Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/4b28b8-77f6-46d3-b8d5-83bc413a048d/1/SE867Co1dWwT9rn_iwUHdqZbJb8.roa
File: SE867Co1dWwT9rn_iwUHdqZbJb8.roa (raw, json)
Hash identifier: gDn91MwxNsmg9NA7daGFqFT1lPwuLwOn38cGeI8H8VA=
Subject key identifier: 48:4F:3A:EC:2A:35:75:6C:13:F6:B9:FF:8B:05:07:76:A6:5B:25:BF
Certificate issuer: /CN=6bb9125b8a10d322348681a2d2ac7d67d2ad2535
Certificate serial: 0194266BDED0BE9DDFF88AD39C6C9C6F7357
Authority key identifier: 6B:B9:12:5B:8A:10:D3:22:34:86:81:A2:D2:AC:7D:67:D2:AD:25:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/4b28b8-77f6-46d3-b8d5-83bc413a048d/1/SE867Co1dWwT9rn_iwUHdqZbJb8.roa
Signing time: Thu 02 Jan 2025 09:49:51 +0000
ROA not before: Thu 02 Jan 2025 09:49:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29119
IP address blocks: 185.165.248.0/23 maxlen: 23
185.165.250.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:de:d0:be:9d:df:f8:8a:d3:9c:6c:9c:6f:73:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bb9125b8a10d322348681a2d2ac7d67d2ad2535
Validity
Not Before: Jan 2 09:49:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=484f3aec2a35756c13f6b9ff8b050776a65b25bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d2:63:50:51:ad:c1:78:83:ae:a6:2e:06:be:
03:a7:8e:d8:f9:a1:0e:34:22:4c:01:cf:32:ef:dd:
16:2a:90:ba:f8:fd:cd:76:e7:83:f0:fc:6f:b0:ed:
ec:c6:03:45:47:7e:7d:81:a5:0c:c0:19:3a:b6:73:
ce:85:e9:02:0a:a6:20:55:96:17:8e:55:2c:78:66:
c1:f2:e5:d2:f5:22:a5:c0:21:18:72:5f:15:4d:f2:
1d:75:71:d6:be:58:c1:65:90:49:1a:53:95:09:c1:
ae:64:f1:c2:e9:ac:14:36:45:da:73:64:5c:0e:f5:
9c:ef:3f:25:80:4b:20:23:a0:b4:65:f8:95:83:15:
88:73:c2:62:d1:06:86:a4:90:33:3e:89:d1:1c:d8:
1a:67:2c:94:b2:61:d4:62:54:c4:c7:1b:a9:c5:7a:
10:91:91:39:ee:24:e1:5e:6f:2a:bf:fe:33:53:77:
0d:0a:47:58:a0:5c:d6:58:6e:8d:fe:fc:e3:2b:8f:
7f:77:1e:4d:0a:0a:4c:dd:3b:a6:46:bd:9f:a8:f9:
e4:21:23:7b:0e:8a:1f:8f:91:2f:d0:5b:db:19:9e:
89:f1:f7:fe:89:26:97:18:84:29:d1:83:c9:68:18:
23:97:be:f5:61:18:7a:f0:7d:f2:c0:63:a7:df:ab:
e4:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:4F:3A:EC:2A:35:75:6C:13:F6:B9:FF:8B:05:07:76:A6:5B:25:BF
X509v3 Authority Key Identifier:
keyid:6B:B9:12:5B:8A:10:D3:22:34:86:81:A2:D2:AC:7D:67:D2:AD:25:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/4b28b8-77f6-46d3-b8d5-83bc413a048d/1/SE867Co1dWwT9rn_iwUHdqZbJb8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/4b28b8-77f6-46d3-b8d5-83bc413a048d/1/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.165.248.0/22
Signature Algorithm: sha256WithRSAEncryption
0c:81:36:e6:c6:8b:89:1e:33:d2:c8:90:a3:94:f3:2c:9d:e7:
47:07:15:b0:2d:13:1f:3e:50:4d:47:6e:a0:78:4e:6b:e1:ba:
cd:26:f4:89:79:b9:42:9b:07:fd:b6:6b:61:7a:01:73:d1:f0:
72:6f:f2:4c:8a:e7:ed:0a:06:4d:64:e8:eb:7c:25:6d:4a:e7:
46:ce:98:4f:ef:33:c2:05:ad:5f:d7:6c:db:71:71:d9:41:03:
94:26:72:d9:63:6c:6d:1f:94:01:23:19:d1:00:20:f9:7b:f5:
4b:51:88:94:9b:3d:e4:b5:ca:bf:25:5a:26:d7:a7:4b:34:e6:
e3:5f:d0:1e:8d:9a:0d:2f:35:81:47:f9:47:02:69:77:62:3f:
39:f8:da:6a:a3:af:fc:e2:55:04:b9:8f:79:31:37:7d:4b:f7:
35:5f:2e:dd:88:07:da:4f:70:29:bc:46:e5:f9:45:f1:7a:c2:
38:c6:09:3e:7b:e6:be:19:92:35:a5:b0:93:d4:cd:e9:fb:d1:
3c:70:c5:62:77:b8:42:82:c9:d3:82:2e:2a:73:21:c7:c0:25:
db:56:13:f9:57:6e:56:23:c0:07:20:15:19:b1:3d:ab:df:c1:
12:25:3f:0d:eb:b6:6f:13:a0:b8:17:e3:f3:1c:6e:fe:b9:11:
c4:3a:51:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:50:15 2025 by rpki-client