Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/AZ-krMbF0_NzbJ7TI6kAA_JufO0.roa
File: AZ-krMbF0_NzbJ7TI6kAA_JufO0.roa (raw, json)
Hash identifier: 1RATjjkZn9/hd6gvfs+Ip2Y399kfWr50raX8l01APCE=
Subject key identifier: 01:9F:A4:AC:C6:C5:D3:F3:73:6C:9E:D3:23:A9:00:03:F2:6E:7C:ED
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D25815E186E33F9A6C820FD48570DC6E0
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/AZ-krMbF0_NzbJ7TI6kAA_JufO0.roa
Signing time: Sat 20 Jan 2024 06:14:11 +0000
ROA not before: Sat 20 Jan 2024 06:14:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:25:81:5e:18:6e:33:f9:a6:c8:20:fd:48:57:0d:c6:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 20 06:14:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=019fa4acc6c5d3f3736c9ed323a90003f26e7ced
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:58:79:22:94:02:40:be:75:64:9c:7c:bd:f0:
be:c3:5b:c3:18:8c:16:a4:5c:f3:19:3b:2a:0f:b1:
aa:6d:ec:7a:df:92:63:84:a7:8c:80:a0:f9:47:10:
8d:2f:f5:39:27:a6:8e:38:0b:d8:8d:48:77:b0:b9:
75:9f:b3:8b:02:df:16:4b:76:c8:d5:93:7f:c1:2c:
1a:88:83:40:e9:72:96:a1:7d:e5:5b:ae:7c:31:e2:
00:d7:2e:59:5d:5e:6b:7e:d1:ea:cc:f2:59:e2:0e:
cf:10:18:b0:81:c1:02:04:8b:ce:09:ef:25:ac:94:
90:cd:0e:12:5c:31:e4:3b:5e:f7:19:4e:89:61:ef:
15:f9:06:32:1b:dd:f9:a1:c2:24:92:e3:71:85:d1:
f8:a9:12:89:3e:7e:97:ec:08:2e:7f:4a:8c:d7:c6:
38:53:9e:ce:b0:70:dd:82:49:f6:5f:ca:8c:cc:d8:
ba:4a:e2:66:5f:0e:13:93:c1:74:92:e6:a4:66:bf:
26:cd:01:18:17:cc:18:5f:5b:cb:39:24:fe:dd:7a:
f9:22:25:b7:92:07:7b:c6:87:5a:2f:12:8f:9a:f0:
35:46:20:51:3e:ea:22:ca:1e:c6:3b:09:93:ec:01:
89:17:8a:6b:86:e6:23:65:8d:2a:b8:86:6c:57:c7:
d6:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:9F:A4:AC:C6:C5:D3:F3:73:6C:9E:D3:23:A9:00:03:F2:6E:7C:ED
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/AZ-krMbF0_NzbJ7TI6kAA_JufO0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
66:2c:4f:07:ae:aa:ea:bd:17:56:4e:b4:59:11:55:33:3f:01:
79:86:7e:cc:50:c1:80:52:26:e8:14:b7:c2:2f:fd:31:7b:ff:
d7:14:14:00:21:5d:89:63:99:f5:f0:fd:0e:9e:50:28:a5:69:
76:c6:ee:64:b7:58:de:4c:7e:34:b0:50:c2:bd:c8:46:28:aa:
c5:86:8a:33:c8:be:a5:71:a8:b5:b9:f6:8c:2e:10:b0:a3:76:
70:99:42:46:2b:26:9e:95:b3:8f:fb:ae:fc:a6:4c:b5:08:bd:
08:da:cc:60:60:24:7d:14:88:4e:fb:44:e4:8c:ea:b7:4d:0c:
0c:0e:f5:75:3d:4d:f3:60:9b:c4:c4:be:f4:10:99:b8:62:23:
9c:1f:02:b2:fc:35:12:5e:a1:0c:ee:c9:7f:b7:91:47:0c:08:
91:b0:3e:0f:b4:8e:0e:61:15:6d:ae:d6:a7:3d:67:bb:98:db:
fb:bb:cb:32:e6:35:42:3f:26:29:25:09:b3:e5:90:77:eb:ee:
04:1a:15:84:ea:c0:e1:f7:49:42:b5:7d:5e:c1:a7:c5:4d:6d:
93:58:b1:5a:f7:55:7d:1b:88:36:aa:2e:55:a8:36:fa:13:b7:
18:1e:bd:99:36:c0:e9:17:a6:d6:24:79:9a:2e:6e:a7:1e:5e:
2c:5d:99:8d
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY0lgV4YbjP5psgg/UhXDcbgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwMTIwMDYxNDExWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMTlmYTRhY2M2YzVkM2YzNzM2YzllZDMyM2E5MDAwM2YyNmU3Y2VkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVh5IpQCQL51ZJx8vfC+w1vDGIwW
pFzzGTsqD7Gqbex635JjhKeMgKD5RxCNL/U5J6aOOAvYjUh3sLl1n7OLAt8WS3bI
1ZN/wSwaiINA6XKWoX3lW658MeIA1y5ZXV5rftHqzPJZ4g7PEBiwgcECBIvOCe8l
rJSQzQ4SXDHkO173GU6JYe8V+QYyG935ocIkkuNxhdH4qRKJPn6X7Aguf0qM18Y4
U57OsHDdgkn2X8qMzNi6SuJmXw4Tk8F0kuakZr8mzQEYF8wYX1vLOST+3Xr5IiW3
kgd7xodaLxKPmvA1RiBRPuoiyh7GOwmT7AGJF4prhuYjZY0quIZsV8fWdwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFAGfpKzGxdPzc2ye0yOpAAPybnztMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvQVota3JNYkYwX056Yko3VEk2a0FBX0p1Zk8wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAGYsTweuquq9F1ZOtFkR
VTM/AXmGfsxQwYBSJugUt8Iv/TF7/9cUFAAhXYljmfXw/Q6eUCilaXbG7mS3WN5M
fjSwUMK9yEYoqsWGijPIvqVxqLW59owuELCjdnCZQkYrJp6Vs4/7rvymTLUIvQja
zGBgJH0UiE77ROSM6rdNDAwO9XU9TfNgm8TEvvQQmbhiI5wfArL8NRJeoQzuyX+3
kUcMCJGwPg+0jg5hFW2u1qc9Z7uY2/u7yzLmNUI/JiklCbPlkHfr7gQaFYTqwOH3
SUK1fV7Bp8VNbZNYsVr3VX0biDaqLlWoNvoTtxgevZk2wOkXptYkeZoubqceXixd
mY0=
-----END CERTIFICATE-----
Generated at Sat Jun 7 23:25:48 2025 by rpki-client