Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/EqJw70ZPuP4YI5x4SmzYZWarZKc.roa
File: EqJw70ZPuP4YI5x4SmzYZWarZKc.roa (raw, json)
Hash identifier: ld+uM87UIxRlJo3dlJnUcuXygF5jot1793UYS1VIB0M=
Subject key identifier: 12:A2:70:EF:46:4F:B8:FE:18:23:9C:78:4A:6C:D8:65:66:AB:64:A7
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 7576A217
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/EqJw70ZPuP4YI5x4SmzYZWarZKc.roa
Signing time: Fri 25 Mar 2022 04:10:35 +0000
ROA not before: Fri 25 Mar 2022 04:10:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:17f:87e3:2531/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1970709015 (0x7576a217)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 25 04:10:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=12a270ef464fb8fe18239c784a6cd86566ab64a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:36:5e:ae:b4:ad:be:42:46:86:eb:03:67:52:
ba:71:9e:a4:52:80:4b:51:c4:71:fc:44:8f:e8:9e:
32:46:fa:97:51:43:bf:06:dd:07:8d:7b:93:c4:25:
01:97:17:59:21:fc:10:28:b3:88:50:b3:77:41:37:
30:02:d2:b7:ae:f0:12:dd:5a:6d:3b:0f:18:cb:f3:
49:3b:5f:ce:df:fe:89:69:f5:18:f9:48:a9:d5:68:
f1:2b:f8:21:18:d0:9b:69:d4:66:72:b9:2d:17:5b:
c3:67:00:04:57:de:54:51:5e:49:50:82:17:60:de:
5c:ed:24:89:7a:e6:0a:10:63:06:6b:3e:59:e8:4a:
f2:60:e2:3b:06:b4:d7:6c:96:3b:ff:3b:7a:89:19:
7a:69:46:8f:ce:dc:ab:29:ad:c7:c2:64:8e:04:bb:
88:4e:bb:fc:9c:16:5f:ce:7b:71:c6:9d:00:79:89:
95:89:3d:9e:d5:dc:2e:0c:77:11:cb:16:0e:fb:49:
d0:cc:a4:8b:22:3d:26:5b:2e:38:a3:7f:56:14:c0:
3d:37:ea:f2:a8:a9:0b:ad:86:1b:6f:c7:fc:b1:d4:
86:c9:41:9f:83:71:d4:97:a3:b2:a8:01:ae:46:a3:
d1:48:08:93:5b:a5:19:31:45:fd:98:a7:5c:d6:04:
9f:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:A2:70:EF:46:4F:B8:FE:18:23:9C:78:4A:6C:D8:65:66:AB:64:A7
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/EqJw70ZPuP4YI5x4SmzYZWarZKc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
64:b8:bf:04:f7:42:45:57:61:dc:59:44:6d:3d:6d:42:e6:52:
48:66:13:5a:58:f5:40:00:8d:86:3e:3b:5e:08:c8:e0:a9:ca:
84:f1:10:38:dc:99:9c:d2:03:b1:20:3c:74:e3:86:26:0c:68:
04:76:0e:db:51:15:bc:9f:3b:30:ff:e9:1a:b7:51:a0:f8:f4:
09:37:52:57:e0:bd:92:69:9c:1c:8c:ea:36:dc:4e:eb:a2:a8:
4f:26:4f:bc:7d:c0:b3:2b:cb:c1:ea:5a:a9:8e:b8:d8:01:13:
4c:f8:24:84:8d:d0:ac:29:33:1a:d0:2a:86:34:63:b4:4c:3d:
51:6f:6c:4c:58:ca:3f:bf:78:28:4b:db:3d:43:c1:84:7c:db:
bc:85:a1:86:e6:8a:5a:68:fe:6a:9b:8a:cc:0f:32:96:fc:37:
50:aa:65:c6:e0:c4:e3:07:2e:d0:9c:c2:c3:19:74:d9:ec:54:
29:f1:7c:5c:f1:7e:6c:36:2d:cb:1f:be:72:90:e5:4c:c2:cb:
1b:c0:a9:4f:c0:b0:36:f1:bc:a2:c4:99:b6:2f:9a:22:db:d2:
e3:ad:8e:37:f7:9f:e5:fd:a7:1b:f2:d2:9b:99:da:84:d5:a0:
ce:d9:93:16:9a:ca:be:cd:2c:83:37:3a:99:03:cf:68:09:4c:
6a:38:a5:36
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEdXaiFzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
MjA0N2JlMTViMjc1OTAyZGNmNjE3ZGMzZDBlMTZkYzFmMzA4MDIyMB4XDTIyMDMy
NTA0MTAzNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMTJhMjcwZWY0NjRm
YjhmZTE4MjM5Yzc4NGE2Y2Q4NjU2NmFiNjRhNzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAIU2Xq60rb5CRobrA2dSunGepFKAS1HEcfxEj+ieMkb6l1FD
vwbdB417k8QlAZcXWSH8ECiziFCzd0E3MALSt67wEt1abTsPGMvzSTtfzt/+iWn1
GPlIqdVo8Sv4IRjQm2nUZnK5LRdbw2cABFfeVFFeSVCCF2DeXO0kiXrmChBjBms+
WehK8mDiOwa012yWO/87eokZemlGj87cqymtx8JkjgS7iE67/JwWX857ccadAHmJ
lYk9ntXcLgx3EcsWDvtJ0MykiyI9JlsuOKN/VhTAPTfq8qipC62GG2/H/LHUhslB
n4Nx1JejsqgBrkaj0UgIk1ulGTFF/ZinXNYEn2UCAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBQSonDvRk+4/hgjnHhKbNhlZqtkpzAfBgNVHSMEGDAWgBRyBHvhWydZAtz2
F9w9DhbcHzCAIjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2NnUjc0VnNuV1FMYzloZmNQUTRXM0I4d2dDSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWUvNzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8x
L0VxSnc3MFpQdVA0WUk1eDRTbXpZWldhclpLYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWUv
Nzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8xL2NnUjc0VnNuV1FM
YzloZmNQUTRXM0I4d2dDSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEA8EAGDAPBAIAAjAJAwcAIAEGfABk
MA0GCSqGSIb3DQEBCwUAA4IBAQBkuL8E90JFV2HcWURtPW1C5lJIZhNaWPVAAI2G
PjteCMjgqcqE8RA43Jmc0gOxIDx044YmDGgEdg7bURW8nzsw/+kat1Gg+PQJN1JX
4L2SaZwcjOo23E7roqhPJk+8fcCzK8vB6lqpjrjYARNM+CSEjdCsKTMa0CqGNGO0
TD1Rb2xMWMo/v3goS9s9Q8GEfNu8haGG5opaaP5qm4rMDzKW/DdQqmXG4MTjBy7Q
nMLDGXTZ7FQp8Xxc8X5sNi3LH75ykOVMwssbwKlPwLA28byixJm2L5oi29LjrY43
95/l/acb8tKbmdqE1aDO2ZMWmsq+zSyDNzqZA89oCUxqOKU2
-----END CERTIFICATE-----
Generated at Mon Jun 9 15:46:35 2025 by rpki-client