Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/srZztPretBaAkuMKXTOA6Rdxnwg.roa
File: srZztPretBaAkuMKXTOA6Rdxnwg.roa (raw, json)
Hash identifier: 6WWfWgQmrCfRdOF6yUL1b207QqRX0I+f8DJVLzW3aho=
Subject key identifier: B2:B6:73:B4:FA:DE:B4:16:80:92:E3:0A:5D:33:80:E9:17:71:9F:08
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6FE5437B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/srZztPretBaAkuMKXTOA6Rdxnwg.roa
Signing time: Sat 05 Mar 2022 13:09:31 +0000
ROA not before: Sat 05 Mar 2022 13:09:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1877295995 (0x6fe5437b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 5 13:09:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b2b673b4fadeb4168092e30a5d3380e917719f08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:62:e1:d9:81:e6:8e:42:e5:b0:2a:f8:47:56:
74:4d:c8:8d:1c:8e:66:85:1e:a6:56:97:cd:7c:d3:
46:4c:10:2a:e1:dd:85:d0:55:ab:32:ac:8c:9f:8c:
f6:1e:11:70:5b:94:8b:81:b4:5d:b0:9a:6c:0f:ac:
9a:03:c7:9a:21:ab:a1:5c:93:74:e9:36:44:5a:f3:
1e:7c:04:2c:e0:a0:b4:3f:ab:68:64:70:11:81:1b:
69:ef:17:03:7f:ba:88:a1:2d:11:22:04:28:9f:50:
7a:f0:86:1d:30:04:57:65:22:44:77:21:28:5d:a0:
3f:2a:d8:05:1e:ab:42:54:e4:43:dd:fd:eb:e6:83:
2c:48:ff:58:9a:d2:b1:a6:34:be:29:ef:27:08:79:
d8:78:57:59:70:2a:be:00:ed:3c:05:93:26:c3:24:
83:7e:b9:65:ab:fd:98:3e:e2:2f:4b:4d:2e:83:1f:
c4:1e:67:dc:77:3e:34:f0:c5:fa:4e:3c:86:51:3e:
c7:e7:8d:51:e5:12:fe:d4:f1:45:e2:16:2c:3b:f6:
7d:fc:b4:4d:20:42:5b:34:9d:17:90:e8:59:06:90:
d0:6c:2f:7e:e9:14:25:2b:a6:c6:92:07:5e:74:fc:
c7:3b:ef:ec:d1:47:e5:00:18:24:4e:cb:5a:7b:be:
6d:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:B6:73:B4:FA:DE:B4:16:80:92:E3:0A:5D:33:80:E9:17:71:9F:08
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/srZztPretBaAkuMKXTOA6Rdxnwg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3a:e5:0c:1f:64:4d:53:94:33:9f:5b:dd:70:21:18:9e:b9:32:
67:32:03:5a:e3:52:24:ea:ab:a3:1e:87:3d:9b:d0:78:3c:d9:
71:20:97:00:f4:eb:f5:e0:55:73:24:50:88:d9:34:83:7e:97:
9f:8c:6b:b4:a3:e5:77:da:e2:8c:48:1e:31:13:cb:eb:d5:d7:
f2:47:38:5b:03:a1:9b:80:79:38:aa:38:25:12:85:59:bc:63:
9a:36:1e:fc:eb:4c:8c:26:2f:ec:20:47:75:0c:e0:0f:87:2d:
44:52:95:1a:53:61:dd:8d:68:59:2f:d8:75:e4:f5:f6:f1:cf:
fb:7c:f7:fa:be:db:09:c4:5f:d8:2e:af:67:24:69:0b:2e:1b:
e1:b0:72:e2:40:ab:a1:23:39:47:a6:59:03:91:95:b2:87:e9:
8e:bd:67:1d:6a:5e:82:39:25:5c:e3:f6:ed:6b:30:ad:e8:27:
6d:40:e2:c3:0b:e6:aa:e0:0e:ff:95:55:0d:a0:a6:53:ff:29:
9f:ff:c1:ab:b8:6b:5f:4f:0c:23:26:99:15:53:93:87:ac:3f:
33:62:4b:f0:b2:24:0b:27:5c:90:78:4e:e0:30:82:e9:59:6f:
85:27:d4:de:ea:1a:b8:2c:6e:c7:c7:13:92:0e:04:e5:f4:4a:
85:6f:19:2d
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEb+VDezANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
MjA0N2JlMTViMjc1OTAyZGNmNjE3ZGMzZDBlMTZkYzFmMzA4MDIyMB4XDTIyMDMw
NTEzMDkzMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYjJiNjczYjRmYWRl
YjQxNjgwOTJlMzBhNWQzMzgwZTkxNzcxOWYwODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANdi4dmB5o5C5bAq+EdWdE3IjRyOZoUeplaXzXzTRkwQKuHd
hdBVqzKsjJ+M9h4RcFuUi4G0XbCabA+smgPHmiGroVyTdOk2RFrzHnwELOCgtD+r
aGRwEYEbae8XA3+6iKEtESIEKJ9QevCGHTAEV2UiRHchKF2gPyrYBR6rQlTkQ939
6+aDLEj/WJrSsaY0vinvJwh52HhXWXAqvgDtPAWTJsMkg365Zav9mD7iL0tNLoMf
xB5n3Hc+NPDF+k48hlE+x+eNUeUS/tTxReIWLDv2ffy0TSBCWzSdF5DoWQaQ0Gwv
fukUJSumxpIHXnT8xzvv7NFH5QAYJE7LWnu+bY0CAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBSytnO0+t60FoCS4wpdM4DpF3GfCDAfBgNVHSMEGDAWgBRyBHvhWydZAtz2
F9w9DhbcHzCAIjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2NnUjc0VnNuV1FMYzloZmNQUTRXM0I4d2dDSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWUvNzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8x
L3NyWnp0UHJldEJhQWt1TUtYVE9BNlJkeG53Zy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWUv
Nzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8xL2NnUjc0VnNuV1FM
YzloZmNQUTRXM0I4d2dDSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEA8EAGDAPBAIAAjAJAwcAIAEGfABk
MA0GCSqGSIb3DQEBCwUAA4IBAQA65QwfZE1TlDOfW91wIRieuTJnMgNa41Ik6quj
Hoc9m9B4PNlxIJcA9Ov14FVzJFCI2TSDfpefjGu0o+V32uKMSB4xE8vr1dfyRzhb
A6GbgHk4qjglEoVZvGOaNh7860yMJi/sIEd1DOAPhy1EUpUaU2HdjWhZL9h15PX2
8c/7fPf6vtsJxF/YLq9nJGkLLhvhsHLiQKuhIzlHplkDkZWyh+mOvWcdal6COSVc
4/btazCt6CdtQOLDC+aq4A7/lVUNoKZT/ymf/8GruGtfTwwjJpkVU5OHrD8zYkvw
siQLJ1yQeE7gMILpWW+FJ9Te6hq4LG7HxxOSDgTl9EqFbxkt
-----END CERTIFICATE-----
Generated at Fri May 2 05:41:27 2025 by rpki-client