Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ihDX_eCeVo8wumMcKKyvwFlV-ko.roa
File: ihDX_eCeVo8wumMcKKyvwFlV-ko.roa (raw, json)
Hash identifier: Iw7BFBWf4jCExkT6V/4mvUelIZvcHtJLrfiimskie6Y=
Subject key identifier: 8A:10:D7:FD:E0:9E:56:8F:30:BA:63:1C:28:AC:AF:C0:59:55:FA:4A
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C525B3EA312ED6D1B3518E73C955FB494
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ihDX_eCeVo8wumMcKKyvwFlV-ko.roa
Signing time: Sun 10 Dec 2023 06:12:40 +0000
ROA not before: Sun 10 Dec 2023 06:12:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:52:5b:3e:a3:12:ed:6d:1b:35:18:e7:3c:95:5f:b4:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 10 06:12:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8a10d7fde09e568f30ba631c28acafc05955fa4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:63:60:a7:54:da:be:18:dc:b9:8c:1d:73:5b:
4f:f7:ba:00:5f:05:18:3f:1a:3f:58:c5:85:63:4e:
17:d6:ac:73:48:3d:ed:08:7c:74:6e:00:f8:3b:fd:
cd:57:c6:83:2f:90:7f:b6:3d:49:ec:d8:28:95:5c:
a2:97:49:99:c2:66:5b:9a:aa:ca:6d:7e:4c:7c:96:
f9:eb:45:7d:e7:52:8a:b6:9a:a3:3b:e5:18:3a:d2:
c1:c4:2e:ed:43:38:c4:5a:a3:ec:b6:e0:a5:38:0e:
00:b9:20:c1:b8:d9:e5:d7:7a:e5:fb:62:db:5b:6f:
d5:4c:66:13:08:b5:e4:a6:42:8c:0c:7d:b7:95:f6:
85:61:65:83:49:1d:6c:8e:69:ce:dc:b4:69:fe:56:
03:d3:76:8b:b1:42:d3:11:e4:6b:ee:0f:6d:c2:be:
be:5c:54:9a:2f:e6:09:1f:25:1d:e3:75:04:86:ff:
44:af:71:e5:80:bc:4b:2c:75:fb:db:df:2f:87:ca:
0e:18:3a:50:c7:4e:a3:40:f3:75:b1:eb:a0:f6:bb:
1d:37:03:67:8b:9a:bc:0b:ba:c4:94:a6:1f:34:7e:
db:cf:ed:f0:0f:85:96:ba:39:96:b7:8c:f9:0b:e3:
c0:b1:98:50:ce:a3:76:21:14:c0:c9:b0:e4:91:ec:
34:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:10:D7:FD:E0:9E:56:8F:30:BA:63:1C:28:AC:AF:C0:59:55:FA:4A
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ihDX_eCeVo8wumMcKKyvwFlV-ko.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
72:67:d0:0b:ee:fb:b8:a8:5e:66:f1:cf:9a:8b:da:8a:0c:d6:
bc:45:17:95:1d:fe:a4:71:8a:ed:11:a3:c7:cf:24:bb:3c:13:
20:25:00:6f:67:a7:9d:0e:1e:9a:60:16:98:f6:66:5a:3c:24:
64:91:c3:94:3b:b0:b1:39:60:aa:c8:be:f5:72:d8:6d:01:7f:
a4:ee:06:3e:c4:d5:b4:33:de:62:65:03:ca:47:4a:a7:16:d4:
ec:c0:e6:79:85:7a:38:3a:54:62:9a:03:ac:0b:87:69:31:df:
5a:a2:11:44:c2:6a:08:b0:ae:42:48:9a:89:d0:2e:83:01:ce:
b4:22:b0:91:47:61:65:74:a5:6d:8d:ba:a8:3d:ee:34:3b:02:
36:18:ac:7c:fb:ca:d8:fa:67:d5:a8:17:c0:a9:08:30:2d:6b:
e5:f2:f9:0b:15:ec:57:8b:e8:77:c1:e8:7c:94:6f:1e:b9:84:
62:f5:78:97:4e:e8:82:05:17:89:42:15:5f:fb:f0:7a:04:93:
a0:d7:b2:95:44:54:53:77:cc:69:85:a4:47:bb:d8:d9:37:f9:
81:21:74:f2:b3:38:ab:00:2a:a7:6a:62:7a:6e:a1:07:b8:df:
9e:e4:af:aa:9b:af:17:6e:7c:e5:45:b2:e2:83:d0:c2:84:5d:
25:fd:fd:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 01:37:42 2025 by rpki-client