Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/29VLmOAV6TskDBLnSfNsXk3zePk.roa
File: 29VLmOAV6TskDBLnSfNsXk3zePk.roa (raw, json)
Hash identifier: UOxkOHNH5Dg056rJu1+aipm0epFVlrBnGNFaBo0jza0=
Subject key identifier: DB:D5:4B:98:E0:15:E9:3B:24:0C:12:E7:49:F3:6C:5E:4D:F3:78:F9
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01889253FAD96A7F9D3FADBA2BA0159E675A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/29VLmOAV6TskDBLnSfNsXk3zePk.roa
Signing time: Tue 06 Jun 2023 20:09:17 +0000
ROA not before: Tue 06 Jun 2023 20:09:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:92:53:fa:d9:6a:7f:9d:3f:ad:ba:2b:a0:15:9e:67:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 6 20:09:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dbd54b98e015e93b240c12e749f36c5e4df378f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:2e:8e:f5:da:d2:22:80:82:79:d5:e8:dc:44:
ef:32:c4:c6:c9:f4:aa:7c:a5:ba:5b:a0:6b:97:4d:
ee:df:e0:e0:79:3b:2b:a9:ed:14:7f:95:04:ee:c3:
8a:69:c2:e7:30:bb:81:da:67:db:d1:6c:1e:d8:ea:
3a:6c:0e:d2:39:24:1c:b7:97:9e:25:fa:63:69:80:
63:49:c5:78:4a:19:18:f5:99:d5:34:ff:3c:30:92:
3e:c0:fc:44:30:f2:b4:b6:a5:87:1e:f2:18:60:0f:
d5:b2:9e:13:1f:d7:2b:30:63:2e:8f:c4:25:7e:39:
de:df:ef:84:6b:fa:26:87:22:8e:08:36:24:5a:f2:
19:ae:8b:32:8f:9e:d9:fb:bf:ab:87:ff:b9:93:9f:
81:65:de:39:e4:03:d5:0c:35:05:f2:6c:e9:e9:a5:
e8:c1:b9:d4:2e:41:81:90:c1:0c:c2:d5:e8:3b:ff:
8f:3b:80:72:d8:44:eb:99:7f:6d:9e:04:1a:d5:8e:
8f:69:e2:e5:31:e0:c4:a1:a7:0b:1b:2c:02:f5:86:
91:5e:15:1d:d9:ad:c9:9a:73:e9:6f:11:a5:f2:d6:
44:34:45:8c:e1:e5:3a:e1:1c:5f:5b:e7:c8:57:8d:
2c:d8:c1:76:b5:d5:85:69:d4:db:c7:c5:61:5b:f5:
92:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:D5:4B:98:E0:15:E9:3B:24:0C:12:E7:49:F3:6C:5E:4D:F3:78:F9
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/29VLmOAV6TskDBLnSfNsXk3zePk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
28:c6:e3:a9:25:1d:b5:91:8e:92:86:01:4e:81:1c:ed:ca:bb:
77:28:ee:ff:1b:16:dc:06:a0:f9:94:db:ca:1c:da:60:92:f4:
7e:0c:dd:94:f8:af:c2:a6:ba:f7:8c:cc:44:fb:e0:a6:fa:37:
af:6b:99:42:a5:ae:6c:56:c2:73:8a:31:57:47:e3:15:2c:19:
2b:7c:66:ad:63:66:5d:60:37:f7:55:34:22:43:ab:06:41:e2:
5d:0b:4b:3e:cc:75:36:d6:e5:e9:03:63:bd:93:8a:d9:5f:15:
18:fc:a0:47:b5:b3:17:1e:42:0b:e6:95:a2:f8:4a:74:ca:70:
c6:4d:57:62:20:c9:5b:5e:94:0b:a7:06:b8:6c:c4:fd:24:22:
e0:9a:71:02:f8:41:be:d2:de:bb:2c:6e:9b:c2:4c:a8:4f:40:
14:c0:aa:bf:95:4c:f5:e4:47:25:55:69:e6:f7:fd:a1:12:b8:
29:fb:7d:6a:bd:91:55:ea:1c:4f:50:04:48:e3:d9:4e:00:82:
7d:9f:af:ef:cc:b9:e7:b3:51:98:db:d8:81:13:81:3a:ae:b7:
0d:97:02:e1:05:7b:36:63:b0:1e:e6:bc:11:da:dd:54:2d:4c:
b2:4a:49:3e:75:d1:ba:d2:8a:7e:3a:bd:88:74:a7:4d:41:83:
60:15:aa:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 22:02:47 2025 by rpki-client