Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/EqxrefdyqjYZzrCHrTrk9NHiht0.roa
File: EqxrefdyqjYZzrCHrTrk9NHiht0.roa (raw, json)
Hash identifier: PPHZGYMZ3zZjXKQA0ijIhbbL3UF83eAk3Rgwiwv4iE0=
Subject key identifier: 12:AC:6B:79:F7:72:AA:36:19:CE:B0:87:AD:3A:E4:F4:D1:E2:86:DD
Certificate issuer: /CN=424feffb576e411de511871dc1e0bd7a20e2c4d7
Certificate serial: 0194258F6A5376F31F85E1BA37412842A08A
Authority key identifier: 42:4F:EF:FB:57:6E:41:1D:E5:11:87:1D:C1:E0:BD:7A:20:E2:C4:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qk_v-1duQR3lEYcdweC9eiDixNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/EqxrefdyqjYZzrCHrTrk9NHiht0.roa
Signing time: Thu 02 Jan 2025 05:49:03 +0000
ROA not before: Thu 02 Jan 2025 05:49:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 268624
IP address blocks: 162.12.204.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:6a:53:76:f3:1f:85:e1:ba:37:41:28:42:a0:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=424feffb576e411de511871dc1e0bd7a20e2c4d7
Validity
Not Before: Jan 2 05:49:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=12ac6b79f772aa3619ceb087ad3ae4f4d1e286dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b1:dd:6e:8c:2f:1a:29:07:01:75:01:17:b2:
cf:7e:12:5c:d2:3f:6e:4f:fb:4d:9a:3e:e6:a3:07:
14:ca:99:fd:61:e2:8d:c7:db:92:00:81:86:b1:74:
a8:2f:e6:a8:82:d1:42:4d:ea:0c:3c:9c:31:db:b8:
a8:27:9f:e2:e0:f8:4b:63:1c:84:7b:50:d0:89:c1:
f3:d9:a7:24:89:03:35:3e:22:b4:eb:12:1d:42:1f:
fe:33:63:3b:e9:e7:9d:43:ff:bd:dc:15:5f:b5:c9:
7a:37:aa:b3:fa:1c:93:e6:f4:08:8b:7b:d0:f9:45:
65:24:3a:ed:85:e9:05:47:30:46:b8:ec:b7:49:3a:
2c:8b:96:37:df:02:ff:04:fc:fe:8b:d0:83:25:f9:
3e:f3:46:9b:3f:88:2e:5f:67:60:01:6d:cf:b4:11:
a7:0c:72:83:7d:ff:98:08:75:ad:b3:5a:ea:fd:8e:
53:b6:aa:e2:68:e4:09:62:d2:dc:bc:cc:16:8a:0a:
a2:e9:a6:83:4a:ad:26:04:48:b7:2c:07:ac:ad:1f:
a4:75:20:96:dd:78:7a:5d:88:4a:ce:4b:07:77:88:
6f:77:98:98:7f:31:87:c5:7c:b4:7c:4a:87:87:66:
de:f3:c3:7f:63:93:4b:78:dc:1f:72:58:a9:70:a4:
6b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:AC:6B:79:F7:72:AA:36:19:CE:B0:87:AD:3A:E4:F4:D1:E2:86:DD
X509v3 Authority Key Identifier:
keyid:42:4F:EF:FB:57:6E:41:1D:E5:11:87:1D:C1:E0:BD:7A:20:E2:C4:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qk_v-1duQR3lEYcdweC9eiDixNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/EqxrefdyqjYZzrCHrTrk9NHiht0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
162.12.204.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:8a:12:20:47:73:77:49:c1:7b:1d:5f:a4:d6:bd:59:0f:18:
f1:1e:6d:b6:e7:94:43:95:60:0b:b8:1f:cb:f2:e6:82:7d:f6:
37:d3:a7:1d:5d:e9:93:b8:2f:32:d1:91:02:d0:0b:11:b0:a8:
ea:6a:16:4c:f9:fc:de:b4:f2:8f:4f:26:81:37:8c:07:fa:34:
70:71:dd:65:b1:a8:66:5d:11:a0:4f:69:b8:12:d7:9b:a3:20:
bb:ca:a2:e9:d4:cc:ce:59:07:e4:f5:ee:57:76:cd:7c:ce:7b:
eb:e5:ee:97:21:c3:37:f2:b3:2e:83:0c:1e:6c:73:12:44:08:
7d:85:a3:a1:9a:ec:87:6a:81:6e:21:23:10:3a:6c:a5:39:04:
87:e5:5d:7a:09:08:ef:5f:14:7d:51:76:e8:79:0e:07:50:ff:
a6:f8:63:43:98:56:a5:8f:06:41:42:47:62:a8:81:1b:15:75:
e4:b4:0a:3e:8b:c9:fb:1f:7c:63:50:02:56:e9:13:d0:b2:e1:
fa:bb:8e:85:38:de:8c:5e:2c:52:9f:71:b0:ed:7f:b7:95:6d:
2a:1a:5e:87:fa:68:3a:b8:a6:2a:ef:33:bb:86:cc:c2:76:0c:
fb:fc:9b:57:4f:1e:34:0a:33:bc:9b:e5:ae:62:f2:1c:97:1b:
86:07:13:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:25:55 2025 by rpki-client