Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Eq-o__RtccmwoOtTfUFvhV5_Weo.roa
File: Eq-o__RtccmwoOtTfUFvhV5_Weo.roa (raw, json)
Hash identifier: 0geXe2Tf4zQxfLS19wYbFqEo1ijyBsNaalAaydS0VXg=
Subject key identifier: 12:AF:A8:FF:F4:6D:71:C9:B0:A0:EB:53:7D:41:6F:85:5E:7F:59:EA
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188B1DEB8E8461007DCFA3B4E706DAC8F12
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Eq-o__RtccmwoOtTfUFvhV5_Weo.roa
Signing time: Mon 12 Jun 2023 23:09:03 +0000
ROA not before: Mon 12 Jun 2023 23:09:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b1:de:b8:e8:46:10:07:dc:fa:3b:4e:70:6d:ac:8f:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 12 23:09:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=12afa8fff46d71c9b0a0eb537d416f855e7f59ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:84:f7:ed:19:10:df:a1:60:f0:3a:7b:91:28:
c3:37:c7:b0:4d:fe:e7:3a:a5:cd:34:46:76:2f:42:
92:b8:b6:51:83:9c:62:d3:3b:2e:e3:d3:88:8c:30:
25:a5:05:02:33:04:61:0b:7a:b6:76:87:75:58:77:
1a:59:6d:7d:6a:c7:af:34:ea:11:7e:93:84:be:b9:
9a:9e:e1:0e:26:a0:19:d2:7c:2b:4c:e5:c5:72:a2:
9e:34:f0:86:aa:8f:dd:d2:d3:50:cb:d2:cc:45:97:
8c:08:be:d4:2b:e2:b7:b3:0c:c1:b1:d9:a0:f2:52:
77:a3:c1:e4:e0:f7:83:a5:9f:96:e3:58:a8:90:55:
b1:27:ca:eb:98:dc:3f:97:11:6d:00:a0:02:54:a9:
66:cd:5a:4a:b3:20:26:a5:be:5f:c8:98:9e:82:fa:
12:03:a5:c2:35:34:ad:10:6b:a1:b6:99:0c:8a:56:
cd:1a:12:70:e4:d5:53:32:8d:17:83:20:68:f0:25:
08:cf:bf:fa:4d:e8:e9:13:a6:c7:be:aa:c8:66:a9:
6b:8d:d9:f4:5c:6b:47:fd:0a:fe:ae:ce:f3:1a:b4:
7b:60:42:f1:23:a7:34:6c:f9:5d:6e:c3:eb:22:2e:
ab:26:8d:e3:18:8c:28:3f:cc:45:d8:00:e6:e2:ce:
82:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:AF:A8:FF:F4:6D:71:C9:B0:A0:EB:53:7D:41:6F:85:5E:7F:59:EA
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Eq-o__RtccmwoOtTfUFvhV5_Weo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
51:01:a6:e8:e6:d0:8e:1c:17:ff:49:c0:d3:12:10:59:97:2a:
8a:9c:aa:36:0e:e8:54:04:68:2f:7a:06:8d:10:92:25:31:b8:
9c:cd:e2:44:f9:9f:18:a4:f4:43:f6:b2:83:4b:94:80:98:a0:
be:e8:e1:a1:07:7d:c4:bc:35:77:e5:b0:36:44:09:82:cd:d5:
65:e3:45:8c:03:c1:75:32:50:77:65:3e:25:6b:b4:6d:43:12:
ab:57:e4:a9:83:0a:d9:3a:b4:33:a7:fe:d5:60:9e:a5:84:1f:
44:df:99:ca:2f:8e:38:e9:dd:2a:2d:e8:5e:d9:ba:4b:3a:ab:
fb:2d:6e:5a:f5:53:f0:70:1a:28:93:0e:67:bd:55:a0:f1:c8:
a7:cc:02:f8:21:16:46:c4:58:b8:25:64:cf:30:dd:5f:fc:1e:
ac:b5:1e:b5:3d:33:e2:0a:e7:d4:9d:4c:d9:46:59:57:96:69:
b6:2b:56:d2:a4:c7:71:ad:29:c5:03:ce:8d:04:2c:76:80:8d:
26:48:7a:b1:6a:8c:df:b6:e1:3a:23:94:c3:4e:2a:c0:7c:1e:
ef:1b:ba:73:69:76:25:dd:2e:6e:42:d8:93:2e:3f:36:a4:25:
ab:d8:14:b7:3b:07:8d:0f:18:3c:35:83:81:eb:d9:6a:bf:6d:
0f:d5:ca:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 14:24:27 2025 by rpki-client