Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/kokv_C8t1AnpAaDbFFymCpOlbcg.roa
File: kokv_C8t1AnpAaDbFFymCpOlbcg.roa (raw, json)
Hash identifier: ik7GnBNH4NcBH2CG5tQuU5clEm1ygbFhbeKi/xK0FHo=
Subject key identifier: 92:89:2F:FC:2F:2D:D4:09:E9:01:A0:DB:14:5C:A6:0A:93:A5:6D:C8
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C8491A55416E3C3E0C39E7605ADCD9B1A
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/kokv_C8t1AnpAaDbFFymCpOlbcg.roa
Signing time: Wed 20 Dec 2023 00:13:06 +0000
ROA not before: Wed 20 Dec 2023 00:13:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:84:91:a5:54:16:e3:c3:e0:c3:9e:76:05:ad:cd:9b:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 20 00:13:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=92892ffc2f2dd409e901a0db145ca60a93a56dc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:87:97:3d:46:c4:a4:3c:27:e6:87:c5:2c:db:
48:25:82:61:46:6c:77:c3:35:fc:2a:04:f0:3b:91:
90:24:07:c7:c5:af:11:f0:2c:c2:97:a9:18:56:c9:
15:f7:0e:2d:05:64:0d:4b:dd:67:4c:7c:c2:45:03:
7b:93:61:e6:86:66:76:d6:0f:8e:47:a1:34:ed:12:
e6:47:9d:71:e8:cb:1e:d0:09:3b:71:0b:df:a4:d6:
ad:e9:f3:84:6d:7c:16:bb:a4:b4:7b:e4:2f:bb:44:
ba:3b:bb:61:bf:cc:ea:3e:eb:82:0a:d6:26:90:af:
e8:48:f1:61:e3:29:00:f8:f6:d5:7f:48:ef:b2:a3:
07:98:e7:36:99:66:c3:7b:44:80:ed:1d:a5:9d:94:
a9:d5:59:66:27:b5:88:99:ae:5f:8a:32:fa:8f:0e:
2c:3a:f6:ca:93:82:55:15:2b:9d:08:34:ef:41:60:
d1:a4:71:87:4b:d2:a5:bb:dd:cb:a0:e8:1f:ba:9a:
99:d6:87:eb:d8:3c:0a:29:5c:ee:44:85:8c:9e:e0:
1e:1d:ed:f9:2a:89:5b:e0:8e:1d:f9:eb:7a:1a:a0:
a3:53:11:1e:3e:00:a7:5f:44:5a:ce:b5:ba:06:0a:
04:fc:45:05:ec:e9:ab:15:d8:a4:e7:7b:df:b4:65:
0b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:89:2F:FC:2F:2D:D4:09:E9:01:A0:DB:14:5C:A6:0A:93:A5:6D:C8
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/kokv_C8t1AnpAaDbFFymCpOlbcg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
60:9b:c7:a5:74:44:3f:7a:3f:bb:e7:6a:17:13:3a:91:d4:d5:
10:36:f4:8b:9e:9e:48:24:e0:d1:31:cd:13:4c:5b:dd:06:9b:
b3:b5:7a:85:c9:5f:3e:33:bb:9f:a8:e3:d2:d0:82:78:e1:9b:
83:45:49:43:03:32:07:8d:36:90:15:cc:46:c3:55:53:ad:5a:
35:2b:ad:13:6a:e9:38:68:af:af:c3:84:39:27:8e:7f:91:f3:
32:b1:07:2a:ba:cd:2a:23:37:a4:1c:e3:35:c3:c2:c4:7f:1c:
ba:9d:8d:a9:a9:21:72:61:76:30:da:14:cb:39:ef:e8:24:f4:
1c:69:16:56:70:a3:ae:a9:11:c3:13:56:ea:31:03:c5:70:0f:
31:43:14:fc:8c:0a:1d:ae:11:99:04:1c:f1:b6:63:27:25:d0:
b5:b8:9b:4e:15:15:f1:a4:9d:b1:9e:4b:ef:61:a6:e9:1e:bf:
10:1c:11:6d:52:6f:d7:2b:67:e6:06:23:e0:1b:be:67:c9:8e:
ab:2e:d0:05:7d:ce:b5:0b:e1:89:f2:ce:9b:9a:d7:17:7e:52:
6f:cf:98:c9:63:47:4d:bf:5b:5c:b7:d8:25:46:11:91:a4:34:
1f:dd:6b:cb:a6:18:c2:4d:80:bc:47:30:0e:dd:80:db:9a:f8:
c7:a5:96:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:08:22 2025 by rpki-client