Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/arL2SynaSK03o_xQX_asRYCIOSY.roa
File: arL2SynaSK03o_xQX_asRYCIOSY.roa (raw, json)
Hash identifier: 95JYCEDGxNbUISIwnAPfdWzmb0/zlc0NuVsjIJE3k+A=
Subject key identifier: 6A:B2:F6:4B:29:DA:48:AD:37:A3:FC:50:5F:F6:AC:45:80:88:39:26
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189B405A76E3E0DC86031A743A32C6EDE78
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/arL2SynaSK03o_xQX_asRYCIOSY.roa
Signing time: Wed 02 Aug 2023 02:13:36 +0000
ROA not before: Wed 02 Aug 2023 02:13:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:b4:05:a7:6e:3e:0d:c8:60:31:a7:43:a3:2c:6e:de:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 2 02:13:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6ab2f64b29da48ad37a3fc505ff6ac4580883926
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:cd:43:27:e8:e9:a8:37:9b:b7:e9:0d:09:91:
61:3f:53:bd:d5:e0:af:56:f4:ed:99:87:14:af:76:
8e:78:80:6a:ac:b0:2d:19:0f:49:e3:3d:27:c0:45:
d1:03:a2:f7:77:7d:d7:bc:78:06:89:5f:0c:d5:46:
67:77:7c:2a:9a:e2:7e:e7:66:15:03:00:79:57:fb:
10:aa:f5:81:53:23:f0:80:aa:5f:d4:39:7f:fd:aa:
b6:db:12:37:1b:e3:81:07:e3:18:5a:35:4c:15:7b:
31:c7:4a:58:75:fb:9b:9a:46:75:17:2c:d0:10:bc:
97:33:d7:99:dd:97:15:7e:69:8c:9b:25:e8:0e:79:
ef:bc:e1:be:b1:6d:5b:46:eb:f6:19:05:e5:61:1f:
cc:7f:45:7a:f3:c6:8c:57:6b:3e:fc:2a:6d:e5:d0:
7f:c4:4a:89:e7:38:bd:ff:20:a9:56:98:00:cd:af:
33:76:3c:ff:69:7d:50:ee:97:c1:90:51:79:91:30:
d9:a3:ba:51:c8:01:a0:c2:b3:d7:e4:a2:3c:bc:d1:
36:7e:0d:c3:de:4e:93:26:e1:c1:66:8d:84:b6:c2:
4e:ce:db:ee:cc:bc:61:39:1c:6a:8c:56:15:69:ae:
14:db:e5:60:b5:b9:66:e6:66:09:8a:80:81:dd:ec:
c3:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:B2:F6:4B:29:DA:48:AD:37:A3:FC:50:5F:F6:AC:45:80:88:39:26
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/arL2SynaSK03o_xQX_asRYCIOSY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
01:ae:27:a3:d7:3b:ac:f2:da:93:2f:bf:51:f1:3d:88:78:77:
38:aa:4e:d2:84:81:07:b5:8a:34:d5:e8:95:11:99:d9:d5:37:
f0:f5:26:59:8f:bd:f3:8f:1a:07:8b:ac:d8:c4:dc:a7:17:c0:
6a:0a:19:85:ef:11:e4:d2:08:78:44:39:78:1e:2d:e7:ef:2c:
ec:eb:1c:23:93:b7:a5:a1:81:f4:2c:81:0d:66:5a:e4:07:72:
0e:c7:4d:7e:e8:db:ae:6f:1f:72:0b:23:60:ba:5a:60:97:fb:
24:66:a3:95:81:81:3b:c2:8b:7a:52:45:8d:2f:f2:34:39:c7:
0c:16:18:a1:51:4e:67:c9:34:fc:af:f2:3a:e1:bb:a9:a9:4d:
c1:89:f0:6a:22:01:8a:53:8f:93:69:b1:80:dd:d4:87:38:8a:
ce:54:55:dc:c7:55:ca:e2:78:83:3c:99:f9:7b:0b:d2:21:7f:
c2:2e:7b:f7:cd:57:ab:51:62:01:3b:02:9d:79:c4:03:ed:71:
20:d7:c3:27:41:b1:3a:36:19:ff:aa:7e:b6:52:2a:ba:aa:32:
a8:86:c5:18:40:08:7d:7b:87:e7:23:aa:43:29:fd:1b:3b:c5:
64:2a:3c:63:5d:52:79:e9:a1:24:ea:a3:d3:4f:86:f8:de:cc:
7d:0e:c1:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 12:33:38 2025 by rpki-client