Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/N-SwM-42B19Jg__gMdUBXHq0VX0.roa
File: N-SwM-42B19Jg__gMdUBXHq0VX0.roa (raw, json)
Hash identifier: 5MD93ua5OffvCaOV16fPalZqwlXEGrszGjXNII2tMFA=
Subject key identifier: 37:E4:B0:33:EE:36:07:5F:49:83:FF:E0:31:D5:01:5C:7A:B4:55:7D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01898D5D90250A5CF552AF46B51AEB95BE35
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/N-SwM-42B19Jg__gMdUBXHq0VX0.roa
Signing time: Tue 25 Jul 2023 14:04:26 +0000
ROA not before: Tue 25 Jul 2023 14:04:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:8d5d:5c38/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:8d:5d:90:25:0a:5c:f5:52:af:46:b5:1a:eb:95:be:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 25 14:04:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=37e4b033ee36075f4983ffe031d5015c7ab4557d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f0:6f:05:c8:38:c5:15:5a:70:07:69:d1:d8:
77:a6:3c:ad:4c:e2:56:e8:8a:8f:2a:6d:55:9e:87:
86:f8:bd:4d:3e:6f:77:18:26:24:fa:c1:37:ce:a0:
b2:45:d2:6e:a0:c3:22:b9:61:d4:b4:c7:3e:37:f6:
95:e4:e8:b3:30:3f:b4:cd:0c:83:0c:f4:b9:b8:b6:
63:26:93:e6:96:cd:f7:85:b6:64:4b:27:f7:41:94:
f9:b9:72:35:d6:41:a3:0d:ac:b8:e5:0f:5a:29:49:
35:e1:4b:a9:d8:b6:a8:6c:02:5f:a8:85:bf:d6:8c:
97:10:f2:21:03:a8:fa:bf:45:0f:eb:c0:07:9c:b4:
93:4a:9c:b3:6b:f6:65:83:80:03:8f:a8:56:38:6d:
44:69:4a:8f:8a:ed:8a:18:80:94:dc:91:30:87:40:
52:1d:23:db:de:e2:39:e7:a4:9b:d5:6f:2a:a9:5d:
6e:1c:33:1e:c5:9e:4f:f4:bc:c2:ba:04:a5:d4:53:
1a:5b:70:21:42:93:f7:a9:37:57:b1:23:a3:1e:b3:
86:56:3f:e6:a2:be:d5:39:3b:8b:e5:22:5c:c5:4d:
2b:bf:12:23:8d:83:15:2e:79:05:91:cf:cf:92:ea:
ea:04:64:20:9e:3f:bc:0a:6a:e1:b8:ab:a8:4c:7b:
1e:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:E4:B0:33:EE:36:07:5F:49:83:FF:E0:31:D5:01:5C:7A:B4:55:7D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/N-SwM-42B19Jg__gMdUBXHq0VX0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4a:a8:e1:5a:bf:77:6a:c3:79:31:d1:da:1f:26:31:15:58:ba:
f4:9c:6c:fd:3c:c3:26:4e:74:0c:51:ec:9d:cf:8d:cf:47:ef:
fd:39:40:4e:80:36:32:ed:0f:33:6a:ea:4e:24:1d:9c:75:35:
f0:c7:16:ce:f4:de:ac:19:6e:27:39:9c:38:7a:ee:50:57:d6:
07:fe:e4:6d:34:e5:bb:20:44:30:e9:b4:00:e6:15:32:34:34:
c2:62:70:3d:72:2f:e8:36:ec:97:4e:4e:49:cb:ce:65:f1:11:
62:3c:a7:df:22:33:62:68:bd:9d:dc:78:07:bb:b6:7b:77:eb:
6c:f6:fc:6d:57:86:e6:00:c6:52:34:aa:17:1a:37:d6:01:65:
08:ff:06:aa:c0:80:5b:31:f2:30:89:af:2b:24:ca:7e:c9:d5:
f7:2b:ed:c9:ff:0a:55:12:73:8d:e0:3b:9c:34:6f:b6:c7:37:
a5:0e:f8:94:61:b7:11:9d:b0:00:09:c9:22:1d:5c:99:31:68:
37:6f:98:19:40:ac:ba:99:41:05:ec:74:b9:7b:0f:0d:74:1f:
8a:0b:f2:b4:71:b6:22:ca:e8:a8:41:b1:4f:ac:7c:f9:33:c2:
da:05:f6:48:30:60:4c:f6:4f:ed:1c:f2:ef:a9:00:ad:37:9f:
9b:d0:11:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 02:30:42 2025 by rpki-client