Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/dsekLcs31YZf4uwyuY7k9qTR8aA.roa
File: dsekLcs31YZf4uwyuY7k9qTR8aA.roa (raw, json)
Hash identifier: xUksYtHvJygEnNffLWnGy4XHBJYRr1gNTCc2FveU3qE=
Subject key identifier: 76:C7:A4:2D:CB:37:D5:86:5F:E2:EC:32:B9:8E:E4:F6:A4:D1:F1:A0
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B0AE2497EE181EEF4B5A0FE5F7C389BCD
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/dsekLcs31YZf4uwyuY7k9qTR8aA.roa
Signing time: Sat 07 Oct 2023 16:04:43 +0000
ROA not before: Sat 07 Oct 2023 16:04:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18b:ae1:f0e4/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:0a:e2:49:7e:e1:81:ee:f4:b5:a0:fe:5f:7c:38:9b:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 7 16:04:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=76c7a42dcb37d5865fe2ec32b98ee4f6a4d1f1a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:90:66:ce:52:d8:4b:c6:36:9f:12:8f:47:a9:
fb:6b:f3:90:4e:b8:a0:88:ad:a3:fe:13:7d:6a:9a:
79:dd:ff:ac:e7:65:32:f6:10:ad:bd:5c:f6:20:34:
cc:e2:8e:b2:10:90:71:c4:b4:8f:4d:a4:b4:9d:ad:
18:66:f8:ef:3e:db:53:ab:4e:c9:49:81:8a:90:a8:
95:81:d4:69:3f:2f:b3:15:47:5e:52:4b:eb:cf:66:
35:69:22:2b:fa:69:ef:e8:98:17:1a:03:7d:48:3f:
e0:46:1d:5a:47:e5:5e:ee:2f:aa:b9:e7:61:c3:59:
82:f8:32:b8:90:fd:13:23:2b:7f:7a:04:07:b1:1b:
2f:c5:f2:49:f8:fe:d6:95:c6:0c:12:48:9b:55:00:
dd:37:3a:83:be:35:2b:59:bd:c0:db:42:97:29:8a:
59:31:96:2b:e7:c5:a6:a6:dd:bb:7a:77:fe:b2:61:
a5:57:8c:a7:61:7b:db:7d:94:3e:7c:ea:26:7a:78:
a4:cc:c8:73:b5:69:b6:e7:7a:0a:58:e6:78:2b:80:
a5:93:4c:7a:0c:a4:1b:93:91:c4:4d:0d:65:63:44:
dc:07:0e:c6:cc:f8:66:60:c2:51:c3:a0:19:48:13:
c4:ab:6a:28:79:dd:ac:9e:26:00:ea:86:02:a4:3d:
dd:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:C7:A4:2D:CB:37:D5:86:5F:E2:EC:32:B9:8E:E4:F6:A4:D1:F1:A0
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/dsekLcs31YZf4uwyuY7k9qTR8aA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
39:12:c7:55:ea:7e:13:cb:71:fc:3e:22:0e:48:a0:55:23:7e:
43:47:7a:d3:bc:e6:42:f1:07:32:af:ad:45:9e:a5:78:54:0f:
47:d6:95:f1:e8:77:a5:5d:74:6a:46:e9:c7:76:29:62:a5:66:
92:eb:89:93:61:dc:da:14:05:46:63:66:e6:4c:ba:2e:47:61:
b8:fd:e9:a4:73:c5:e8:f6:e9:2d:23:be:2f:55:4f:1a:71:ce:
fd:f2:95:37:7d:47:6d:3b:f6:21:38:da:d3:c5:d2:db:d2:25:
08:63:bc:81:5d:62:71:27:cc:9b:a8:4c:e8:f7:e2:40:52:3c:
b4:92:e6:82:f3:d1:61:d1:48:ea:9d:fc:cb:32:62:f1:02:16:
19:22:64:49:2d:d1:bb:8b:c2:1c:d8:94:5a:5a:c8:14:5c:a9:
6a:3e:fe:2d:d1:5e:1f:21:ee:ed:58:61:e5:92:e0:83:0b:5a:
71:6e:60:1b:85:6c:3e:dd:c4:c8:83:cc:45:a7:30:73:86:68:
b8:81:c9:55:7c:32:72:05:3c:5b:37:5a:16:ae:ff:ea:a0:f5:
3d:27:8a:2a:a3:70:72:2e:d0:75:28:48:1e:07:95:e5:b1:eb:
4a:d2:51:e8:15:d7:ae:69:a8:2b:18:56:a0:6f:f1:28:07:42:
a5:bd:c5:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 22:03:27 2025 by rpki-client