Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/29af59-0b7b-4d80-8f9f-14d02e30d227/1/5czwI2vRZo_4RHYYIBLuZDnwkFw.roa
File: 5czwI2vRZo_4RHYYIBLuZDnwkFw.roa (raw, json)
Hash identifier: Y+z4NR6rDFuIHUPPqp6joY0nBRmymT8v6DqXJhnQC6I=
Subject key identifier: E5:CC:F0:23:6B:D1:66:8F:F8:44:76:18:20:12:EE:64:39:F0:90:5C
Certificate issuer: /CN=e87cc680c85983e7bf74498d0e6be800f86451c3
Certificate serial: 019B6962512F67B5F42A143309E9C0CC9800
Authority key identifier: E8:7C:C6:80:C8:59:83:E7:BF:74:49:8D:0E:6B:E8:00:F8:64:51:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6HzGgMhZg-e_dEmNDmvoAPhkUcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/29af59-0b7b-4d80-8f9f-14d02e30d227/1/5czwI2vRZo_4RHYYIBLuZDnwkFw.roa
Signing time: Mon 29 Dec 2025 09:13:29 +0000
ROA not before: Mon 29 Dec 2025 09:13:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19905
IP address blocks: 64.253.32.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:69:62:51:2f:67:b5:f4:2a:14:33:09:e9:c0:cc:98:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e87cc680c85983e7bf74498d0e6be800f86451c3
Validity
Not Before: Dec 29 09:13:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e5ccf0236bd1668ff84476182012ee6439f0905c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:7c:fd:26:00:ad:81:8b:91:58:97:87:19:0f:
c2:e7:89:2b:0d:b4:ba:26:b2:6f:6e:6a:d6:b3:33:
0a:39:2e:b2:e2:d5:fd:fa:e8:f1:04:1d:74:36:20:
db:15:82:c4:20:20:27:13:c9:27:45:b9:9e:fe:2b:
fa:75:b7:e9:ab:1d:0b:ee:28:fa:4a:6b:76:33:85:
cc:c4:86:d7:95:07:60:f0:c4:69:34:90:b3:12:32:
a1:46:19:9d:b8:5e:20:15:00:69:f9:13:3e:6a:00:
3c:ed:e3:7d:92:30:7a:a1:14:2f:9c:ad:2f:ad:d5:
00:cf:14:63:02:ef:24:3b:8a:0b:86:94:98:71:cd:
d2:35:3e:63:1e:af:c3:4f:13:3d:01:c5:3f:08:dc:
24:11:db:0c:37:7b:9f:01:3b:49:39:6a:ed:28:81:
66:c1:83:14:01:37:a1:f2:0e:eb:ea:be:e4:9c:57:
6f:db:46:9b:46:e5:0f:38:9c:e8:59:3f:f8:85:dd:
7f:0d:ef:4d:52:6a:86:9f:c7:1e:9a:cd:88:2b:c4:
b3:d3:3f:59:96:20:dd:d7:2b:45:e3:e0:1a:a1:92:
ba:4c:cf:22:a5:fc:9e:83:d4:c2:59:42:7f:98:e9:
7c:1a:44:46:2c:75:4f:e6:44:c5:7f:ac:7d:88:d8:
b5:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:CC:F0:23:6B:D1:66:8F:F8:44:76:18:20:12:EE:64:39:F0:90:5C
X509v3 Authority Key Identifier:
keyid:E8:7C:C6:80:C8:59:83:E7:BF:74:49:8D:0E:6B:E8:00:F8:64:51:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6HzGgMhZg-e_dEmNDmvoAPhkUcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/29af59-0b7b-4d80-8f9f-14d02e30d227/1/5czwI2vRZo_4RHYYIBLuZDnwkFw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/29af59-0b7b-4d80-8f9f-14d02e30d227/1/6HzGgMhZg-e_dEmNDmvoAPhkUcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.253.32.0/19
Signature Algorithm: sha256WithRSAEncryption
36:76:a0:4a:79:ee:31:c5:88:08:a3:92:5e:fa:c4:e2:38:fe:
ff:84:17:ea:b1:68:29:a0:a9:5e:33:0b:ae:df:dc:ff:35:ed:
ac:b0:ef:81:9e:41:5c:e4:0a:92:48:33:e1:40:8f:d0:ac:fc:
c9:46:ae:87:51:7d:e6:6a:4e:6c:c3:05:db:55:77:4f:bf:f8:
6b:e1:d4:5d:7c:e2:0e:c0:f2:e7:58:58:06:73:36:01:ce:be:
44:7e:76:ea:5c:c8:a6:24:04:1b:13:65:7a:d7:c9:bc:d3:4d:
4c:36:45:55:a3:ba:35:d5:ae:34:65:58:cd:dd:d8:9d:34:11:
80:a5:99:47:5d:ec:05:e5:52:5b:ca:41:fd:69:c8:1e:7e:54:
8b:9e:7c:c6:cc:63:ee:4b:26:5b:69:3f:86:f6:e8:29:24:a7:
aa:43:68:15:b4:4e:48:0e:fa:d8:4b:f5:0d:02:86:f8:29:1b:
36:9d:34:45:72:5e:22:b4:33:9b:ea:a8:65:30:12:55:7d:53:
f7:e0:9b:d5:ec:26:95:69:b6:63:2e:53:a0:1b:37:a8:78:b8:
6a:67:67:72:51:98:41:10:77:d8:db:74:74:ac:e7:9f:61:5f:
59:02:60:e7:ea:d8:d3:6f:8c:9a:e4:a8:89:a1:7c:72:c7:b4:
09:56:fe:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:38:10 2026 by rpki-client