Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/e2cc90-971f-4957-ae39-9e72a29de9e2/1/KU6WsG4Jgu8dwIeB4c67CcrMWH8.roa
File: KU6WsG4Jgu8dwIeB4c67CcrMWH8.roa (raw, json)
Hash identifier: 1EcpW84Pp+pOYcxHPgPlWRiYqcCBh8E9ltjtJeYglhs=
Subject key identifier: 29:4E:96:B0:6E:09:82:EF:1D:C0:87:81:E1:CE:BB:09:CA:CC:58:7F
Certificate issuer: /CN=28e1f42c53f31d75d16156adba0fae02bf917a44
Certificate serial: 093CDC53
Authority key identifier: 28:E1:F4:2C:53:F3:1D:75:D1:61:56:AD:BA:0F:AE:02:BF:91:7A:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KOH0LFPzHXXRYVatug-uAr-RekQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/e2cc90-971f-4957-ae39-9e72a29de9e2/1/KU6WsG4Jgu8dwIeB4c67CcrMWH8.roa
Signing time: Sat 01 Jan 2022 04:01:00 +0000
ROA not before: Sat 01 Jan 2022 04:01:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203201
IP address blocks: 212.78.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 154983507 (0x93cdc53)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28e1f42c53f31d75d16156adba0fae02bf917a44
Validity
Not Before: Jan 1 04:01:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=294e96b06e0982ef1dc08781e1cebb09cacc587f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d2:95:82:96:bb:45:8e:0e:00:62:ea:d8:45:
d2:18:db:2d:12:08:34:6f:62:41:ec:14:6b:74:d1:
d7:a5:8e:bd:3b:b4:c9:d7:d4:ba:64:b1:c9:85:98:
ec:39:b8:fa:36:cd:13:6f:2d:e5:4b:ac:a2:5d:b7:
da:08:2a:e1:ca:1f:81:f8:b1:b6:9e:65:dc:de:09:
79:19:2d:5e:00:9a:d0:87:46:73:6e:67:ad:1a:46:
1b:31:28:2c:f8:52:4b:a9:57:0e:cf:6f:c5:e3:f2:
22:41:c8:27:4a:d8:a8:7b:d9:a3:78:03:de:03:a3:
1a:cd:6c:0b:4a:78:71:a6:41:ec:7f:59:f2:9b:59:
52:96:5a:0a:14:08:01:53:c6:5d:f1:6a:93:94:a4:
ab:59:ca:b8:a3:55:de:0a:dc:a3:e2:7e:5b:35:07:
47:7f:7f:23:bf:97:a2:f9:32:c8:dd:83:82:e1:5f:
0d:e9:c6:d5:7d:a2:52:7e:fe:ce:84:c2:64:7d:71:
e5:0d:39:f5:36:12:61:fb:96:00:e2:4e:d8:30:6b:
95:b3:ab:8c:0d:60:59:a6:8d:61:cd:d2:bd:7d:89:
a2:ec:37:a1:00:9e:ac:9f:b8:37:48:74:4e:12:80:
78:9b:dd:fe:05:c1:ca:64:e8:fc:e0:74:6b:57:df:
03:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:4E:96:B0:6E:09:82:EF:1D:C0:87:81:E1:CE:BB:09:CA:CC:58:7F
X509v3 Authority Key Identifier:
keyid:28:E1:F4:2C:53:F3:1D:75:D1:61:56:AD:BA:0F:AE:02:BF:91:7A:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KOH0LFPzHXXRYVatug-uAr-RekQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/e2cc90-971f-4957-ae39-9e72a29de9e2/1/KU6WsG4Jgu8dwIeB4c67CcrMWH8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/e2cc90-971f-4957-ae39-9e72a29de9e2/1/KOH0LFPzHXXRYVatug-uAr-RekQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.78.1.0/24
