Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/SwBXT-N1qc7KUiHe-RYmA81RYm0.roa
File: SwBXT-N1qc7KUiHe-RYmA81RYm0.roa (raw, json)
Hash identifier: bglU7qtMNFUlDaVYYgBFupqPqDYgjjuAuUrQmnt7dl4=
Subject key identifier: 4B:00:57:4F:E3:75:A9:CE:CA:52:21:DE:F9:16:26:03:CD:51:62:6D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 792ADCCE
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/SwBXT-N1qc7KUiHe-RYmA81RYm0.roa
Signing time: Thu 07 Apr 2022 06:09:34 +0000
ROA not before: Thu 07 Apr 2022 06:09:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2032852174 (0x792adcce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 7 06:09:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4b00574fe375a9ceca5221def9162603cd51626d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:65:f0:fd:13:ac:61:1a:74:7b:c5:62:96:17:
94:59:da:81:4e:e6:60:49:76:83:e5:01:2d:68:d6:
18:6d:17:52:df:01:32:2b:30:18:9c:a9:f8:40:d9:
10:1d:77:da:e2:4f:de:67:60:d9:11:bd:8f:8e:eb:
19:cf:eb:13:c7:e1:2b:54:44:99:c7:0d:d2:62:ce:
af:cf:45:02:2d:b4:f9:fe:03:95:91:c6:d6:c1:0f:
f3:9d:82:b0:2d:f0:a0:26:31:01:83:cd:c1:e3:39:
2e:d5:12:74:5d:09:64:04:4f:3e:a4:c2:b5:b3:fe:
03:4d:c0:45:ea:fc:ce:30:7d:a7:fc:ae:b2:a3:d4:
de:49:87:f0:12:a1:4a:bc:5c:9a:92:0a:9a:0d:2f:
75:60:51:82:a0:3f:8a:c6:9d:a2:5e:ca:c1:bb:42:
b4:ac:2a:3f:54:9d:38:34:d3:51:2c:0e:9c:b3:69:
2f:02:53:a5:1d:11:ad:cf:71:18:d9:cf:1f:38:64:
0e:7b:97:03:84:f2:ae:35:07:c3:9d:33:c1:30:f3:
06:fc:18:71:f3:92:af:62:97:a7:e4:1b:38:52:52:
82:b8:25:b0:dd:99:18:13:97:0e:0c:e3:2e:5d:ff:
58:b0:33:64:77:a5:65:30:30:77:4f:5d:44:9e:48:
64:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:00:57:4F:E3:75:A9:CE:CA:52:21:DE:F9:16:26:03:CD:51:62:6D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/SwBXT-N1qc7KUiHe-RYmA81RYm0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
59:e2:4f:de:57:53:85:b4:6f:ad:45:d6:21:54:66:45:72:4c:
99:f4:e6:fd:1a:77:e5:65:3c:15:66:a0:e1:bb:28:39:29:4c:
5b:a6:e7:6d:a9:8f:86:a9:78:ed:5d:43:56:c3:63:10:39:8c:
a3:3b:cd:db:36:8d:5f:f2:e0:bd:2a:10:96:ce:cc:da:f8:24:
5b:96:d8:b7:9f:32:be:3e:65:de:89:6f:71:fa:08:d8:a6:b7:
c4:a0:84:86:00:71:5c:48:64:e2:fc:f9:3d:27:1d:cc:25:93:
b7:ab:03:07:69:06:ac:bb:00:87:d2:b6:75:84:fe:73:87:45:
cb:e0:f1:d8:90:29:84:f9:fa:ff:3c:0e:cc:94:c7:3f:d3:f3:
4c:54:cf:b3:36:2e:09:68:33:e1:58:57:9b:de:78:3b:e1:7b:
f5:aa:50:b5:01:06:a8:ba:7e:6b:b5:2c:8b:25:89:22:e9:64:
aa:cb:96:11:e7:dc:97:fd:0e:30:89:2a:7d:db:a9:0c:91:82:
e7:fc:fd:56:15:63:9f:b2:be:e3:7c:ca:bf:92:48:34:bd:a4:
d8:1f:bc:03:80:de:8a:41:62:10:7f:ec:7d:b6:8f:e2:d5:54:
d8:b4:a5:10:a3:e8:7a:6e:24:31:d9:7b:14:c3:cf:ec:ae:d6:
9d:79:77:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:45:17 2025 by rpki-client