Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/SE_k-TZwvcA7CLShNVQ2pTpy080.roa
File: SE_k-TZwvcA7CLShNVQ2pTpy080.roa (raw, json)
Hash identifier: YnMRaOdtU/ZabdyfJrF6ekAYixaAI2JV7pzl3d74wIs=
Subject key identifier: 48:4F:E4:F9:36:70:BD:C0:3B:08:B4:A1:35:54:36:A5:3A:72:D3:CD
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B3DF45CB845892E2878A56AB5375415F6
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/SE_k-TZwvcA7CLShNVQ2pTpy080.roa
Signing time: Tue 17 Oct 2023 14:05:06 +0000
ROA not before: Tue 17 Oct 2023 14:05:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:3df3:fd8a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:3d:f4:5c:b8:45:89:2e:28:78:a5:6a:b5:37:54:15:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 17 14:05:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=484fe4f93670bdc03b08b4a1355436a53a72d3cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:6a:ac:9b:88:7e:9c:9d:36:ce:e7:cc:3e:5d:
97:b0:32:4c:36:30:3e:e1:51:9f:01:eb:86:5f:9d:
84:16:80:c0:1c:33:06:34:72:e9:4d:d9:f4:e0:9b:
74:0d:5c:ca:ad:0b:f3:49:a4:10:2e:28:be:09:12:
80:5a:06:45:21:4c:33:2d:90:5e:21:f8:c5:3d:61:
ce:9b:e3:25:06:6c:98:f3:e0:cb:e9:57:31:0c:1c:
68:8e:b7:91:92:6d:ff:53:46:f5:18:8f:82:43:ca:
d9:2d:f2:ef:86:d7:03:26:a0:cb:bd:65:bb:f9:7e:
56:df:fe:c6:64:b1:4d:3a:57:d6:a7:e1:11:42:10:
25:2b:74:83:4d:ef:1d:d0:bd:e2:91:80:d4:a2:98:
56:8d:60:ce:a1:61:23:d6:95:9f:ff:3c:51:d0:09:
19:49:30:7e:ac:fb:10:08:e2:eb:0b:5c:1b:ae:17:
a7:4c:87:96:22:32:ad:6f:15:e9:68:d7:2e:a5:20:
64:1b:97:06:67:e4:3d:1c:49:bf:d5:25:08:cd:a8:
5c:b7:3d:f7:6b:91:a6:3a:8a:4d:22:61:e5:cc:ae:
a0:72:34:43:7b:91:7f:15:f5:2c:70:a6:f9:36:01:
f0:ec:8f:f9:40:5d:58:09:cb:bb:56:8f:b5:38:bd:
2a:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:4F:E4:F9:36:70:BD:C0:3B:08:B4:A1:35:54:36:A5:3A:72:D3:CD
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/SE_k-TZwvcA7CLShNVQ2pTpy080.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9d:67:55:b8:aa:03:1b:b2:7e:0a:c4:b5:c6:de:24:ab:3d:04:
eb:39:e3:ea:34:08:16:5d:a9:2d:76:0d:9a:77:98:4f:46:c0:
a1:55:ac:9b:98:bb:3d:2e:49:19:84:4f:d3:81:f7:bf:8a:20:
49:c0:91:ea:c6:ef:e6:07:4c:a4:7f:54:56:dd:f6:54:99:15:
ea:d8:87:40:2b:d3:3f:79:98:b2:f1:97:0d:da:b4:d0:45:00:
4d:4a:01:71:c9:b3:34:2f:91:13:4b:dd:93:a3:4b:db:be:ae:
d5:80:5d:65:76:13:2f:ea:97:f9:c5:9f:ec:10:8c:ba:f0:79:
71:19:c9:c6:e3:34:f9:7a:72:e8:75:03:0d:ab:11:ed:f7:26:
c4:94:b5:83:39:54:94:c6:a7:a3:60:c0:61:b0:5d:3c:52:75:
b4:88:8f:1c:df:ea:9b:58:9a:75:bd:d7:dc:52:0a:8c:25:d7:
3c:bb:ad:13:09:18:95:94:f8:80:72:bb:fa:9f:ef:3a:49:68:
b7:6b:87:76:56:b3:02:29:ba:18:44:87:0c:c5:50:b0:96:b0:
55:00:38:ce:bf:5d:8e:ab:5b:f3:8e:57:99:1f:69:cf:53:0e:
67:c4:e2:4a:e5:0f:2d:85:65:12:ed:bf:5c:cd:cd:41:bf:f9:
ea:1d:12:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 12:15:58 2025 by rpki-client