Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/SWokCULoJFjt5Ilw52xo6aIcWNk.roa
File: SWokCULoJFjt5Ilw52xo6aIcWNk.roa (raw, json)
Hash identifier: achswzl5G0ixmQaStjFilHSKel9UINsOBqipUKR1yaU=
Subject key identifier: 49:6A:24:09:42:E8:24:58:ED:E4:89:70:E7:6C:68:E9:A2:1C:58:D9
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018413C77F70AA525C9FBFB3CEB031BD9619
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/SWokCULoJFjt5Ilw52xo6aIcWNk.roa
Signing time: Wed 26 Oct 2022 10:12:32 +0000
ROA not before: Wed 26 Oct 2022 10:12:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:13:c7:7f:70:aa:52:5c:9f:bf:b3:ce:b0:31:bd:96:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 26 10:12:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=496a240942e82458ede48970e76c68e9a21c58d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b5:f4:85:fe:47:59:56:e7:0c:f5:b5:87:57:
7b:90:f3:95:85:ea:c9:d7:43:1a:78:b3:5c:e7:77:
fd:68:20:77:f0:33:cb:30:b3:04:e0:f3:cf:c8:0c:
d4:e4:dc:d2:9e:46:94:e6:2f:36:38:95:49:5d:ad:
57:5c:03:5d:9b:65:6c:06:0a:cd:94:6d:b1:23:70:
70:19:b6:8f:2e:be:11:9f:cb:3a:19:98:10:c3:14:
77:21:ee:40:c7:62:29:41:81:2f:e7:6b:71:fe:0a:
34:e6:d0:30:3a:48:72:a8:9b:ca:27:14:9f:bc:76:
34:b5:b4:42:f1:21:15:c0:85:71:3d:af:b4:55:94:
e2:74:f2:26:54:ba:b3:cd:25:4e:38:5f:b0:34:0d:
33:55:3d:e9:04:8c:c1:08:48:71:3c:20:27:8e:08:
7d:5a:49:19:1e:e4:4d:97:91:9d:b5:7f:91:b9:50:
ec:82:c4:ce:fe:f3:31:5f:0e:d5:e4:9a:09:8d:b1:
65:a9:cf:9f:56:69:c3:94:ec:08:71:5a:26:29:92:
15:30:7e:0e:06:09:31:b7:24:5f:20:a2:b9:41:1b:
1f:76:48:16:03:19:d4:64:6b:0f:10:96:14:bf:8b:
68:d9:4e:06:7d:bf:89:fa:12:54:53:2b:eb:01:5b:
7d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:6A:24:09:42:E8:24:58:ED:E4:89:70:E7:6C:68:E9:A2:1C:58:D9
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/SWokCULoJFjt5Ilw52xo6aIcWNk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4a:10:9a:c4:ae:1a:dc:00:4e:c8:46:5d:29:47:4d:96:67:0e:
f2:aa:b9:c2:44:6d:56:56:ae:d4:57:04:fb:70:17:88:02:ad:
38:30:ec:b0:10:ca:43:bc:d2:20:95:73:5c:1f:ff:f4:7f:6f:
db:2d:cf:0a:f7:da:d7:c6:54:b9:26:99:39:ee:55:5d:fb:fd:
c8:75:9a:68:63:b9:f5:fe:29:a6:dd:cc:c0:88:e0:b2:a8:fc:
f2:4f:a9:70:8f:25:c5:fb:98:50:59:fe:f1:24:e0:b5:39:0a:
05:8b:47:08:eb:bf:79:a3:5c:5b:29:18:50:c7:87:ef:40:da:
fd:4d:1e:c3:80:d0:25:1a:4e:11:af:75:b3:24:c6:e7:e7:71:
36:01:54:89:7d:e5:02:3a:c2:ce:29:f9:42:a0:6b:37:9e:40:
19:e5:70:bf:0b:58:05:15:74:3e:bc:ea:1c:cc:d9:68:39:ae:
f0:bf:d1:a1:6f:5f:35:3f:0a:c2:33:71:89:bb:f2:53:ff:ff:
d8:98:e6:8c:5f:1b:72:eb:cc:18:ce:a5:5e:90:3d:98:af:26:
ef:f4:10:ec:e7:20:cb:d3:14:fa:0e:60:ea:83:88:db:52:0a:
db:1e:8f:6a:b1:b5:47:aa:32:0e:d8:fc:96:23:fd:9b:c7:99:
b5:ff:e6:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:42:46 2025 by rpki-client