Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/eq_1NPXQGhoWTMBNC9PaXKKEltM.roa
File: eq_1NPXQGhoWTMBNC9PaXKKEltM.roa (raw, json)
Hash identifier: Hq4HlvjEPgU16G6jBR0u/BxOO81trhl4PXHhgLXPBd4=
Subject key identifier: 7A:AF:F5:34:F5:D0:1A:1A:16:4C:C0:4D:0B:D3:DA:5C:A2:84:96:D3
Certificate issuer: /CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
Certificate serial: 0194258F67DC36A7CE4FD5ED07C118C078CB
Authority key identifier: 24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/eq_1NPXQGhoWTMBNC9PaXKKEltM.roa
Signing time: Thu 02 Jan 2025 05:49:02 +0000
ROA not before: Thu 02 Jan 2025 05:49:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214969
IP address blocks: 45.94.54.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:67:dc:36:a7:ce:4f:d5:ed:07:c1:18:c0:78:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
Validity
Not Before: Jan 2 05:49:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7aaff534f5d01a1a164cc04d0bd3da5ca28496d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:3e:d6:3f:fb:71:40:4e:8e:35:a5:6a:a5:23:
b2:ab:c7:ce:ae:cf:5c:0d:5f:02:6c:90:40:08:06:
e2:a2:4a:72:e9:45:c3:3c:b3:d9:7d:a9:bb:cd:38:
6e:eb:df:54:f2:1c:83:9a:34:fd:3d:ef:c7:90:5e:
a1:1f:e5:93:b1:5d:c4:07:fd:dc:84:f4:fd:a8:c5:
6d:c7:ab:da:d5:81:f4:0d:12:57:ee:fb:23:38:27:
54:3e:37:5f:5b:aa:3f:2e:2c:86:f6:04:fb:8c:f6:
a9:25:35:b4:ce:17:76:34:60:73:4f:0a:68:a6:3d:
ad:76:b3:04:8d:af:71:ee:ed:73:31:90:f1:13:c2:
95:0a:55:da:84:e1:b6:93:94:c3:df:8b:a4:bf:aa:
c1:d7:c2:8e:95:50:cf:06:a4:0d:45:7c:e8:1d:0c:
c0:85:03:64:54:18:77:86:dd:ee:f9:49:b0:cc:60:
f8:3f:1f:88:db:92:1e:73:c1:a0:9a:ef:87:de:2e:
84:cf:e9:5b:e4:17:73:8c:86:ca:9b:59:41:09:8e:
65:db:93:5b:7d:99:56:3a:94:f3:ba:83:94:ce:d8:
5f:ca:f3:51:28:95:9b:39:e6:ba:c1:33:00:50:89:
19:27:ef:0e:16:4f:53:7d:f2:a9:a8:ca:2f:bf:6a:
2f:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:AF:F5:34:F5:D0:1A:1A:16:4C:C0:4D:0B:D3:DA:5C:A2:84:96:D3
X509v3 Authority Key Identifier:
keyid:24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/eq_1NPXQGhoWTMBNC9PaXKKEltM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.54.0/24
Signature Algorithm: sha256WithRSAEncryption
20:f5:77:ba:03:c2:c0:0c:cc:34:7c:cd:6c:d4:27:c9:80:fa:
54:0d:ff:9a:48:20:8f:76:c4:bc:66:2f:f5:18:d5:12:97:d5:
b7:ae:fe:51:ad:d1:f1:d0:fd:80:7c:66:7f:85:04:30:be:63:
