Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/EqT29vTBiW4xSJsx1svbThOpw3s.roa
File: EqT29vTBiW4xSJsx1svbThOpw3s.roa (raw, json)
Hash identifier: OuA3ecTU1bW2EY/uUvoTGtbyv66p6SETFeAkspEXQ+s=
Subject key identifier: 12:A4:F6:F6:F4:C1:89:6E:31:48:9B:31:D6:CB:DB:4E:13:A9:C3:7B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01869AE9E80AC0F415425B2C9D55C0F62245
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/EqT29vTBiW4xSJsx1svbThOpw3s.roa
Signing time: Wed 01 Mar 2023 02:04:25 +0000
ROA not before: Wed 01 Mar 2023 02:04:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9ae9:ad2e/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:9a:e9:e8:0a:c0:f4:15:42:5b:2c:9d:55:c0:f6:22:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 1 02:04:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=12a4f6f6f4c1896e31489b31d6cbdb4e13a9c37b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:f2:9a:11:b6:a8:b0:bb:08:0e:42:07:db:2b:
32:ff:99:89:f1:75:9a:35:d2:13:3a:7a:36:75:0b:
1b:5c:47:95:bf:6e:96:57:75:5f:2a:2e:95:aa:41:
63:b4:e7:79:4e:41:f1:40:b3:b3:2c:ea:7b:03:0e:
db:5e:85:52:72:5e:22:af:d8:15:58:98:d9:4a:8a:
f0:de:d3:05:be:ba:b1:00:1d:42:0a:51:c7:1d:54:
3f:1d:b5:fa:be:b6:b2:ae:40:46:54:dd:09:b9:9b:
9a:aa:d6:26:76:99:0d:01:9e:ef:06:ad:90:d9:41:
4f:aa:a7:a1:13:e8:bf:72:94:82:b6:f4:32:41:c8:
57:c0:a2:57:18:90:57:77:22:54:0f:cb:8b:b9:c4:
3b:ea:c3:18:35:84:6c:99:c6:22:66:7b:a4:66:85:
ad:6a:e4:35:ac:15:2d:d2:7f:33:d3:29:13:bf:f4:
2a:a8:54:0b:55:9d:9c:66:cd:50:4b:02:9d:1d:ef:
f3:41:d7:51:4f:be:97:ca:64:d2:87:da:f0:b9:f7:
96:79:79:8d:e3:b5:8a:b4:00:20:ba:a8:61:3a:07:
95:7a:43:0b:32:22:83:9d:38:79:92:76:2f:98:dc:
cb:f1:f0:e3:38:16:0b:8e:3e:c4:2b:4a:24:e6:e8:
d6:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:A4:F6:F6:F4:C1:89:6E:31:48:9B:31:D6:CB:DB:4E:13:A9:C3:7B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/EqT29vTBiW4xSJsx1svbThOpw3s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
44:9c:4f:61:a7:18:53:96:c3:c8:b1:b2:da:fe:94:59:8f:f0:
bd:d5:04:56:14:ee:b2:71:75:f7:f8:49:d0:f8:0f:c9:b1:f8:
06:41:2a:04:82:2b:cd:85:63:e5:31:64:36:98:ff:18:8b:40:
52:6f:28:5f:bb:b1:5d:b5:05:6b:1e:d1:b2:29:28:09:09:df:
91:95:57:e1:b1:b3:8c:ee:8e:0d:94:2b:0b:b5:45:2d:a6:8c:
7c:97:71:bc:b5:65:fb:1c:ee:8d:20:26:6b:17:ac:e0:45:e4:
7a:44:22:81:31:ce:2e:86:d3:db:f8:ec:31:84:a1:7a:6c:bd:
d1:e9:c5:48:97:11:8f:2f:e1:e3:05:e6:e1:c9:f3:34:e7:e2:
a5:66:27:47:23:62:20:09:19:5d:8d:ce:42:ba:16:80:99:48:
d0:be:70:a9:f0:44:93:d5:95:59:73:b1:df:a7:c9:ad:8b:6c:
1d:03:f9:c0:33:11:f3:d9:80:c1:4d:e1:9d:2e:27:23:25:13:
59:0f:53:05:6e:24:b7:e8:a8:b6:5a:96:f2:03:99:2c:21:bd:
5c:8f:10:23:73:d4:39:d9:bc:66:38:c9:e5:f5:cd:67:24:cd:
97:a9:82:27:67:a6:73:86:65:ce:06:e0:c2:17:98:76:d1:e4:
f5:09:c1:d8
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYaa6egKwPQVQlssnVXA9iJFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMzAxMDIwNDI1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMmE0ZjZmNmY0YzE4OTZlMzE0ODliMzFkNmNiZGI0ZTEzYTljMzdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgvKaEbaosLsIDkIH2ysy/5mJ8XWa
NdITOno2dQsbXEeVv26WV3VfKi6VqkFjtOd5TkHxQLOzLOp7Aw7bXoVScl4ir9gV
WJjZSorw3tMFvrqxAB1CClHHHVQ/HbX6vrayrkBGVN0JuZuaqtYmdpkNAZ7vBq2Q
2UFPqqehE+i/cpSCtvQyQchXwKJXGJBXdyJUD8uLucQ76sMYNYRsmcYiZnukZoWt
auQ1rBUt0n8z0ykTv/QqqFQLVZ2cZs1QSwKdHe/zQddRT76XymTSh9rwufeWeXmN
47WKtAAguqhhOgeVekMLMiKDnTh5knYvmNzL8fDjOBYLjj7EK0ok5ujW9wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFBKk9vb0wYluMUibMdbL204TqcN7MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvRXFUMjl2VEJpVzR4U0pzeDFzdmJUaE9wdzNzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAEScT2GnGFOWw8ixstr+
lFmP8L3VBFYU7rJxdff4SdD4D8mx+AZBKgSCK82FY+UxZDaY/xiLQFJvKF+7sV21
BWse0bIpKAkJ35GVV+Gxs4zujg2UKwu1RS2mjHyXcby1Zfsc7o0gJmsXrOBF5HpE
IoExzi6G09v47DGEoXpsvdHpxUiXEY8v4eMF5uHJ8zTn4qVmJ0cjYiAJGV2NzkK6
FoCZSNC+cKnwRJPVlVlzsd+nya2LbB0D+cAzEfPZgMFN4Z0uJyMlE1kPUwVuJLfo
qLZalvIDmSwhvVyPECNz1DnZvGY4yeX1zWckzZepgidnpnOGZc4G4MIXmHbR5PUJ
wdg=
-----END CERTIFICATE-----
Generated at Wed Apr 30 21:16:55 2025 by rpki-client