Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/6a272b-8b6f-4fe3-8f29-f0029816097e/1/KuITA8F2JpisQKF630WYOsFc4wk.roa
File: KuITA8F2JpisQKF630WYOsFc4wk.roa (raw, json)
Hash identifier: bB2rOvgz8hjIMe852Fv1qtbwAzNh+J9BjKdpPYjEPmg=
Subject key identifier: 2A:E2:13:03:C1:76:26:98:AC:40:A1:7A:DF:45:98:3A:C1:5C:E3:09
Certificate issuer: /CN=c7c1fdbaf9ac0e5adeec60a0923c4dd4a01e92dc
Certificate serial: 0194258EE58749BC7AE2F9B1B24C51CD275F
Authority key identifier: C7:C1:FD:BA:F9:AC:0E:5A:DE:EC:60:A0:92:3C:4D:D4:A0:1E:92:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x8H9uvmsDlre7GCgkjxN1KAektw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/6a272b-8b6f-4fe3-8f29-f0029816097e/1/KuITA8F2JpisQKF630WYOsFc4wk.roa
Signing time: Thu 02 Jan 2025 05:48:29 +0000
ROA not before: Thu 02 Jan 2025 05:48:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62336
IP address blocks: 5.63.32.0/19 maxlen: 20
37.228.144.0/22 maxlen: 22
91.191.176.0/22 maxlen: 22
91.198.32.0/24 maxlen: 24
91.200.108.0/22 maxlen: 22
91.211.8.0/22 maxlen: 22
185.39.84.0/22 maxlen: 22
195.230.108.0/24 maxlen: 24
2a01:41e0::/32 maxlen: 32
2a01:41e1::/32 maxlen: 32
2a01:41e3::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:e5:87:49:bc:7a:e2:f9:b1:b2:4c:51:cd:27:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7c1fdbaf9ac0e5adeec60a0923c4dd4a01e92dc
Validity
Not Before: Jan 2 05:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2ae21303c1762698ac40a17adf45983ac15ce309
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c7:31:ab:fc:d0:4b:a0:05:4d:9b:5f:62:9b:
86:03:f0:4a:e0:54:75:76:4b:d5:a2:da:dd:b7:58:
9a:e8:db:15:b2:82:71:df:c5:56:4a:7a:22:fc:10:
e1:fc:bf:2e:b2:31:2d:43:bc:81:72:2b:74:53:13:
7a:ef:ee:78:ee:f3:bc:08:e7:d4:44:82:86:0d:28:
8f:b1:f9:f6:b2:b1:e6:46:ac:ea:59:79:5b:86:e5:
ff:de:bb:ff:02:95:69:c7:7c:f9:e6:88:12:c8:9f:
0a:38:e6:69:9f:f5:e4:75:6f:0a:19:8c:58:39:c5:
f0:5a:30:e6:ac:bb:4c:02:80:57:54:47:3f:55:a6:
55:6a:5e:11:56:dc:69:4f:e4:23:ec:d0:81:96:a6:
aa:35:f9:9f:2c:8e:6f:21:5a:5e:5a:e2:64:a2:8d:
94:f2:e8:f0:18:14:ed:7a:c7:41:76:09:c5:82:c0:
46:46:97:f5:7e:f2:b8:ed:78:2f:7c:d3:e8:25:03:
24:ed:88:96:73:8c:d0:1c:ff:00:12:5d:81:25:c6:
a6:92:3b:33:a4:03:07:42:ec:d8:78:d2:c2:b6:af:
db:6a:d2:7f:c8:b3:18:f0:d1:27:e7:8f:04:be:50:
e7:91:e2:b2:64:5d:0c:69:90:db:9b:ad:4c:e9:d1:
9a:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:E2:13:03:C1:76:26:98:AC:40:A1:7A:DF:45:98:3A:C1:5C:E3:09
X509v3 Authority Key Identifier:
keyid:C7:C1:FD:BA:F9:AC:0E:5A:DE:EC:60:A0:92:3C:4D:D4:A0:1E:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x8H9uvmsDlre7GCgkjxN1KAektw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/6a272b-8b6f-4fe3-8f29-f0029816097e/1/KuITA8F2JpisQKF630WYOsFc4wk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/6a272b-8b6f-4fe3-8f29-f0029816097e/1/x8H9uvmsDlre7GCgkjxN1KAektw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.63.32.0/19
