Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kUSh8f1UmWgjGIjZhn80HOD7YEk.roa
File: kUSh8f1UmWgjGIjZhn80HOD7YEk.roa (raw, json)
Hash identifier: NdwPi0fpGV1d+T4Gw0gegNrXkBkX0eUpZ9kxy8gEKDo=
Subject key identifier: 91:44:A1:F1:FD:54:99:68:23:18:88:D9:86:7F:34:1C:E0:FB:60:49
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018885A65C78ED78B742CDF75DB67190BFE2
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kUSh8f1UmWgjGIjZhn80HOD7YEk.roa
Signing time: Sun 04 Jun 2023 09:04:12 +0000
ROA not before: Sun 04 Jun 2023 09:04:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:188:85a6:542f/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:85:a6:5c:78:ed:78:b7:42:cd:f7:5d:b6:71:90:bf:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 4 09:04:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9144a1f1fd549968231888d9867f341ce0fb6049
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e3:8d:4c:aa:63:e3:85:2e:3b:56:c6:35:c2:
fd:86:25:80:ba:f6:26:cf:7a:09:2e:0b:a8:22:dc:
da:49:6b:13:7b:67:af:81:17:93:5f:2e:73:cf:be:
37:4b:41:dd:21:3f:78:4c:d8:f6:15:3a:5d:bd:88:
3e:5e:8b:3e:fb:b1:e7:26:95:0b:f9:e4:ad:bd:69:
37:75:0f:f4:14:2e:71:bc:db:71:69:83:44:8e:5f:
8c:95:aa:e4:22:8d:00:82:b0:6c:e6:d7:f1:9e:6d:
52:db:ac:4b:0f:1d:04:5d:ae:46:84:63:1e:e1:38:
84:6c:5f:44:4b:8a:81:84:05:ec:94:6c:be:7f:ec:
4c:a9:47:89:71:24:8e:47:88:79:9c:39:5f:6b:8d:
bd:01:ff:01:c9:49:e0:97:f9:f0:df:61:f2:a1:bf:
aa:80:01:d7:3a:41:50:33:7a:00:31:29:98:b9:f6:
24:8c:44:18:ed:09:d4:51:03:b6:1d:18:2b:0c:da:
65:bb:55:96:fe:d9:d8:a3:df:50:2b:13:16:ce:01:
ed:bd:e3:dc:e0:4a:36:b6:8c:1c:fe:28:b0:2a:52:
a2:ac:e1:8e:56:82:59:16:87:b5:ca:2e:d0:1d:88:
59:c3:30:97:00:34:ef:4e:a9:d1:2c:81:50:88:ad:
0b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:44:A1:F1:FD:54:99:68:23:18:88:D9:86:7F:34:1C:E0:FB:60:49
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kUSh8f1UmWgjGIjZhn80HOD7YEk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
78:a6:4c:8a:71:0a:f1:23:e8:ee:16:92:85:aa:3a:44:00:bc:
20:ac:83:eb:a7:9b:24:4d:67:fe:12:d9:01:5e:ee:44:50:3f:
99:4b:c7:f4:7d:cd:bb:7a:29:36:b1:b7:7a:ee:11:4a:96:d8:
a0:37:75:ce:f8:a7:d6:8a:70:4f:22:25:a5:5f:a9:33:43:56:
47:1a:a0:7a:17:e3:0b:19:07:b1:50:c7:9e:ed:47:15:33:71:
ea:f2:e7:43:c4:00:08:c6:63:63:5b:94:f5:70:96:d4:06:ce:
58:48:d6:36:e9:f9:68:81:3b:88:56:52:9f:54:af:80:2c:b5:
22:0c:e0:80:7a:c2:ff:9a:02:8f:7f:e5:50:54:61:46:78:c7:
92:53:f8:6d:41:31:62:03:16:3c:a1:31:8a:31:e9:99:06:9a:
a8:b1:85:d5:ce:d8:be:dd:20:15:27:e6:dd:c7:67:c6:d0:fd:
ca:71:ae:3b:4f:7d:af:91:6e:ed:a9:43:16:32:81:6f:00:de:
56:38:fd:a5:78:22:fd:d8:83:77:3e:c5:29:fc:8d:6e:ff:80:
aa:a0:5c:52:da:92:c0:ca:e5:9f:18:b6:64:61:b1:aa:1f:2f:
c1:0b:ee:58:74:ec:8d:22:34:f8:1d:dd:c8:9e:35:a0:1d:96:
82:f5:86:ae
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYiFplx47Xi3Qs33XbZxkL/iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNjA0MDkwNDEyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MTQ0YTFmMWZkNTQ5OTY4MjMxODg4ZDk4NjdmMzQxY2UwZmI2MDQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+ONTKpj44UuO1bGNcL9hiWAuvYm
z3oJLguoItzaSWsTe2evgReTXy5zz743S0HdIT94TNj2FTpdvYg+Xos++7HnJpUL
+eStvWk3dQ/0FC5xvNtxaYNEjl+MlarkIo0AgrBs5tfxnm1S26xLDx0EXa5GhGMe
4TiEbF9ES4qBhAXslGy+f+xMqUeJcSSOR4h5nDlfa429Af8ByUngl/nw32Hyob+q
gAHXOkFQM3oAMSmYufYkjEQY7QnUUQO2HRgrDNplu1WW/tnYo99QKxMWzgHtvePc
4Eo2towc/iiwKlKirOGOVoJZFoe1yi7QHYhZwzCXADTvTqnRLIFQiK0LbQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFJFEofH9VJloIxiI2YZ/NBzg+2BJMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEva1VTaDhmMVVtV2dqR0lqWmhuODBIT0Q3WUVrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAHimTIpxCvEj6O4WkoWq
OkQAvCCsg+unmyRNZ/4S2QFe7kRQP5lLx/R9zbt6KTaxt3ruEUqW2KA3dc74p9aK
cE8iJaVfqTNDVkcaoHoX4wsZB7FQx57tRxUzcery50PEAAjGY2NblPVwltQGzlhI
1jbp+WiBO4hWUp9Ur4AstSIM4IB6wv+aAo9/5VBUYUZ4x5JT+G1BMWIDFjyhMYox
6ZkGmqixhdXO2L7dIBUn5t3HZ8bQ/cpxrjtPfa+Rbu2pQxYygW8A3lY4/aV4Iv3Y
g3c+xSn8jW7/gKqgXFLaksDK5Z8YtmRhsaofL8EL7lh07I0iNPgd3cieNaAdloL1
hq4=
-----END CERTIFICATE-----
Generated at Wed Apr 30 21:02:05 2025 by rpki-client