Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ku_k-rSmcBt4j4CgEvgW3lyS1Aw.roa
File: ku_k-rSmcBt4j4CgEvgW3lyS1Aw.roa (raw, json)
Hash identifier: pqaKbPvVOEVtHOz0LT3oQ2GbR0eHsV9kV0Wdn7I3KJY=
Subject key identifier: 92:EF:E4:FA:B4:A6:70:1B:78:8F:80:A0:12:F8:16:DE:5C:92:D4:0C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01831402112508CC69E63838C78F136D2B5F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ku_k-rSmcBt4j4CgEvgW3lyS1Aw.roa
Signing time: Tue 06 Sep 2022 18:13:43 +0000
ROA not before: Tue 06 Sep 2022 18:13:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:183:1279:659d/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:14:02:11:25:08:cc:69:e6:38:38:c7:8f:13:6d:2b:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Sep 6 18:13:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=92efe4fab4a6701b788f80a012f816de5c92d40c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:1a:c4:bb:48:ee:1a:e4:0c:83:36:bd:8a:38:
1d:1b:9f:40:3a:7c:c5:95:de:19:ac:91:c6:84:ec:
3f:53:4b:7b:bb:a8:7c:5d:85:84:75:12:47:ab:e2:
13:13:d8:bd:26:07:2b:41:94:3f:fb:43:d7:77:98:
e3:1f:70:c7:cc:98:f4:97:79:b3:20:d1:1e:70:e7:
4d:bf:e8:77:0d:b4:9f:4b:75:2f:eb:e3:74:d7:96:
f2:4a:74:63:00:8b:c9:9d:9f:24:d4:f1:38:50:52:
2d:a6:ea:00:b1:d8:90:2c:6a:29:00:48:d3:d5:53:
a7:a9:be:e3:54:36:ea:97:77:a3:f4:e5:67:ae:ea:
03:f9:7c:1d:4d:dd:17:d8:9e:89:d5:c5:bb:b6:4a:
cf:2a:56:29:96:c5:7d:38:28:81:a8:63:9a:9e:b4:
83:9d:5c:7b:24:56:55:b6:a7:ae:0b:8b:e0:b9:99:
fa:58:a2:bf:e8:a6:fd:e9:c0:82:f1:59:55:f7:5f:
2b:b4:95:b8:31:08:d4:20:87:ed:42:7c:d0:a0:a1:
fe:31:f1:75:d5:16:f9:08:90:1b:34:88:e8:81:b5:
71:b9:30:00:2e:63:42:2e:04:22:1e:c4:0c:72:1c:
20:1b:ae:3f:08:c6:8a:15:5b:c2:7c:2c:1d:ef:5d:
a8:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:EF:E4:FA:B4:A6:70:1B:78:8F:80:A0:12:F8:16:DE:5C:92:D4:0C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ku_k-rSmcBt4j4CgEvgW3lyS1Aw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5b:af:1d:11:e0:d8:90:93:bf:d3:dc:1d:fe:30:89:97:25:ba:
55:47:e8:eb:e2:d4:7d:72:c3:8b:69:78:61:46:33:7e:b4:55:
db:34:5e:40:3e:b5:3c:9f:2d:97:0d:eb:d6:12:03:ae:2d:86:
28:8a:f5:09:f2:6f:e6:4a:f9:b5:01:c7:20:54:83:05:a3:8a:
7e:b8:01:8d:17:83:52:81:6d:c8:19:43:43:18:a0:5c:44:ea:
15:10:0f:51:6d:0b:f0:34:e2:71:27:ef:fb:0f:f7:e8:87:36:
4c:8b:12:70:d4:34:b8:98:ab:54:9d:43:d0:e7:32:41:f5:54:
da:01:90:fc:e8:a9:b5:76:56:45:ee:e1:40:25:d2:33:86:fa:
a4:6b:d5:8d:9f:32:f2:eb:fc:93:c1:3e:30:e6:e4:de:44:d5:
bb:19:24:77:7f:b5:5d:47:0e:8d:90:54:73:60:77:f2:92:5a:
7f:7f:11:2d:8b:47:b7:bc:06:7e:28:2e:ab:b9:70:ae:97:7f:
ca:cd:0d:ad:40:1b:1a:39:79:9a:d6:0a:02:f0:df:95:48:6b:
9a:be:6c:b9:94:47:b7:cd:63:cc:21:ab:bc:8a:1e:6e:31:69:
3b:78:36:03:38:55:0c:a2:f5:b1:81:3f:16:52:25:48:0f:99:
09:09:ee:eb
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYMUAhElCMxp5jg4x48TbStfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIwOTA2MTgxMzQzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MmVmZTRmYWI0YTY3MDFiNzg4ZjgwYTAxMmY4MTZkZTVjOTJkNDBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmBrEu0juGuQMgza9ijgdG59AOnzF
ld4ZrJHGhOw/U0t7u6h8XYWEdRJHq+ITE9i9JgcrQZQ/+0PXd5jjH3DHzJj0l3mz
INEecOdNv+h3DbSfS3Uv6+N015bySnRjAIvJnZ8k1PE4UFItpuoAsdiQLGopAEjT
1VOnqb7jVDbql3ej9OVnruoD+XwdTd0X2J6J1cW7tkrPKlYplsV9OCiBqGOanrSD
nVx7JFZVtqeuC4vguZn6WKK/6Kb96cCC8VlV918rtJW4MQjUIIftQnzQoKH+MfF1
1Rb5CJAbNIjogbVxuTAALmNCLgQiHsQMchwgG64/CMaKFVvCfCwd712obQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFJLv5Pq0pnAbeI+AoBL4Ft5cktQMMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEva3Vfay1yU21jQnQ0ajRDZ0V2Z1czbHlTMUF3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAFuvHRHg2JCTv9PcHf4w
iZclulVH6Ovi1H1yw4tpeGFGM360Vds0XkA+tTyfLZcN69YSA64thiiK9Qnyb+ZK
+bUBxyBUgwWjin64AY0Xg1KBbcgZQ0MYoFxE6hUQD1FtC/A04nEn7/sP9+iHNkyL
EnDUNLiYq1SdQ9DnMkH1VNoBkPzoqbV2VkXu4UAl0jOG+qRr1Y2fMvLr/JPBPjDm
5N5E1bsZJHd/tV1HDo2QVHNgd/KSWn9/ES2LR7e8Bn4oLqu5cK6Xf8rNDa1AGxo5
eZrWCgLw35VIa5q+bLmUR7fNY8whq7yKHm4xaTt4NgM4VQyi9bGBPxZSJUgPmQkJ
7us=
-----END CERTIFICATE-----
Generated at Sun Jun 8 23:24:12 2025 by rpki-client