Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/29VL4L5ZF2CPqvBk6eIUel0kyfU.roa
File: 29VL4L5ZF2CPqvBk6eIUel0kyfU.roa (raw, json)
Hash identifier: SczHfNpgJyk6EDir1Jy2F2ib65luo4Jhr8D/ymCCD3I=
Subject key identifier: DB:D5:4B:E0:BE:59:17:60:8F:AA:F0:64:E9:E2:14:7A:5D:24:C9:F5
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6FC63943
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/29VL4L5ZF2CPqvBk6eIUel0kyfU.roa
Signing time: Sat 05 Mar 2022 03:04:31 +0000
ROA not before: Sat 05 Mar 2022 03:04:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:17f:5809:3100/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1875261763 (0x6fc63943)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 5 03:04:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dbd54be0be5917608faaf064e9e2147a5d24c9f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:af:51:d8:8f:d6:a6:64:23:3a:22:99:5e:f0:
8c:0a:d1:66:9d:d0:ed:5f:8d:45:2e:11:b4:35:30:
85:37:53:94:da:20:fe:50:81:7a:2b:47:d1:c3:24:
b7:ed:e0:a9:2c:d2:1e:bb:9f:05:13:67:7a:2e:0a:
4f:33:cc:99:03:58:18:da:cf:f9:68:2e:89:a4:9a:
3b:18:24:69:b7:3b:86:f8:1c:6a:25:90:e0:4f:1b:
53:b6:8f:b8:5c:a6:06:a2:31:8d:c8:bb:79:3f:88:
ed:b6:00:cb:b7:c9:3c:f6:c6:e1:fd:a5:15:39:2b:
c8:86:95:8d:3b:f2:ba:cb:ac:43:63:e8:52:0f:88:
e1:9a:93:8a:81:37:47:76:13:30:6d:d6:32:4e:0f:
bb:ce:fe:39:e4:f7:d7:33:a8:6b:4a:55:d4:78:fc:
82:7e:20:e4:5e:63:e2:ef:b8:34:b5:fb:aa:1e:76:
e9:d7:25:63:b6:83:93:4f:60:aa:b8:2d:0a:0b:4f:
f0:0e:e2:b5:ec:1c:06:03:03:91:c7:17:60:4f:9f:
39:18:50:d9:75:50:51:92:cd:05:03:d1:59:ce:82:
49:b5:93:da:50:ab:db:28:35:66:c7:6b:98:72:70:
14:29:ef:b0:53:d8:95:84:93:15:7c:e3:20:fa:4f:
bf:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:D5:4B:E0:BE:59:17:60:8F:AA:F0:64:E9:E2:14:7A:5D:24:C9:F5
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/29VL4L5ZF2CPqvBk6eIUel0kyfU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
95:d0:67:5e:67:24:92:5a:6f:b2:b1:d1:2a:c3:c5:28:9f:47:
09:5d:b9:39:6a:7a:52:ee:27:a0:08:13:c6:ea:ed:59:ea:a0:
e7:57:98:e2:d2:9c:0b:c0:8c:29:c6:f9:36:9b:a9:62:e6:c3:
6e:6b:9a:a0:42:5d:48:6c:70:c7:4b:bf:83:a4:4c:11:19:22:
0c:62:d5:be:cc:e0:53:0e:af:be:46:b1:0a:d8:20:44:a5:00:
90:5d:3f:67:4c:b3:87:71:de:2b:b0:49:31:d6:4e:14:2c:65:
4a:fb:70:fd:3f:29:97:28:1d:0c:e6:fa:df:ec:5d:d9:4e:17:
1d:b7:b8:94:09:ea:d0:c9:64:de:be:39:e1:48:37:56:8f:16:
7d:76:28:fc:7a:a7:93:72:ee:fc:a1:81:3f:7f:a2:ac:17:f3:
bc:35:e8:20:77:70:a4:94:04:e5:95:fd:41:e7:5b:f9:66:39:
35:5c:61:c8:17:8b:0a:b0:08:89:fe:97:af:c7:7b:93:7d:79:
03:e2:2f:23:ae:9c:7b:35:f7:5d:4e:e1:af:10:79:43:57:26:
be:c5:6e:e7:13:39:8c:3f:fc:c1:30:fe:b9:d4:0e:15:96:5f:
cb:b5:2a:11:34:00:3e:40:a8:b5:fd:f9:6b:9c:a2:7b:43:c8:
68:55:9f:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 02:42:55 2025 by rpki-client