Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/8a87df-760b-45ae-9a34-3e6a9ad01ac5/1/KPCT9HsqQ0GAnwqUceUiiriIqk4.roa
File: KPCT9HsqQ0GAnwqUceUiiriIqk4.roa (raw, json)
Hash identifier: ZVpl3UM2WDf3y9L7hJrVTF9m7ptBS6A8Qb5Oob7W8Og=
Subject key identifier: 28:F0:93:F4:7B:2A:43:41:80:9F:0A:94:71:E5:22:8A:B8:88:AA:4E
Certificate issuer: /CN=d793a8d736beb92be16d193b101f93be55325919
Certificate serial: 07909C57
Authority key identifier: D7:93:A8:D7:36:BE:B9:2B:E1:6D:19:3B:10:1F:93:BE:55:32:59:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/15Oo1za-uSvhbRk7EB-TvlUyWRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/8a87df-760b-45ae-9a34-3e6a9ad01ac5/1/KPCT9HsqQ0GAnwqUceUiiriIqk4.roa
Signing time: Sat 01 Jan 2022 12:04:40 +0000
ROA not before: Sat 01 Jan 2022 12:04:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 5.180.153.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 126917719 (0x7909c57)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d793a8d736beb92be16d193b101f93be55325919
Validity
Not Before: Jan 1 12:04:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=28f093f47b2a4341809f0a9471e5228ab888aa4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:05:06:04:e8:62:54:9a:78:cb:8a:2a:15:81:
61:f8:19:3e:d9:cc:03:8c:15:43:56:f3:fe:40:f8:
e9:99:e8:5d:0f:56:e4:f7:f9:e6:c2:2c:2e:d6:b5:
49:1f:40:06:51:9b:21:c0:ff:56:fe:6c:a1:cf:64:
48:4e:75:ea:18:6e:68:61:0c:8c:49:a8:d4:d1:b9:
c4:06:36:9c:9b:5a:78:1e:b6:5e:d8:a1:2c:c0:51:
2d:48:ac:ad:92:16:af:d5:fe:8c:89:88:65:fc:b6:
33:9f:c0:03:dd:f1:39:f7:43:47:66:44:59:a9:69:
b2:07:17:49:27:3e:13:f9:f5:45:92:6a:bb:21:37:
20:c2:8d:0c:15:51:53:9c:1e:c0:43:79:af:88:5d:
f8:32:8e:06:46:d0:d4:ca:4c:d2:fa:22:d2:3e:5d:
1c:61:e8:eb:b5:8e:59:75:ae:b2:7d:4c:ed:be:dc:
37:4b:86:32:cb:48:2c:b8:6f:62:43:7b:b6:c0:77:
eb:14:dc:ea:d7:7c:db:c6:1b:27:bb:6e:5e:76:c1:
e8:c4:26:aa:ce:17:c5:13:ec:e4:f3:d1:75:61:52:
aa:9d:62:55:b1:26:99:22:83:1f:c7:09:4c:8a:7a:
ef:03:49:08:c0:69:56:62:86:b8:1b:6f:56:f4:cb:
58:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:F0:93:F4:7B:2A:43:41:80:9F:0A:94:71:E5:22:8A:B8:88:AA:4E
X509v3 Authority Key Identifier:
keyid:D7:93:A8:D7:36:BE:B9:2B:E1:6D:19:3B:10:1F:93:BE:55:32:59:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/15Oo1za-uSvhbRk7EB-TvlUyWRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8a87df-760b-45ae-9a34-3e6a9ad01ac5/1/KPCT9HsqQ0GAnwqUceUiiriIqk4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8a87df-760b-45ae-9a34-3e6a9ad01ac5/1/15Oo1za-uSvhbRk7EB-TvlUyWRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.153.0/24
