Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/swmwnpHGQQ_MAJYmDfyapkyOrco.roa
File: swmwnpHGQQ_MAJYmDfyapkyOrco.roa (raw, json)
Hash identifier: tPimhTpohNCgbw9pSvdpk8DZxmGSBfS96JkOf5fTibk=
Subject key identifier: B3:09:B0:9E:91:C6:41:0F:CC:00:96:26:0D:FC:9A:A6:4C:8E:AD:CA
Certificate issuer: /CN=92e720465c5cd0da9c6a13b44fa0d86f649e5055
Certificate serial: 0195ADB49CB7C440283395E912B19DAF9781
Authority key identifier: 92:E7:20:46:5C:5C:D0:DA:9C:6A:13:B4:4F:A0:D8:6F:64:9E:50:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/swmwnpHGQQ_MAJYmDfyapkyOrco.roa
Signing time: Wed 19 Mar 2025 09:20:49 +0000
ROA not before: Wed 19 Mar 2025 09:20:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212609
IP address blocks: 185.189.33.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:ad:b4:9c:b7:c4:40:28:33:95:e9:12:b1:9d:af:97:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92e720465c5cd0da9c6a13b44fa0d86f649e5055
Validity
Not Before: Mar 19 09:20:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b309b09e91c6410fcc0096260dfc9aa64c8eadca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:73:e1:2c:7c:10:cc:9e:f0:4e:5f:d0:b6:da:
b4:84:d9:22:8c:75:4d:1f:2c:37:f7:ad:cf:96:a6:
ee:f7:9e:51:e8:ce:54:ef:ec:a6:d2:ba:6c:c3:33:
8a:0c:72:ba:48:83:19:f0:86:4c:1c:58:39:7d:bc:
78:db:f5:5d:f7:26:78:c8:01:24:6e:fd:5d:7e:13:
a4:35:91:80:88:01:68:ad:68:0a:63:16:12:13:d2:
e4:e0:bf:8f:be:dd:db:ec:93:08:97:ed:3a:de:02:
7e:f8:f8:88:dd:28:93:eb:7c:51:c6:9e:fe:b5:e8:
76:90:59:77:64:4c:39:d6:7a:8c:d6:5e:27:e8:91:
7a:8e:cb:cb:15:f5:e4:d4:cf:c7:04:a9:e2:07:3a:
04:53:b0:18:86:a2:40:66:cb:bd:15:17:98:34:ff:
14:59:eb:41:b1:f0:ed:87:fb:49:b8:19:ee:91:78:
8f:64:fc:f0:b8:33:f0:07:c3:e6:f1:40:31:fb:bc:
c9:cc:0e:24:f3:21:ef:7a:e0:60:b7:c7:10:21:cd:
0c:69:99:cf:40:a3:7f:ca:dd:ca:68:1d:31:c5:fc:
67:73:cf:2f:5e:4b:90:d2:6c:46:08:ae:78:e4:a5:
55:20:ab:f4:d1:4d:df:db:94:6f:45:51:58:f5:7b:
96:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:09:B0:9E:91:C6:41:0F:CC:00:96:26:0D:FC:9A:A6:4C:8E:AD:CA
X509v3 Authority Key Identifier:
keyid:92:E7:20:46:5C:5C:D0:DA:9C:6A:13:B4:4F:A0:D8:6F:64:9E:50:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/swmwnpHGQQ_MAJYmDfyapkyOrco.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.189.33.0/24
Signature Algorithm: sha256WithRSAEncryption
55:e0:9e:39:05:15:32:12:67:1e:6f:45:86:99:eb:fd:15:54:
90:56:98:b5:6e:45:78:95:5f:cf:d4:1f:23:10:e0:be:cd:53:
24:53:bd:9d:6e:64:29:01:68:e3:44:ff:3f:da:ce:94:12:76:
d8:df:4f:62:a4:d7:da:68:e0:53:02:f9:91:b8:7a:0d:d8:ce:
0d:d1:36:8c:c1:06:29:8a:89:bf:d6:6f:8e:87:90:53:13:0d:
35:22:78:76:ab:58:42:8c:5c:31:32:db:5b:78:76:c3:58:16:
a6:96:5d:02:e8:81:8e:f8:32:2b:85:46:63:37:29:09:e7:e5:
f7:ce:a0:d4:52:f0:7f:92:9e:3e:f9:57:01:32:d0:b7:27:99:
0d:ec:ac:b8:7f:48:36:ed:78:8b:fd:f4:cb:79:ab:57:73:a6:
c4:00:9d:b2:d5:be:16:e7:52:04:59:ba:e6:95:d3:59:fd:e1:
53:b0:2d:2a:c2:42:fe:70:ce:3f:1b:d8:79:75:65:f7:9c:38:
08:e4:58:4d:69:f8:7f:65:c3:d0:59:c9:d8:13:b2:e1:43:df:
04:d9:9c:a0:8b:3f:4a:27:82:a8:71:a4:7d:93:8b:ae:7a:2e:
98:f0:59:2a:49:78:3e:5e:d0:1e:b3:d4:b3:f9:d4:ea:06:fc:
f6:71:60:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:17:55 2025 by rpki-client