Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/19118c-ae60-48e3-a032-f8af568563e4/1/AEzZa1GSR9iJZWczml5Ak9fPg7I.roa
File: AEzZa1GSR9iJZWczml5Ak9fPg7I.roa (raw, json)
Hash identifier: IFxtl0gExRaAaqnoGce3hsrZShiHhtddwW4BsyyczEw=
Subject key identifier: 00:4C:D9:6B:51:92:47:D8:89:65:67:33:9A:5E:40:93:D7:CF:83:B2
Certificate issuer: /CN=6647892437160dd5777ed3ed78d49bc72b5e1c5e
Certificate serial: 01915563FD9F05A744A28CA30D303445D7A4
Authority key identifier: 66:47:89:24:37:16:0D:D5:77:7E:D3:ED:78:D4:9B:C7:2B:5E:1C:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZkeJJDcWDdV3ftPteNSbxyteHF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/19118c-ae60-48e3-a032-f8af568563e4/1/AEzZa1GSR9iJZWczml5Ak9fPg7I.roa
Signing time: Thu 15 Aug 2024 09:35:01 +0000
ROA not before: Thu 15 Aug 2024 09:35:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 40934
IP address blocks: 194.69.172.0/24 maxlen: 24
194.69.174.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:55:63:fd:9f:05:a7:44:a2:8c:a3:0d:30:34:45:d7:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6647892437160dd5777ed3ed78d49bc72b5e1c5e
Validity
Not Before: Aug 15 09:35:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=004cd96b519247d8896567339a5e4093d7cf83b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:67:4f:33:ac:0c:76:b4:29:5e:fc:be:2c:5b:
fc:c1:32:16:2a:34:fe:20:6a:5e:9c:bb:99:cb:1c:
27:47:fa:7f:f4:0b:66:f2:37:24:7c:6b:f2:8d:b4:
42:f4:c6:8a:0d:89:0c:bf:cd:95:87:a4:c6:3d:50:
e7:52:1f:70:02:f4:7b:53:05:2c:48:21:5a:a0:e4:
d0:a7:63:fd:04:85:38:1b:d1:d1:99:f6:16:d9:35:
4c:6b:68:09:e8:21:e0:ce:85:7c:4a:ec:f4:4a:50:
9d:99:b4:be:91:e1:03:a0:92:04:de:2d:38:18:2d:
25:ac:d2:23:1b:8a:86:96:b8:08:09:83:d9:a4:96:
71:37:6d:7f:29:af:f6:6c:de:50:9f:36:c8:87:58:
3e:65:bf:fe:e4:38:e3:21:16:3c:65:3a:b1:1b:62:
c4:7e:40:97:a9:50:f8:52:82:44:4c:c1:81:b0:ac:
d1:c7:5c:ce:42:b0:5f:76:eb:1a:4e:ba:fb:e7:2f:
d5:79:39:85:5e:4b:85:e8:ac:4d:b1:f7:04:e8:70:
a0:ca:27:fa:11:62:a2:c3:8e:10:1c:a7:61:f8:3d:
59:69:d1:15:82:4e:44:6a:d9:2e:95:f9:e9:b5:69:
39:c9:26:a7:ed:38:a1:c3:d2:e3:b5:e4:d0:a2:63:
1a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:4C:D9:6B:51:92:47:D8:89:65:67:33:9A:5E:40:93:D7:CF:83:B2
X509v3 Authority Key Identifier:
keyid:66:47:89:24:37:16:0D:D5:77:7E:D3:ED:78:D4:9B:C7:2B:5E:1C:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZkeJJDcWDdV3ftPteNSbxyteHF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/19118c-ae60-48e3-a032-f8af568563e4/1/AEzZa1GSR9iJZWczml5Ak9fPg7I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/19118c-ae60-48e3-a032-f8af568563e4/1/ZkeJJDcWDdV3ftPteNSbxyteHF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.69.172.0/24
194.69.174.0/24
Signature Algorithm: sha256WithRSAEncryption
03:8b:60:01:8d:60:b5:15:a5:47:c0:71:c5:e7:50:b7:f0:00:
d7:03:c9:31:48:62:f3:bc:46:e0:06:37:a7:d7:6e:6b:ef:fd:
e8:37:91:56:d2:eb:0c:a3:8b:9c:1c:9d:c0:46:51:47:59:2a:
4d:42:17:7a:71:4b:13:23:35:c2:8c:49:84:bb:e6:50:31:e4:
83:aa:a2:e5:ec:d3:ff:da:60:eb:a2:d0:cf:26:4f:e1:9d:40:
7d:ff:12:da:da:59:89:be:39:4b:25:4a:fb:9d:02:28:97:6c:
44:e0:f6:52:de:b1:2e:13:7f:7a:e8:2f:e7:28:3b:4c:ab:43:
1f:9b:d3:02:59:9b:e5:a1:40:15:01:fa:09:54:64:4a:5c:0c:
2a:48:19:f1:6a:f4:d2:33:cf:ad:05:9f:e9:38:eb:63:9c:87:
4b:04:8a:b6:03:b8:00:79:85:a3:5d:3b:99:aa:ef:93:c1:69:
7b:58:3e:3d:6a:f7:52:6a:09:f7:13:e6:cf:13:3c:88:8e:e4:
bb:e1:15:0c:cb:93:de:b2:32:2a:ca:23:9a:94:4f:dd:7d:7b:
10:72:aa:6e:5e:9c:9d:51:d6:a5:a8:e8:65:82:92:db:07:96:
05:0d:61:1b:be:9e:14:a7:09:85:35:1a:bd:4f:60:5d:6d:ac:
0f:76:44:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:29:19 2025 by rpki-client