Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/AZTESLYY-mvlV0veUW4ZBWEzm8g.roa
File: AZTESLYY-mvlV0veUW4ZBWEzm8g.roa (raw, json)
Hash identifier: ciMWe1lrVuJefVZEepfsD7kzpuER+m7qCEup6vMAnls=
Subject key identifier: 01:94:C4:48:B6:18:FA:6B:E5:57:4B:DE:51:6E:19:05:61:33:9B:C8
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 01941FFA6A6490C01E27F7AAA2C989947829
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/AZTESLYY-mvlV0veUW4ZBWEzm8g.roa
Signing time: Wed 01 Jan 2025 03:48:12 +0000
ROA not before: Wed 01 Jan 2025 03:48:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200436
IP address blocks: 5.57.32.0/24 maxlen: 24
5.57.39.0/24 maxlen: 24
185.212.49.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:6a:64:90:c0:1e:27:f7:aa:a2:c9:89:94:78:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Jan 1 03:48:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0194c448b618fa6be5574bde516e190561339bc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:7c:9b:49:79:c0:bc:36:51:47:d7:57:29:47:
b4:09:9c:f2:60:49:65:ac:b4:d6:b3:4e:7c:d0:9e:
b9:62:14:32:6a:49:da:78:3f:7a:d1:d5:fa:49:65:
fb:0d:51:97:ba:44:96:62:1f:02:ca:a6:32:9b:b0:
c0:7d:8a:92:58:02:db:a3:8e:d2:a7:dd:5d:6a:59:
95:a5:87:7d:bc:68:b2:84:76:6f:12:c1:e7:ee:6d:
bf:50:b4:9e:4e:04:7a:78:e2:1e:57:05:bc:c7:74:
cd:68:17:89:e7:d2:3f:e6:f8:64:62:91:30:76:bc:
55:0f:28:74:58:25:4b:23:ec:c0:03:7d:18:53:60:
76:8c:07:f2:b7:48:dd:42:8a:cb:a9:b1:ed:42:bd:
c3:14:b1:fe:a1:76:0e:8a:50:08:69:16:aa:4f:16:
0c:3c:39:a0:75:0b:34:65:19:26:09:14:95:c8:3b:
43:ee:b3:8f:36:d5:a6:e1:83:02:1b:60:b2:42:43:
ce:87:28:bc:94:2d:f9:84:09:6a:65:b6:ec:68:6c:
91:12:6b:67:17:c9:69:4b:4e:e6:90:78:8d:7d:31:
79:d6:5e:5a:de:47:87:96:41:56:c2:e2:fc:5c:21:
69:18:84:a5:fa:fd:1d:17:c1:e0:01:98:77:fc:21:
6a:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:94:C4:48:B6:18:FA:6B:E5:57:4B:DE:51:6E:19:05:61:33:9B:C8
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/AZTESLYY-mvlV0veUW4ZBWEzm8g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.57.32.0/24
5.57.39.0/24
185.212.49.0/24
Signature Algorithm: sha256WithRSAEncryption
d2:42:dc:fb:73:56:f2:ca:b9:cd:d3:b6:a5:71:15:ac:24:d5:
fe:89:f2:e3:29:eb:06:35:a7:e5:31:c5:8c:ea:a1:2d:48:8f:
3d:0f:25:68:80:be:0d:01:7b:4a:fd:f4:48:d4:98:68:37:36:
99:d1:88:ca:73:05:ab:8a:1a:10:d5:d5:9d:28:b7:57:81:4a:
1b:6d:c6:cc:b7:b2:e6:60:23:18:dd:6c:f3:91:20:c7:3e:c8:
96:0b:02:c8:e5:bd:f3:09:8e:50:0d:a2:ce:5b:fc:a7:51:5a:
69:5f:95:4f:01:8c:2d:4d:0c:13:e7:f9:ec:04:50:1a:48:95:
a6:c5:74:76:2a:e9:1a:af:3c:9b:33:dd:4f:10:e5:1c:90:f7:
73:a4:61:b2:53:cc:d0:c7:28:51:03:cc:4e:b9:0a:f4:4c:8e:
77:61:b3:21:2e:3a:a6:52:11:fe:f6:c0:ab:df:00:74:37:3a:
6a:d2:8f:07:dc:c7:67:b0:b5:7f:a4:f5:66:7e:ae:cb:8f:a6:
8d:dc:51:7c:59:b0:76:f3:0f:f2:6b:ea:ea:74:61:a2:9f:99:
eb:08:2c:88:e0:cf:f7:89:8b:0c:75:71:21:06:11:e3:c3:f5:
c5:f6:27:6a:2a:11:b8:5f:1e:34:4c:1e:b6:51:af:b3:d8:3c:
9a:ce:2f:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 06:30:06 2025 by rpki-client