Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/SYQyNulk12gD5wEX_SVTBqdtRC8.roa
File: SYQyNulk12gD5wEX_SVTBqdtRC8.roa (raw, json)
Hash identifier: XNHA63+uTuOj3/W3MvbD4dMCf3wSvbtBfXSCEguMWoE=
Subject key identifier: 49:84:32:36:E9:64:D7:68:03:E7:01:17:FD:25:53:06:A7:6D:44:2F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189D84B41DE13B177737071AB23497A7304
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/SYQyNulk12gD5wEX_SVTBqdtRC8.roa
Signing time: Wed 09 Aug 2023 03:15:58 +0000
ROA not before: Wed 09 Aug 2023 03:15:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d8:4b:41:de:13:b1:77:73:70:71:ab:23:49:7a:73:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 9 03:15:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=49843236e964d76803e70117fd255306a76d442f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:2a:64:c2:37:7e:3d:c5:3b:7e:3e:a4:b6:32:
09:5e:bb:bc:c0:b2:b8:d4:e3:1f:f6:7a:9e:ed:24:
79:6f:54:1b:a9:1d:e1:98:ca:9b:ba:60:34:f7:55:
46:1e:74:7c:00:0f:17:e3:9d:6e:78:45:50:52:47:
14:82:34:c7:61:fd:1a:50:d2:bd:3a:a1:56:73:9f:
ba:3a:a4:e7:32:bb:b2:a8:23:31:1d:15:ae:d3:d6:
05:de:3b:9e:45:fe:9c:78:db:38:c6:3e:54:2e:8c:
59:7d:2c:36:92:39:c3:32:fc:e8:86:5f:59:94:e6:
57:4b:7c:af:6d:ca:0e:1f:05:96:eb:64:25:c1:4d:
5a:f0:18:77:92:58:52:ad:d7:a5:a6:c7:c3:52:6c:
02:27:4a:c5:c9:8d:69:57:f5:e2:9c:91:b8:81:92:
68:da:4b:84:1b:61:b0:3b:ab:d1:a7:49:31:62:ee:
fd:4a:ed:7b:02:e3:ff:dd:aa:84:82:77:b3:c3:14:
17:35:85:59:d4:9e:34:53:7d:7d:04:8f:c7:3b:8c:
48:f6:ec:b9:22:ee:53:82:58:a4:f9:08:e8:a2:ff:
d0:00:6f:d3:8c:84:e7:8a:db:84:14:35:3d:18:20:
af:c5:c9:27:fb:d9:e3:14:2b:cc:ef:16:d6:3d:34:
5f:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:84:32:36:E9:64:D7:68:03:E7:01:17:FD:25:53:06:A7:6D:44:2F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/SYQyNulk12gD5wEX_SVTBqdtRC8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b0:37:63:a0:24:3a:98:17:27:2f:3f:04:56:e7:08:15:c4:97:
27:b8:73:9a:e8:c8:c5:2c:10:22:83:fc:1f:d3:38:f9:15:82:
1e:a9:bc:46:36:03:35:b8:e2:32:00:6d:1e:72:39:35:55:13:
f3:b8:68:9e:a1:9b:02:31:8d:cd:ab:36:b1:77:6b:0a:46:b8:
9b:a3:68:19:55:42:0a:b0:a0:6e:66:5e:26:ca:05:f7:74:9c:
51:b0:00:e6:cc:a8:e3:7b:01:46:b5:ef:69:d4:d2:43:ab:71:
a3:de:ef:e4:92:81:92:91:55:89:29:6a:8e:a3:f9:09:25:2e:
a7:0a:44:30:78:89:6a:6e:67:ca:7b:38:e8:50:b8:88:c0:b8:
f5:65:61:96:5b:0e:f5:52:95:b9:cf:ba:84:b7:7e:e5:40:59:
26:6c:93:53:8b:63:02:3d:ee:dc:c8:e5:d5:54:04:00:55:bd:
47:6a:42:5c:95:e1:18:b9:33:ac:9d:8c:f9:7b:88:3b:8f:64:
94:41:72:59:96:eb:95:a6:df:7a:10:3a:2c:0e:b0:03:1b:32:
01:e6:c9:96:5a:d2:11:1d:f9:70:a2:95:45:1d:26:e0:e9:70:
23:ab:6a:82:f2:94:d6:0d:88:5b:93:79:f4:b1:c0:63:c9:52:
4b:74:c9:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 21:43:41 2025 by rpki-client