Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AZ-kwfrIsOvJcWHsWmKaqRhMuVg.roa
File: AZ-kwfrIsOvJcWHsWmKaqRhMuVg.roa (raw, json)
Hash identifier: 2+Kx5rftKgNV4FC/8jRMN4rqiWurVSnYDmRmvMRZZCw=
Subject key identifier: 01:9F:A4:C1:FA:C8:B0:EB:C9:71:61:EC:5A:62:9A:A9:18:4C:B9:58
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 748CE7FB
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AZ-kwfrIsOvJcWHsWmKaqRhMuVg.roa
Signing time: Mon 21 Mar 2022 22:10:46 +0000
ROA not before: Mon 21 Mar 2022 22:10:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:17f:87e3:2531/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1955391483 (0x748ce7fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 21 22:10:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=019fa4c1fac8b0ebc97161ec5a629aa9184cb958
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f5:da:9c:44:13:26:d2:55:82:8e:4e:9b:19:
2d:f4:a3:8b:1e:84:b4:3a:c4:eb:0a:b0:9b:91:73:
6c:00:d1:d1:9d:58:d3:b6:f6:1f:77:e6:9e:83:89:
3e:e4:a5:b9:fe:a2:0f:7c:ff:74:f9:eb:e6:37:ca:
49:a7:96:a1:f5:ad:0d:a7:c6:cd:17:cc:fa:dc:49:
0d:f3:00:f5:06:3e:15:eb:90:a8:90:01:54:95:df:
70:d7:68:c4:7a:32:bf:d9:d7:5a:65:cf:8c:9a:1c:
87:29:2c:ca:89:47:14:df:6f:46:da:0c:13:a6:6a:
38:ad:4e:ff:69:63:63:05:d0:83:a5:95:2a:e6:da:
2b:b7:d7:67:4b:9f:e9:98:cb:50:75:0c:82:52:bb:
b4:34:f4:4b:c1:05:ce:02:b0:ac:c0:e6:50:28:25:
48:9f:9f:42:5e:86:a7:d8:68:c5:8a:27:da:ac:21:
3c:3d:9d:da:8e:35:a2:0a:9e:47:b2:a8:71:9c:0c:
a2:05:30:df:e4:4d:f8:1a:8a:7d:ff:d9:af:dd:7d:
be:13:85:b5:e1:11:a6:60:de:8e:46:92:55:a6:59:
66:b5:5d:b7:c8:73:8b:66:50:79:2c:56:bc:19:a7:
e5:8c:62:92:c3:d1:49:f0:56:14:a6:0e:5d:ce:d6:
c4:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:9F:A4:C1:FA:C8:B0:EB:C9:71:61:EC:5A:62:9A:A9:18:4C:B9:58
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AZ-kwfrIsOvJcWHsWmKaqRhMuVg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
aa:7c:3f:79:d7:ae:b2:b9:7f:c7:81:40:4b:e3:de:9d:6b:af:
d6:63:3b:d6:c4:8f:c4:33:f3:2e:04:08:4e:c7:76:8b:c6:7e:
31:5a:0a:ed:4e:e0:c8:0d:62:e7:68:45:b8:f7:7d:bd:00:7a:
dc:91:78:2f:99:ed:22:b9:89:89:a0:a8:d9:f1:5e:65:fd:42:
2b:52:3d:a4:b0:0c:f8:df:7c:78:12:b8:bb:c9:1f:af:a0:ba:
30:8e:84:6d:9d:26:33:68:8b:c5:4f:93:d6:1a:ef:f7:5d:28:
78:38:67:bd:c9:51:1e:58:6a:2c:8d:b0:d6:cb:e7:9e:02:d1:
05:a0:bd:1c:d4:02:84:0c:66:ec:21:fa:26:10:31:d6:39:83:
67:0d:ed:32:ee:31:20:a3:1f:81:bb:46:76:a5:90:80:bc:7b:
1a:d3:21:ca:43:09:28:19:4d:6d:8d:d6:14:31:a4:81:37:3c:
70:e5:a1:ee:6c:9a:33:75:4d:76:48:b8:b9:86:a6:bc:d6:d6:
73:b4:c5:25:e4:ed:dc:61:8e:9d:8c:c7:7e:93:1e:d9:5c:b7:
54:59:fd:df:36:08:18:91:95:f7:8a:09:db:ed:44:39:98:28:
13:7b:af:72:b0:b6:57:65:7a:d8:38:d4:d8:59:b2:82:f5:44:
65:ac:f1:5d
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEdIzn+zANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
MjA0N2JlMTViMjc1OTAyZGNmNjE3ZGMzZDBlMTZkYzFmMzA4MDIyMB4XDTIyMDMy
MTIyMTA0NloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMDE5ZmE0YzFmYWM4
YjBlYmM5NzE2MWVjNWE2MjlhYTkxODRjYjk1ODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMX12pxEEybSVYKOTpsZLfSjix6EtDrE6wqwm5FzbADR0Z1Y
07b2H3fmnoOJPuSluf6iD3z/dPnr5jfKSaeWofWtDafGzRfM+txJDfMA9QY+FeuQ
qJABVJXfcNdoxHoyv9nXWmXPjJochyksyolHFN9vRtoME6ZqOK1O/2ljYwXQg6WV
KubaK7fXZ0uf6ZjLUHUMglK7tDT0S8EFzgKwrMDmUCglSJ+fQl6Gp9hoxYon2qwh
PD2d2o41ogqeR7KocZwMogUw3+RN+BqKff/Zr919vhOFteERpmDejkaSVaZZZrVd
t8hzi2ZQeSxWvBmn5YxiksPRSfBWFKYOXc7WxHECAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBQBn6TB+siw68lxYexaYpqpGEy5WDAfBgNVHSMEGDAWgBRyBHvhWydZAtz2
F9w9DhbcHzCAIjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2NnUjc0VnNuV1FMYzloZmNQUTRXM0I4d2dDSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWUvNzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8x
L0FaLWt3ZnJJc092SmNXSHNXbUthcVJoTXVWZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWUv
Nzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8xL2NnUjc0VnNuV1FM
YzloZmNQUTRXM0I4d2dDSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEA8EAGDAPBAIAAjAJAwcAIAEGfABk
MA0GCSqGSIb3DQEBCwUAA4IBAQCqfD95166yuX/HgUBL496da6/WYzvWxI/EM/Mu
BAhOx3aLxn4xWgrtTuDIDWLnaEW49329AHrckXgvme0iuYmJoKjZ8V5l/UIrUj2k
sAz433x4Eri7yR+voLowjoRtnSYzaIvFT5PWGu/3XSh4OGe9yVEeWGosjbDWy+ee
AtEFoL0c1AKEDGbsIfomEDHWOYNnDe0y7jEgox+Bu0Z2pZCAvHsa0yHKQwkoGU1t
jdYUMaSBNzxw5aHubJozdU12SLi5hqa81tZztMUl5O3cYY6djMd+kx7ZXLdUWf3f
NggYkZX3ignb7UQ5mCgTe69ysLZXZXrYONTYWbKC9URlrPFd
-----END CERTIFICATE-----
Generated at Thu May 1 02:52:14 2025 by rpki-client