Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UsP-ZKA6CFni29BVX3xd7APwPIc.roa
File: UsP-ZKA6CFni29BVX3xd7APwPIc.roa (raw, json)
Hash identifier: l3dJziOKsYIg9eKFf0skQomhBFEi2RHcsJqFEhBVh4E=
Subject key identifier: 52:C3:FE:64:A0:3A:08:59:E2:DB:D0:55:5F:7C:5D:EC:03:F0:3C:87
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188CC0E3A51649DF016E947E40C85BD2B3B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UsP-ZKA6CFni29BVX3xd7APwPIc.roa
Signing time: Sun 18 Jun 2023 01:11:04 +0000
ROA not before: Sun 18 Jun 2023 01:11:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:cc:0e:3a:51:64:9d:f0:16:e9:47:e4:0c:85:bd:2b:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 18 01:11:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=52c3fe64a03a0859e2dbd0555f7c5dec03f03c87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:d9:f8:a6:6d:2b:b8:9d:5d:c8:ab:2e:2c:7f:
72:61:8e:01:d2:03:c7:8b:42:dd:13:01:ca:5f:b7:
59:bd:e6:8b:3d:c5:2e:1f:08:13:5c:a0:b7:17:2f:
3f:de:5c:02:8e:bd:c0:28:90:b4:68:4f:f2:f4:3b:
54:04:3b:e9:a7:5f:72:9c:ea:d7:43:85:b9:04:e5:
d3:84:d5:ac:cf:e4:e5:ca:3f:41:7a:db:62:37:02:
53:b2:7a:8f:9f:93:cd:c3:04:db:a0:4d:5e:c2:2d:
87:67:3a:d7:f7:be:f4:5d:c9:87:a9:27:2c:04:8f:
89:be:84:2a:43:7e:9f:63:f0:e4:3b:05:cb:d8:1f:
e8:51:00:49:2c:d5:05:7c:9d:af:45:7c:d5:5d:59:
e9:fb:e2:b2:9f:7d:52:2b:5e:3d:a8:78:19:11:50:
ef:30:c6:78:1a:04:b0:41:7a:36:89:f0:fb:f1:9c:
90:2e:fa:7a:d6:16:0e:40:a7:21:6e:fe:6e:d8:c2:
9d:51:b1:ed:4a:74:ab:78:6b:e4:78:3a:55:8b:44:
48:f5:25:7e:07:63:bc:76:a1:81:c1:cb:cf:3f:ab:
68:52:a2:c1:59:a6:99:ee:b5:43:1e:55:85:d8:53:
21:f7:a3:57:2a:ca:33:36:52:b8:10:b3:13:a9:37:
d5:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:C3:FE:64:A0:3A:08:59:E2:DB:D0:55:5F:7C:5D:EC:03:F0:3C:87
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UsP-ZKA6CFni29BVX3xd7APwPIc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6d:bd:6d:39:24:e3:ca:7b:0d:a0:4c:d2:58:9a:a2:3f:1d:c5:
6c:e1:1d:9a:17:47:c4:05:fb:45:b0:1a:6d:c3:d0:ae:3a:e8:
89:92:16:82:80:11:6a:9e:f5:75:d0:71:45:01:f6:10:5d:44:
33:b2:07:b2:de:e9:db:4a:f8:92:18:fc:4d:ee:b9:db:b5:6c:
62:dd:f7:19:58:ba:88:31:7d:25:fa:2e:d5:e9:d8:6c:f4:fa:
81:96:b9:3d:d2:63:4b:8f:c1:31:42:67:18:99:f9:2c:3d:0f:
6f:0a:d2:42:80:9d:2e:ac:fb:93:20:93:05:06:2b:2d:c1:87:
33:c1:02:80:66:6f:d2:8a:64:5b:7f:e6:36:f6:d0:12:7b:86:
a6:eb:bc:13:8e:1b:db:26:ac:fb:86:e5:c8:3f:03:2d:70:8a:
ab:29:75:5e:67:7e:4c:ca:64:1c:7d:d3:d0:8c:ca:e0:cb:16:
ec:af:ca:8b:f2:01:16:dd:91:53:a3:f0:36:8c:11:fc:48:f8:
5d:e5:4d:ce:72:b0:fb:ac:0f:05:98:74:c0:be:b0:7d:93:1f:
2f:bb:cc:43:a7:71:39:0f:33:90:79:76:78:6f:87:65:d8:c9:
8c:7c:a8:3f:44:61:67:85:19:2f:fd:8d:f1:6c:6f:9c:31:8c:
35:00:3b:de
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYjMDjpRZJ3wFulH5AyFvSs7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNjE4MDExMTA0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MmMzZmU2NGEwM2EwODU5ZTJkYmQwNTU1ZjdjNWRlYzAzZjAzYzg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj9n4pm0ruJ1dyKsuLH9yYY4B0gPH
i0LdEwHKX7dZveaLPcUuHwgTXKC3Fy8/3lwCjr3AKJC0aE/y9DtUBDvpp19ynOrX
Q4W5BOXThNWsz+Tlyj9BettiNwJTsnqPn5PNwwTboE1ewi2HZzrX9770XcmHqScs
BI+JvoQqQ36fY/DkOwXL2B/oUQBJLNUFfJ2vRXzVXVnp++Kyn31SK149qHgZEVDv
MMZ4GgSwQXo2ifD78ZyQLvp61hYOQKchbv5u2MKdUbHtSnSreGvkeDpVi0RI9SV+
B2O8dqGBwcvPP6toUqLBWaaZ7rVDHlWF2FMh96NXKsozNlK4ELMTqTfVMQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFFLD/mSgOghZ4tvQVV98XewD8DyHMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvVXNQLVpLQTZDRm5pMjlCVlgzeGQ3QVB3UEljLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAG29bTkk48p7DaBM0lia
oj8dxWzhHZoXR8QF+0WwGm3D0K466ImSFoKAEWqe9XXQcUUB9hBdRDOyB7Le6dtK
+JIY/E3uudu1bGLd9xlYuogxfSX6LtXp2Gz0+oGWuT3SY0uPwTFCZxiZ+Sw9D28K
0kKAnS6s+5MgkwUGKy3BhzPBAoBmb9KKZFt/5jb20BJ7hqbrvBOOG9smrPuG5cg/
Ay1wiqspdV5nfkzKZBx909CMyuDLFuyvyovyARbdkVOj8DaMEfxI+F3lTc5ysPus
DwWYdMC+sH2THy+7zEOncTkPM5B5dnhvh2XYyYx8qD9EYWeFGS/9jfFsb5wxjDUA
O94=
-----END CERTIFICATE-----
Generated at Mon Jun 9 00:07:58 2025 by rpki-client