Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AzDSUJUYMBRXyNNelGIQlzGVAHM.roa
File: AzDSUJUYMBRXyNNelGIQlzGVAHM.roa (raw, json)
Hash identifier: lABwyLM0iMtd4lfw6esunOsh82iL5AkWiCICN8lS+bo=
Subject key identifier: 03:30:D2:50:95:18:30:14:57:C8:D3:5E:94:62:10:97:31:95:00:73
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 857EC95C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AzDSUJUYMBRXyNNelGIQlzGVAHM.roa
Signing time: Thu 19 May 2022 16:12:29 +0000
ROA not before: Thu 19 May 2022 16:12:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:a810:6542/128 maxlen: 128
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:8961:505f/128 maxlen: 128
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2239678812 (0x857ec95c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 19 16:12:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0330d2509518301457c8d35e9462109731950073
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:20:12:94:6d:dc:ff:c6:e8:92:28:3a:9a:f7:
13:f6:f4:7e:b1:9f:e0:58:38:ba:e3:32:7b:ef:51:
1d:42:09:b5:45:b9:a3:14:ac:c3:98:b6:c8:1f:16:
b2:11:c9:06:1b:77:74:c8:66:5a:9f:da:87:f4:a2:
e2:d4:33:72:7a:f6:fe:77:e9:65:18:5f:11:ca:cc:
4b:15:46:2b:e7:83:60:14:b1:e4:e4:ff:33:63:b8:
1a:9e:c5:c0:84:97:55:2b:c1:01:0b:5d:5c:db:a0:
80:ca:03:bb:c3:f0:0a:73:db:85:13:a5:c4:f3:63:
27:aa:b5:c0:d1:12:f4:a2:37:cf:8d:b8:2f:ea:8e:
f3:58:40:f8:6e:8b:8d:01:fb:4e:ba:fb:82:e9:97:
1d:b3:c6:de:69:d7:eb:0c:d8:72:0f:01:0e:f7:28:
9b:5b:61:66:c4:cf:48:5b:14:97:d6:c8:b4:30:97:
d3:f1:06:48:2e:7a:91:36:df:50:66:b3:8e:ac:c4:
3f:d0:cf:27:f9:3c:34:b2:8e:bf:3c:5d:0b:dd:fc:
91:ca:95:70:b6:84:8a:61:f5:28:5f:49:c7:04:63:
25:2f:b3:27:b8:04:f1:cf:31:38:20:3a:b5:4f:e8:
62:f2:b1:4c:54:93:c6:bc:74:27:77:68:98:8c:e3:
77:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:30:D2:50:95:18:30:14:57:C8:D3:5E:94:62:10:97:31:95:00:73
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AzDSUJUYMBRXyNNelGIQlzGVAHM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
27:7f:0a:51:5c:d6:9c:d4:06:c2:63:86:e5:e2:97:5e:e3:b8:
be:25:0c:ed:8b:f5:33:c0:56:f7:6b:6a:ae:0d:1c:61:52:fa:
a3:ed:ed:ae:03:64:d1:ea:bb:db:9b:ef:f7:69:b8:06:eb:9b:
22:8d:7a:67:88:8e:63:e7:19:ad:ba:a4:0d:18:11:f2:bd:86:
c1:27:d6:8b:ac:a2:32:9a:d0:f1:aa:35:9d:6d:0a:3c:05:62:
13:90:7a:f8:ee:19:ac:6e:b4:43:fa:2d:c1:76:95:6a:63:cf:
e2:22:5b:2d:ba:7c:3c:12:a3:04:e9:ec:08:03:9d:f5:59:fb:
61:ec:42:34:b1:30:17:cf:46:54:dd:5a:94:e4:0b:ef:f6:cb:
e3:5b:92:11:f4:aa:cc:a4:bd:54:4a:56:eb:53:5d:0c:03:6a:
b7:9e:24:e9:62:55:a4:c6:0b:07:fa:81:d3:95:64:47:9a:fc:
59:2b:14:6e:51:b1:a2:b2:3c:20:71:08:a1:26:5f:97:f8:ee:
17:1d:04:7a:4e:11:4f:67:bd:0c:0a:da:53:e1:32:96:97:71:
4c:cb:47:c7:fe:ff:40:fa:07:e1:a1:2f:65:af:34:7c:39:05:
4f:25:c1:f8:a3:fd:9d:82:1d:31:d6:0f:fe:42:99:1e:30:f3:
3d:e6:15:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 02:58:53 2025 by rpki-client