Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/f0d853-42cc-4a17-81a1-bae1d9eec41a/1/EQPOhUSrp_265j0O-uMyhE9jt_I.roa
File: EQPOhUSrp_265j0O-uMyhE9jt_I.roa (raw, json)
Hash identifier: rrM5XgLKkJnvxVqnAYFYnHJh7gl05YTg1NaJpYIDwHg=
Subject key identifier: 11:03:CE:85:44:AB:A7:FD:BA:E6:3D:0E:FA:E3:32:84:4F:63:B7:F2
Certificate issuer: /CN=57c7be29ec13b0ab01897411e86ecf8b0f3b344a
Certificate serial: 019421B1E3A13C3560EE0B917A77AEBAD32C
Authority key identifier: 57:C7:BE:29:EC:13:B0:AB:01:89:74:11:E8:6E:CF:8B:0F:3B:34:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8e-KewTsKsBiXQR6G7Piw87NEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/f0d853-42cc-4a17-81a1-bae1d9eec41a/1/EQPOhUSrp_265j0O-uMyhE9jt_I.roa
Signing time: Wed 01 Jan 2025 11:48:13 +0000
ROA not before: Wed 01 Jan 2025 11:48:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49821
IP address blocks: 194.1.232.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:e3:a1:3c:35:60:ee:0b:91:7a:77:ae:ba:d3:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57c7be29ec13b0ab01897411e86ecf8b0f3b344a
Validity
Not Before: Jan 1 11:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1103ce8544aba7fdbae63d0efae332844f63b7f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:29:05:d0:a4:7f:31:6e:64:5d:4d:d6:38:c7:
c1:f5:86:17:5e:10:ad:7d:cf:c7:6a:b7:11:05:32:
d4:18:5a:3c:f3:e6:de:50:f8:ef:c4:ff:f8:0e:f8:
9d:b8:15:f6:39:4e:52:4f:b0:96:b5:8f:b5:e0:a7:
85:6e:e0:b4:26:46:63:fb:7f:28:92:89:80:4c:e5:
43:2c:1c:6e:34:d5:16:d4:9b:b5:3e:6d:1a:4e:ef:
a5:cd:b2:92:69:0e:bb:cf:c9:1e:14:82:6e:a3:d3:
0c:d4:2c:3f:23:4a:26:5a:30:11:7f:c7:81:c6:34:
28:f1:59:df:c9:e8:86:7e:ce:bb:d0:6d:76:b2:5f:
11:b0:25:0c:3a:d1:a8:f6:6d:eb:46:a1:0a:01:d4:
94:d3:bd:74:0b:f5:6d:45:3e:e5:c8:a7:d5:f4:f7:
ad:6d:54:16:fd:2c:30:66:76:73:88:00:d9:4b:5d:
3b:68:e7:2e:95:f0:95:c0:52:4a:5c:3d:8c:9e:05:
38:1e:9a:50:f6:56:86:9e:83:9b:78:71:fd:4b:b0:
37:2b:1b:72:12:7e:27:d4:cc:73:e9:0e:48:1a:cb:
c1:85:28:2a:a1:dd:fd:75:24:06:c9:49:ef:a4:2b:
9c:5c:7c:b6:e7:15:c0:4d:28:b2:b0:5b:fd:55:ba:
e6:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:03:CE:85:44:AB:A7:FD:BA:E6:3D:0E:FA:E3:32:84:4F:63:B7:F2
X509v3 Authority Key Identifier:
keyid:57:C7:BE:29:EC:13:B0:AB:01:89:74:11:E8:6E:CF:8B:0F:3B:34:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8e-KewTsKsBiXQR6G7Piw87NEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/f0d853-42cc-4a17-81a1-bae1d9eec41a/1/EQPOhUSrp_265j0O-uMyhE9jt_I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/f0d853-42cc-4a17-81a1-bae1d9eec41a/1/V8e-KewTsKsBiXQR6G7Piw87NEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.1.232.0/22
