Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/SwNWDOf1r_Hv_osoYgZHlIdmTUw.roa
File: SwNWDOf1r_Hv_osoYgZHlIdmTUw.roa (raw, json)
Hash identifier: H9jD7MjqySKwoZaLoC332HJoN7bEstg9o0VDLo5uDsU=
Subject key identifier: 4B:03:56:0C:E7:F5:AF:F1:EF:FE:8B:28:62:06:47:94:87:66:4D:4C
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018FA7B7A9BDE2329D132B8EC3CA5DDF03CF
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/SwNWDOf1r_Hv_osoYgZHlIdmTUw.roa
Signing time: Thu 23 May 2024 23:09:42 +0000
ROA not before: Thu 23 May 2024 23:09:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18f:9689:3f54/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:a7:b7:a9:bd:e2:32:9d:13:2b:8e:c3:ca:5d:df:03:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: May 23 23:09:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4b03560ce7f5aff1effe8b286206479487664d4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ec:79:49:99:a9:31:39:8a:a4:2c:58:db:f8:
e1:19:18:7c:05:d7:27:6b:b2:b5:ce:6a:84:26:55:
d9:97:6f:cb:e3:34:f2:a7:c1:4d:0b:8a:90:c3:90:
e0:62:8c:ea:49:3d:54:a0:86:33:67:c5:19:89:13:
58:02:ed:d2:5c:29:37:3f:6a:a8:bb:a1:f8:b6:e8:
29:da:e8:ad:c4:cb:d8:eb:23:57:34:28:17:36:c3:
65:ca:f8:1f:1f:33:a1:27:c0:ee:bf:a2:be:1c:d5:
86:af:a4:03:f8:65:a0:f4:e9:04:2e:7b:2e:b1:c9:
3c:72:c8:85:43:4c:e4:11:62:5f:9f:32:32:05:d0:
a3:6e:cf:8b:80:44:c0:d7:ed:4a:c9:a1:6f:c9:40:
9b:ad:3e:bd:85:a8:3f:8c:fb:c5:05:8c:1d:36:b4:
f2:e0:3a:f5:64:a5:7a:76:e2:6b:dc:53:6c:69:a9:
c7:ca:92:78:7c:d2:28:a1:48:18:d9:9e:19:8e:d9:
96:93:bf:ad:d0:e6:ee:f4:6e:89:3d:41:f2:3d:4d:
fd:da:5e:e1:6c:7c:aa:79:43:ae:16:05:66:37:ee:
38:40:ee:4d:f6:ba:e9:b4:1f:8b:2a:c1:61:31:f2:
a6:cd:a8:44:34:aa:70:f6:e1:96:3f:44:d0:84:3b:
94:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:03:56:0C:E7:F5:AF:F1:EF:FE:8B:28:62:06:47:94:87:66:4D:4C
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/SwNWDOf1r_Hv_osoYgZHlIdmTUw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
62:09:8b:13:63:d5:1c:97:79:f6:39:55:da:fa:90:8d:06:a5:
dd:c3:de:33:80:9d:4a:5b:53:8f:d5:72:b2:38:2b:4c:08:a1:
89:c7:fa:97:6f:05:72:19:d6:b6:8f:35:18:80:f7:dd:c2:23:
ac:5b:17:3c:dd:a3:86:41:3d:ee:6c:e0:33:a9:59:66:eb:49:
af:53:05:8f:63:c7:25:c1:39:f6:af:9c:99:67:09:5a:55:3a:
58:32:8d:34:88:76:4e:83:9d:3f:e0:d3:97:1d:e8:87:89:63:
65:eb:6b:cc:c1:2d:e4:ba:81:27:2a:89:1a:06:7a:e1:10:48:
82:48:49:63:79:9b:17:6f:64:ad:56:86:86:03:87:36:47:06:
29:c4:c5:9d:39:15:75:65:38:5b:16:c0:9e:f4:9b:1a:74:40:
09:b0:5f:16:b0:5f:93:e5:79:63:ac:52:a8:49:0a:f8:a7:7e:
8b:f1:e0:02:bc:96:7d:26:4e:30:1b:ab:3c:73:f4:86:d8:55:
41:f9:39:67:38:ae:c0:1c:b9:59:47:c7:51:f8:54:59:32:48:
f2:f3:b6:9f:9f:c9:0d:6a:47:24:9f:a7:ea:b4:20:1f:ae:37:
53:09:30:59:e8:95:af:78:4a:69:4f:23:b4:6b:dd:e7:cb:eb:
9e:f7:b3:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 13:39:45 2025 by rpki-client