37.228.144.0/22
91.191.176.0/22
91.198.32.0/24
91.200.108.0/22
91.211.8.0/22
185.39.84.0/22
195.230.108.0/24
IPv6:
2a01:41e0::/31
2a01:41e3::/32
Signature Algorithm: sha256WithRSAEncryption
c2:cd:63:5a:ac:ef:76:bb:85:57:a4:a0:d3:8f:85:32:c6:7e:
b2:1b:e6:58:50:98:d4:81:3f:2e:1f:1e:46:07:8b:e9:13:01:
fa:30:22:27:a1:6f:56:6e:22:a2:90:f9:e9:dc:61:fc:ea:14:
95:9a:93:01:8d:38:a8:39:5c:fe:91:7e:84:d4:44:ba:73:31:
0b:bf:da:01:df:97:8e:8f:29:70:aa:36:2e:2d:ec:40:1c:aa:
76:aa:53:a3:0f:6e:1f:10:77:73:2b:80:a3:35:e5:57:c6:6a:
41:79:b1:7a:4e:d2:4a:2f:ae:db:5b:e2:71:44:22:9f:2c:d6:
32:84:ac:ac:72:87:13:10:1c:c8:5c:82:18:ae:da:c0:e7:5c:
5c:a6:ab:89:3c:95:a3:4f:1c:1b:5d:7b:40:7c:6c:33:24:0f:
0f:40:78:cf:a0:f5:d5:2f:25:03:d2:b7:b0:a5:85:0e:de:45:
d4:d9:73:3f:50:96:15:ae:51:bd:52:40:65:84:d0:c0:8e:a0:
10:4a:a4:6e:25:ca:9b:89:62:25:31:fe:11:b2:7f:b3:31:aa:
e5:14:32:04:68:e7:4c:52:3d:9e:23:91:64:d4:fc:70:83:9d:
5f:dc:7d:17:ae:5c:70:5c:e8:cc:c2:36:3f:b6:90:38:9d:60:
88:ac:84:13
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgISAZQljuWHSbx64vmxskxRzSdfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3YzFmZGJhZjlhYzBlNWFkZWVjNjBhMDkyM2M0ZGQ0YTAx
ZTkyZGMwHhcNMjUwMTAyMDU0ODI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYWUyMTMwM2MxNzYyNjk4YWM0MGExN2FkZjQ1OTgzYWMxNWNlMzA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArscxq/zQS6AFTZtfYpuGA/BK4FR1
dkvVotrdt1ia6NsVsoJx38VWSnoi/BDh/L8usjEtQ7yBcit0UxN67+547vO8COfU
RIKGDSiPsfn2srHmRqzqWXlbhuX/3rv/ApVpx3z55ogSyJ8KOOZpn/XkdW8KGYxY
OcXwWjDmrLtMAoBXVEc/VaZVal4RVtxpT+Qj7NCBlqaqNfmfLI5vIVpeWuJkoo2U
8ujwGBTtesdBdgnFgsBGRpf1fvK47XgvfNPoJQMk7YiWc4zQHP8AEl2BJcamkjsz
pAMHQuzYeNLCtq/batJ/yLMY8NEn548EvlDnkeKyZF0MaZDbm61M6dGa2wIDAQAB
o4ICSTCCAkUwHQYDVR0OBBYEFCriEwPBdiaYrEChet9FmDrBXOMJMB8GA1UdIwQY
MBaAFMfB/br5rA5a3uxgoJI8TdSgHpLcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDhIOXV2bXNEbHJlN0dDZ2tqeE4xS0Fla3R3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi82YTI3MmItOGI2Zi00ZmUzLThmMjkt
ZjAwMjk4MTYwOTdlLzEvS3VJVEE4RjJKcGlzUUtGNjMwV1lPc0ZjNHdrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi82YTI3MmItOGI2Zi00ZmUzLThmMjktZjAwMjk4MTYwOTdl
LzEveDhIOXV2bXNEbHJlN0dDZ2tqeE4xS0Fla3R3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMF8GCCsGAQUFBwEHAQH/BFAwTjA2BAIAATAwAwQFBT8gAwQC
JeSQAwQCW7+wAwQAW8YgAwQCW8hsAwQCW9MIAwQCuSdUAwQAw+ZsMBQEAgACMA4D
BQEqAUHgAwUAKgFB4zANBgkqhkiG9w0BAQsFAAOCAQEAws1jWqzvdruFV6Sg04+F
MsZ+shvmWFCY1IE/Lh8eRgeL6RMB+jAiJ6FvVm4iopD56dxh/OoUlZqTAY04qDlc
/pF+hNREunMxC7/aAd+Xjo8pcKo2Li3sQByqdqpTow9uHxB3cyuAozXlV8ZqQXmx
ek7SSi+u21vicUQinyzWMoSsrHKHExAcyFyCGK7awOdcXKariTyVo08cG117QHxs
MyQPD0B4z6D11S8lA9K3sKWFDt5F1NlzP1CWFa5RvVJAZYTQwI6gEEqkbiXKm4li
JTH+EbJ/szGq5RQyBGjnTFI9niORZNT8cIOdX9x9F65ccFzozMI2P7aQOJ1giKyE
Ew==
-----END CERTIFICATE-----
Generated at Sat Apr 5 21:19:05 2025 by rpki-client