Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/nSyn_FL2w16uAS_odsq1gyOWfg0.roa
File: nSyn_FL2w16uAS_odsq1gyOWfg0.roa (raw, json)
Hash identifier: PzsCu5GgGVU+njZanIPfrb8Huv6yputQOIxqRmWgmSE=
Subject key identifier: 9D:2C:A7:FC:52:F6:C3:5E:AE:01:2F:E8:76:CA:B5:83:23:96:7E:0D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6C7F894B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/nSyn_FL2w16uAS_odsq1gyOWfg0.roa
Signing time: Mon 21 Feb 2022 11:04:26 +0000
ROA not before: Mon 21 Feb 2022 11:04:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1820297547 (0x6c7f894b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 21 11:04:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9d2ca7fc52f6c35eae012fe876cab58323967e0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:35:d2:18:70:b6:bf:2b:c3:c8:8f:d0:b7:24:
3c:84:23:f9:e8:fc:75:db:3d:11:d3:4b:60:3c:8f:
60:91:4a:14:b0:97:e5:47:ee:f4:d4:48:d8:5c:b2:
29:8f:1f:d4:b1:5d:4b:5e:75:c6:f2:d8:87:2f:39:
7c:07:9d:8c:c2:e2:c1:eb:8b:74:24:d7:46:cf:b0:
c1:e8:d2:62:48:62:c2:89:19:69:1a:4d:55:44:da:
3c:a5:4d:4a:b6:9b:08:8b:b1:0b:7f:41:4b:ed:17:
4b:03:30:cc:4a:8e:c3:d4:5d:41:38:16:b6:67:6a:
cf:f1:49:5f:01:ee:3b:14:ed:28:65:af:84:ea:58:
4d:3d:b2:e9:3c:66:50:4f:73:ae:4b:3f:83:5f:b2:
57:1c:07:f3:a6:41:87:ec:08:21:47:31:81:21:1b:
14:28:a3:e3:c3:db:75:2b:f3:4c:c7:e7:00:d6:15:
73:e0:3f:29:cd:21:f0:77:aa:e4:0b:3e:b3:50:d9:
90:64:ec:d0:67:e1:eb:c4:a8:4a:0f:8b:d1:58:d8:
17:34:95:19:aa:67:9d:c8:34:55:f2:ce:94:38:ec:
fe:d1:f0:e2:77:88:cc:33:e0:a2:42:ad:60:53:f8:
56:51:9c:8c:4a:5a:61:2f:6a:37:6c:89:55:a9:8c:
6a:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:2C:A7:FC:52:F6:C3:5E:AE:01:2F:E8:76:CA:B5:83:23:96:7E:0D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/nSyn_FL2w16uAS_odsq1gyOWfg0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
27:ad:04:bd:49:12:0c:5d:76:e5:56:7f:9a:68:b8:7c:9c:cc:
e4:74:07:20:4e:df:da:c0:82:5c:4c:25:14:8e:10:a9:1d:db:
ce:b9:e1:95:1d:13:3c:2f:b3:a4:8e:66:6d:02:59:dd:7d:5a:
c8:19:11:17:ae:df:95:87:a8:36:8a:26:ec:3c:07:cb:6c:2b:
2d:4a:af:a3:0f:d4:61:58:e0:e7:32:73:eb:d7:da:56:91:f8:
d0:47:4c:a7:20:a2:6d:f9:3e:df:71:c0:37:ce:70:c9:3d:9b:
34:94:76:a7:32:2d:a9:52:e0:c9:18:b0:72:f7:26:c2:0f:9b:
e6:5c:20:14:c1:18:10:11:26:c1:5e:1a:bd:17:d3:c2:3a:e8:
66:c4:5b:75:b3:6d:9d:08:05:85:a3:92:ee:6e:d8:5c:54:d6:
0d:4b:da:18:42:68:3a:16:44:19:bd:18:5d:63:54:f3:48:b9:
55:35:f2:f7:1d:f9:07:70:fe:6d:9f:39:86:ef:5b:1c:86:cf:
5c:ae:26:ee:28:61:58:4f:32:49:6a:f8:8a:8a:80:d0:62:03:
ca:5d:dd:33:ae:dc:e6:1d:eb:4d:89:7b:6e:01:c4:a7:26:21:
fd:25:98:1c:c0:fa:db:ab:74:85:80:43:cb:8d:e4:12:2f:2e:
fe:32:a6:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 08:34:12 2025 by rpki-client