Signature Algorithm: sha256WithRSAEncryption
25:cf:6b:db:3f:c2:4d:67:75:58:a6:a3:3e:5b:43:4f:a4:42:
55:a5:d4:71:10:d2:0f:bf:70:37:fc:ac:2a:77:db:ab:bf:5b:
cc:02:30:33:d1:e1:78:2b:0e:25:9a:b2:2a:df:6e:55:e5:ee:
48:76:a0:d6:90:56:57:4c:4b:84:ba:43:5b:2d:06:b4:4c:00:
a6:9e:a1:65:88:46:7f:1c:bc:7d:e4:c7:c1:e0:c1:9d:37:8c:
1d:2a:c5:9b:90:5f:82:da:53:a1:39:96:20:7d:d5:e6:f2:72:
cc:44:eb:e4:4d:2e:21:89:92:86:83:ce:b0:48:92:eb:19:f6:
02:e6:a6:12:8e:a5:e9:ae:80:7f:c7:a6:e1:b7:a3:3a:62:95:
2a:fc:80:0d:e1:42:d9:29:cd:51:c1:3b:ee:64:98:0a:c3:fb:
f9:c3:cf:1d:5f:a9:40:a6:d8:b1:25:9e:b4:49:5b:31:f2:47:
cb:47:50:bf:e6:82:53:85:bf:64:cd:50:c5:e2:4b:e8:8b:93:
4d:e9:58:97:ed:6a:05:41:61:33:2f:f9:db:29:45:52:8c:ad:
63:47:d5:1c:53:fb:d2:16:83:0e:63:c6:5e:18:2d:e9:29:a6:
24:c1:ac:2a:4e:67:61:21:00:71:ec:cb:fe:70:a4:1f:d0:35:
db:ca:93:c1
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECTzcUzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
OGUxZjQyYzUzZjMxZDc1ZDE2MTU2YWRiYTBmYWUwMmJmOTE3YTQ0MB4XDTIyMDEw
MTA0MDEwMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMjk0ZTk2YjA2ZTA5
ODJlZjFkYzA4NzgxZTFjZWJiMDljYWNjNTg3ZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMrSlYKWu0WODgBi6thF0hjbLRIING9iQewUa3TR16WOvTu0
ydfUumSxyYWY7Dm4+jbNE28t5Uusol232ggq4cofgfixtp5l3N4JeRktXgCa0IdG
c25nrRpGGzEoLPhSS6lXDs9vxePyIkHIJ0rYqHvZo3gD3gOjGs1sC0p4caZB7H9Z
8ptZUpZaChQIAVPGXfFqk5Skq1nKuKNV3grco+J+WzUHR39/I7+XovkyyN2DguFf
DenG1X2iUn7+zoTCZH1x5Q059TYSYfuWAOJO2DBrlbOrjA1gWaaNYc3SvX2Jouw3
oQCerJ+4N0h0ThKAeJvd/gXBymTo/OB0a1ffAwUCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQpTpawbgmC7x3Ah4HhzrsJysxYfzAfBgNVHSMEGDAWgBQo4fQsU/MdddFh
Vq26D64Cv5F6RDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0tPSDBMRlB6SFhYUllWYXR1Zy11QXItUmVrUS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNzcvZTJjYzkwLTk3MWYtNDk1Ny1hZTM5LTllNzJhMjlkZTllMi8x
L0tVNldzRzRKZ3U4ZHdJZUI0YzY3Q2NyTVdIOC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzcv
ZTJjYzkwLTk3MWYtNDk1Ny1hZTM5LTllNzJhMjlkZTllMi8xL0tPSDBMRlB6SFhY
UllWYXR1Zy11QXItUmVrUS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANROATANBgkqhkiG9w0BAQsFAAOC
AQEAJc9r2z/CTWd1WKajPltDT6RCVaXUcRDSD79wN/ysKnfbq79bzAIwM9HheCsO
JZqyKt9uVeXuSHag1pBWV0xLhLpDWy0GtEwApp6hZYhGfxy8feTHweDBnTeMHSrF
m5BfgtpToTmWIH3V5vJyzETr5E0uIYmShoPOsEiS6xn2AuamEo6l6a6Af8em4bej
OmKVKvyADeFC2SnNUcE77mSYCsP7+cPPHV+pQKbYsSWetElbMfJHy0dQv+aCU4W/
ZM1QxeJL6IuTTelYl+1qBUFhMy/52ylFUoytY0fVHFP70haDDmPGXhgt6SmmJMGs
Kk5nYSEAcezL/nCkH9A128qTwQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:31 2024 by rpki-client on console-fra.rpki-client.org