Signature Algorithm: sha256WithRSAEncryption
d7:0c:d4:13:c3:35:4d:c4:26:2d:e8:4a:c3:64:9e:5d:a3:b5:
d2:ea:a6:8d:15:c0:a9:96:ea:73:ef:49:d5:0c:56:66:6b:11:
50:20:29:6c:d2:85:29:db:d6:22:ae:a4:4f:19:6b:b1:34:5c:
ea:1a:dd:90:82:7e:72:29:53:ba:1b:10:fa:a7:f0:d6:54:6c:
13:55:ea:d6:78:fa:f3:50:64:dc:06:c8:ee:4c:6e:c5:9d:17:
36:7d:9b:c9:00:92:1d:f7:b0:0f:32:e0:c0:0e:e4:ad:85:4c:
2d:5f:7e:05:09:5a:57:35:86:7b:c6:18:57:16:28:08:26:3d:
82:0f:be:dc:36:13:e6:54:10:89:11:af:00:82:c8:6c:e2:49:
4c:41:ca:1b:89:31:62:29:b1:7c:24:45:f0:8a:ce:21:46:e7:
23:f6:67:43:26:e0:7c:48:30:a4:0e:47:aa:2b:1f:e3:29:5e:
b2:df:ad:36:7b:35:f4:91:9f:36:06:d7:41:c5:6d:8b:b3:6f:
cb:36:32:cf:03:73:16:b4:9f:4a:2b:50:4d:2f:bc:03:16:81:
54:48:c9:db:73:db:71:46:b0:dd:7e:08:8d:1f:09:82:ea:f9:
7c:a1:7d:e1:10:14:3f:ff:60:bc:79:fa:28:4f:a1:2f:e8:36:
aa:77:72:43
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEB5CcVzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
NzkzYThkNzM2YmViOTJiZTE2ZDE5M2IxMDFmOTNiZTU1MzI1OTE5MB4XDTIyMDEw
MTEyMDQ0MFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMjhmMDkzZjQ3YjJh
NDM0MTgwOWYwYTk0NzFlNTIyOGFiODg4YWE0ZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANgFBgToYlSaeMuKKhWBYfgZPtnMA4wVQ1bz/kD46ZnoXQ9W
5Pf55sIsLta1SR9ABlGbIcD/Vv5soc9kSE516hhuaGEMjEmo1NG5xAY2nJtaeB62
XtihLMBRLUisrZIWr9X+jImIZfy2M5/AA93xOfdDR2ZEWalpsgcXSSc+E/n1RZJq
uyE3IMKNDBVRU5wewEN5r4hd+DKOBkbQ1MpM0voi0j5dHGHo67WOWXWusn1M7b7c
N0uGMstILLhvYkN7tsB36xTc6td828YbJ7tuXnbB6MQmqs4XxRPs5PPRdWFSqp1i
VbEmmSKDH8cJTIp67wNJCMBpVmKGuBtvVvTLWMMCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQo8JP0eypDQYCfCpRx5SKKuIiqTjAfBgNVHSMEGDAWgBTXk6jXNr65K+Ft
GTsQH5O+VTJZGTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzE1T28xemEtdVN2aGJSazdFQi1UdmxVeVdSay5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvODMvOGE4N2RmLTc2MGItNDVhZS05YTM0LTNlNmE5YWQwMWFjNS8x
L0tQQ1Q5SHNxUTBHQW53cVVjZVVpaXJpSXFrNC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODMv
OGE4N2RmLTc2MGItNDVhZS05YTM0LTNlNmE5YWQwMWFjNS8xLzE1T28xemEtdVN2
aGJSazdFQi1UdmxVeVdSay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAAW0mTANBgkqhkiG9w0BAQsFAAOC
AQEA1wzUE8M1TcQmLehKw2SeXaO10uqmjRXAqZbqc+9J1QxWZmsRUCApbNKFKdvW
Iq6kTxlrsTRc6hrdkIJ+cilTuhsQ+qfw1lRsE1Xq1nj681Bk3AbI7kxuxZ0XNn2b
yQCSHfewDzLgwA7krYVMLV9+BQlaVzWGe8YYVxYoCCY9gg++3DYT5lQQiRGvAILI
bOJJTEHKG4kxYimxfCRF8IrOIUbnI/ZnQybgfEgwpA5Hqisf4ylest+tNns19JGf
NgbXQcVti7NvyzYyzwNzFrSfSitQTS+8AxaBVEjJ23PbcUaw3X4IjR8Jgur5fKF9
4RAUP/9gvHn6KE+hL+g2qndyQw==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:44:50 2025 by rpki-client