60:ec:cd:5e:45:8d:a5:96:c8:3a:e4:d3:d5:70:47:9d:cb:03:
91:3f:7e:5e:81:a1:df:25:61:ed:8b:ea:da:25:cd:00:0f:68:
73:99:63:54:0a:9e:a6:1d:6b:e2:fc:77:48:ed:42:b8:2b:90:
70:81:72:70:4e:44:5d:46:39:39:67:a4:64:fa:33:59:d8:39:
3a:d4:c2:7d:f4:a7:2c:d3:18:12:cc:d1:e6:01:0a:c7:a6:9d:
99:e1:99:6f:f7:04:fa:1d:13:98:8b:d8:14:16:ab:7c:51:30:
68:b4:9a:8f:74:cb:ee:83:5f:b8:e9:36:ec:dc:5a:38:50:da:
cc:5e:19:54:83:23:a6:1f:26:8c:39:e0:f7:b6:c4:4b:03:f6:
8b:05:a2:c5:a0:3c:1d:d9:63:e6:ef:9c:25:e6:05:02:9d:ca:
89:c1:62:06:4d:54:b0:d1:ce:44:23:90:c5:c9:9f:84:53:74:
01:6e:56:be:4f:0f:4f:56:e2:77:fa:30:36:2d:60:28:d0:ef:
d6:52:0f:4e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQlj2fcNqfOT9XtB8EYwHjLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0NTVkN2ZlZTRhNDk5ZWNhZjExZDJkM2RhOGUzODlkZTMy
MzQxMmYwHhcNMjUwMTAyMDU0OTAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YWFmZjUzNGY1ZDAxYTFhMTY0Y2MwNGQwYmQzZGE1Y2EyODQ5NmQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwz7WP/txQE6ONaVqpSOyq8fOrs9c
DV8CbJBACAbiokpy6UXDPLPZfam7zThu699U8hyDmjT9Pe/HkF6hH+WTsV3EB/3c
hPT9qMVtx6va1YH0DRJX7vsjOCdUPjdfW6o/LiyG9gT7jPapJTW0zhd2NGBzTwpo
pj2tdrMEja9x7u1zMZDxE8KVClXahOG2k5TD34ukv6rB18KOlVDPBqQNRXzoHQzA
hQNkVBh3ht3u+UmwzGD4Px+I25Iec8Ggmu+H3i6Ez+lb5BdzjIbKm1lBCY5l25Nb
fZlWOpTzuoOUzthfyvNRKJWbOea6wTMAUIkZJ+8OFk9TffKpqMovv2ov4wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHqv9TT10BoaFkzATQvT2lyihJbTMB8GA1UdIwQY
MBaAFCRV1/7kpJnsrxHS09qOOJ3jI0EvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSkZYWF91U2ttZXl2RWRMVDJvNDRuZU1qUVM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy8zZmZiNzYtOTkzMS00OTQyLTlkYTEt
MWUwNDY1NTEzYjYzLzEvZXFfMU5QWFFHaG9XVE1CTkM5UGFYS0tFbHRNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy8zZmZiNzYtOTkzMS00OTQyLTlkYTEtMWUwNDY1NTEzYjYz
LzEvSkZYWF91U2ttZXl2RWRMVDJvNDRuZU1qUVM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALV42MA0G
CSqGSIb3DQEBCwUAA4IBAQAg9Xe6A8LADMw0fM1s1CfJgPpUDf+aSCCPdsS8Zi/1
GNUSl9W3rv5RrdHx0P2AfGZ/hQQwvmNg7M1eRY2llsg65NPVcEedywORP35egaHf
JWHti+raJc0AD2hzmWNUCp6mHWvi/HdI7UK4K5BwgXJwTkRdRjk5Z6Rk+jNZ2Dk6
1MJ99Kcs0xgSzNHmAQrHpp2Z4Zlv9wT6HROYi9gUFqt8UTBotJqPdMvug1+46Tbs
3Fo4UNrMXhlUgyOmHyaMOeD3tsRLA/aLBaLFoDwd2WPm75wl5gUCncqJwWIGTVSw
0c5EI5DFyZ+EU3QBbla+Tw9PVuJ3+jA2LWAo0O/WUg9O
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:49 2025 by rpki-client on console.sobornost.net