Signature Algorithm: sha256WithRSAEncryption
79:be:2c:60:d3:ab:bc:6e:51:2c:2a:49:64:ec:fd:55:fb:2b:
01:e7:ba:69:c3:f5:44:de:e6:54:84:1e:91:ec:92:a6:0d:85:
5e:d3:13:23:7b:e3:05:e8:e3:68:aa:c9:03:4a:85:29:56:19:
3e:cd:76:fb:ef:81:7e:1c:7d:a4:59:2c:b4:30:69:27:32:63:
fd:d2:7c:fe:c2:07:f6:a5:c4:7f:24:33:97:5d:56:43:c0:5d:
cd:e0:5a:bb:d7:6b:fa:5e:d8:6d:a6:01:bb:28:2a:94:ea:89:
f0:09:78:50:dc:7f:cb:99:57:47:0f:17:2f:80:37:de:0c:bb:
bd:87:87:85:fb:73:61:fc:95:fc:17:19:79:48:59:a0:7f:0e:
cd:4c:a1:0d:fb:24:51:c4:48:fc:44:47:52:f6:87:33:66:dd:
fa:6d:de:90:f4:e3:22:84:d9:95:bb:4e:85:e3:a7:0b:01:d0:
ee:18:76:3a:12:73:88:c3:72:75:7a:ab:51:0d:29:b9:f2:e8:
f2:98:c6:c2:f7:db:a1:f5:1d:33:5e:a5:4d:1d:f1:76:3e:a9:
d1:9e:93:43:3a:de:c0:6f:b1:a9:40:8a:a6:a6:1d:af:08:ba:
17:5b:fe:c7:21:23:53:aa:0b:4f:13:25:75:bf:82:b9:a0:c5:
1b:59:d8:44
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQhseOhPDVg7guReneuutMsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3YzdiZTI5ZWMxM2IwYWIwMTg5NzQxMWU4NmVjZjhiMGYz
YjM0NGEwHhcNMjUwMTAxMTE0ODEzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMTAzY2U4NTQ0YWJhN2ZkYmFlNjNkMGVmYWUzMzI4NDRmNjNiN2YyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmykF0KR/MW5kXU3WOMfB9YYXXhCt
fc/HarcRBTLUGFo88+beUPjvxP/4DviduBX2OU5ST7CWtY+14KeFbuC0JkZj+38o
komATOVDLBxuNNUW1Ju1Pm0aTu+lzbKSaQ67z8keFIJuo9MM1Cw/I0omWjARf8eB
xjQo8VnfyeiGfs670G12sl8RsCUMOtGo9m3rRqEKAdSU0710C/VtRT7lyKfV9Pet
bVQW/SwwZnZziADZS107aOculfCVwFJKXD2MngU4HppQ9laGnoObeHH9S7A3Kxty
En4n1Mxz6Q5IGsvBhSgqod39dSQGyUnvpCucXHy25xXATSiysFv9VbrmkQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBEDzoVEq6f9uuY9DvrjMoRPY7fyMB8GA1UdIwQY
MBaAFFfHvinsE7CrAYl0Eehuz4sPOzRKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjhlLUtld1RzS3NCaVhRUjZHN1Bpdzg3TkVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9mMGQ4NTMtNDJjYy00YTE3LTgxYTEt
YmFlMWQ5ZWVjNDFhLzEvRVFQT2hVU3JwXzI2NWowTy11TXloRTlqdF9JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9mMGQ4NTMtNDJjYy00YTE3LTgxYTEtYmFlMWQ5ZWVjNDFh
LzEvVjhlLUtld1RzS3NCaVhRUjZHN1Bpdzg3TkVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwgHoMA0G
CSqGSIb3DQEBCwUAA4IBAQB5vixg06u8blEsKklk7P1V+ysB57ppw/VE3uZUhB6R
7JKmDYVe0xMje+MF6ONoqskDSoUpVhk+zXb774F+HH2kWSy0MGknMmP90nz+wgf2
pcR/JDOXXVZDwF3N4Fq712v6XthtpgG7KCqU6onwCXhQ3H/LmVdHDxcvgDfeDLu9
h4eF+3Nh/JX8Fxl5SFmgfw7NTKEN+yRRxEj8REdS9oczZt36bd6Q9OMihNmVu06F
46cLAdDuGHY6EnOIw3J1eqtRDSm58ujymMbC99uh9R0zXqVNHfF2PqnRnpNDOt7A
b7GpQIqmph2vCLoXW/7HISNTqgtPEyV1v4K5oMUbWdhE
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:47:56 2025 by rpki-client