Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/AzK3hMgxbf1LcOMAi6bqNJE9ihw.roa
File: AzK3hMgxbf1LcOMAi6bqNJE9ihw.roa (raw, json)
Hash identifier: S2Rs6dUm30p91T8xzBCZAbyLYqZrcewRyIF2AcxkIl4=
Subject key identifier: 03:32:B7:84:C8:31:6D:FD:4B:70:E3:00:8B:A6:EA:34:91:3D:8A:1C
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 0195D2C1A2566A74E66E9F015FC38EDFCDA1
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/AzK3hMgxbf1LcOMAi6bqNJE9ihw.roa
Signing time: Wed 26 Mar 2025 14:01:00 +0000
ROA not before: Wed 26 Mar 2025 14:01:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 719
IP address blocks: 192.121.144.0/24 maxlen: 24
194.71.87.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:d2:c1:a2:56:6a:74:e6:6e:9f:01:5f:c3:8e:df:cd:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Mar 26 14:01:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0332b784c8316dfd4b70e3008ba6ea34913d8a1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:db:cc:0d:0f:ae:47:5b:8f:72:bd:28:14:64:
cf:22:4b:4e:93:da:cb:e7:6a:32:64:da:9d:57:25:
48:5f:3a:61:9e:c8:c9:ca:fe:26:80:44:54:5c:89:
1e:7c:d9:ff:19:68:cc:06:f8:3e:bb:47:cd:9f:79:
c3:0d:eb:15:26:37:5d:0f:a2:99:25:f3:2c:bb:95:
4e:e3:42:a8:21:0c:a9:ec:c3:59:1c:28:36:7c:52:
a9:e1:59:ec:79:cd:28:9a:8c:f8:32:dd:9e:f0:fa:
e6:93:71:f9:04:55:c6:31:9c:0e:70:17:e9:72:4b:
28:49:d6:55:5f:21:7d:d4:17:fd:0a:3b:97:f7:da:
82:f8:b9:6f:4e:f3:4d:38:4d:b0:db:25:b4:27:8a:
4b:a9:bb:a0:29:ba:1c:fc:e3:87:36:97:b1:29:6f:
ef:75:ca:0b:54:2f:2e:82:e8:54:70:89:91:4f:59:
b5:46:98:bb:85:e6:8a:3a:00:da:61:1d:95:9e:b9:
44:ed:98:99:0b:3b:cc:da:1b:ee:b9:fe:86:cb:3f:
00:83:91:cb:91:eb:0c:46:50:cd:0c:39:b5:4f:23:
14:39:a4:75:4f:7a:f5:7c:06:30:ed:8c:93:6f:90:
3f:e4:f2:17:f9:a7:1a:4c:81:e6:bd:83:91:4b:ac:
5a:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:32:B7:84:C8:31:6D:FD:4B:70:E3:00:8B:A6:EA:34:91:3D:8A:1C
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/AzK3hMgxbf1LcOMAi6bqNJE9ihw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.121.144.0/24
194.71.87.0/24
Signature Algorithm: sha256WithRSAEncryption
00:5a:3b:36:c6:fa:21:83:f8:f5:6f:f1:bb:5e:d8:cd:85:fe:
c0:11:d7:80:2d:91:b2:50:ce:71:a6:98:51:99:07:e0:75:d5:
76:3d:0e:4f:17:27:8d:7d:72:c0:f5:8f:43:ad:b9:41:86:7c:
60:6f:91:ea:98:95:e6:06:21:89:52:b6:c7:6d:b0:ef:aa:43:
29:ea:00:69:cd:15:50:5a:0d:ee:19:89:34:76:63:69:51:62:
f9:09:b0:ba:c9:a2:b6:28:ee:02:f1:df:e7:c2:6c:6f:6f:2b:
c4:50:52:17:9f:87:f2:0c:13:27:c6:5d:93:dd:76:51:94:93:
14:08:84:40:b1:46:a2:9b:5e:2e:c7:c9:71:9a:e1:44:ab:5c:
b0:fe:c6:66:27:36:38:30:f2:cc:a3:ad:f2:ba:a6:ff:49:dc:
92:a0:e1:89:5c:e7:1d:ae:3e:7d:b6:d7:c7:be:63:7b:f2:47:
91:20:78:03:3d:47:71:19:9a:bf:3d:8a:3d:8f:45:17:f2:bd:
94:bf:e9:3a:06:67:0a:88:da:81:0a:1d:ae:36:14:a1:b7:5f:
b2:53:b9:05:74:86:6d:79:68:35:d4:0c:95:ad:c8:61:9e:10:
62:08:45:95:0c:7f:f7:11:13:13:e6:01:28:73:07:9a:3d:3f:
da:a9:82:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 15:17:45 2025 by rpki-client