:6d:15:ba:bf:59:16:35:8f:
52:3a:f5:6e:2e:51:bd:04:9a:5d:65:8c:4d:4c:6a:
f6:6a:66:98:37:58:f7:7a:ef:48:52:56:79:79:55:
20:5c:4e:59:5f:e2:47:65:5f:f2:c7:bb:2c:77:58:
8f:c8:fe:e1:cb:db:d6:20:8a:f3:09:65:49:62:7a:
32:2b:41:f3:e3:8f:8e:3d:3b:27:9b:e3:be:9e:b0:
71:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:A5:89:6D:6D:34:C8:7A:26:FB:CA:23:07:2E:90:61:1D:47:DC:53
X509v3 Authority Key Identifier:
keyid:DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/EqWJbW00yHom-8ojBy6QYR1H3FM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.43.167.0/24
Signature Algorithm: sha256WithRSAEncryption
72:40:aa:f6:08:75:b1:77:ef:0d:37:b5:56:2b:d4:1c:a0:10:
31:b6:6a:c6:55:b4:c2:96:4d:55:2f:7a:43:4f:02:6a:b3:ea:
82:ac:da:94:5b:82:5d:97:75:b8:2d:2b:08:4e:f7:e8:61:f8:
26:08:80:1f:97:30:74:e8:9a:52:c3:55:4f:f8:c2:8d:ff:e4:
de:f5:b0:21:b2:c7:6e:97:63:c0:23:84:8b:e5:d2:d5:25:0d:
a7:08:5a:6e:99:ff:0c:1d:0a:a9:c8:3f:0f:4b:89:3e:90:c9:
42:2a:94:23:8b:0f:c4:29:c0:66:41:69:6b:e3:c5:f9:57:50:
a9:22:b4:3e:da:b7:44:ec:bb:bc:eb:4a:5b:87:3c:6a:35:e3:
cd:6e:f9:4c:5b:aa:08:17:79:51:26:56:89:2c:c6:26:6e:e2:
27:88:74:6f:71:64:51:bc:73:40:d5:f1:03:66:37:6d:b1:1f:
37:dd:f7:12:9c:a1:94:85:a6:39:5f:ef:e3:8c:30:b6:9d:88:
46:b0:d9:24:94:aa:ba:20:95:c8:f0:d1:43:7f:b9:18:9c:13:
fd:9d:7b:93:4d:6c:67:ca:33:89:69:e2:19:97:9a:07:73:11:
e9:8a:b6:35:ad:bc:76:8c:b7:aa:92:25:d1:12:94:5f:ac:60:
2e:df:af:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:10:44 2025 by rpki-client