Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/a02136-db9b-4bef-ae12-4c25fcbdedd1/1/Sw2yUjR1ZL0ByAYEDmqJ1PKv-34.roa
File: Sw2yUjR1ZL0ByAYEDmqJ1PKv-34.roa (raw, json)
Hash identifier: nd+025SnSLe+QrA8ZI1nLVUbcuTRnShB52imVtkdZsc=
Subject key identifier: 4B:0D:B2:52:34:75:64:BD:01:C8:06:04:0E:6A:89:D4:F2:AF:FB:7E
Certificate issuer: /CN=3e67ba8207b81c1b47263b1fde8f79b99597037d
Certificate serial: 019421444045E78CC9AE322ACA90B80C34A5
Authority key identifier: 3E:67:BA:82:07:B8:1C:1B:47:26:3B:1F:DE:8F:79:B9:95:97:03:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pme6gge4HBtHJjsf3o95uZWXA30.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/a02136-db9b-4bef-ae12-4c25fcbdedd1/1/Sw2yUjR1ZL0ByAYEDmqJ1PKv-34.roa
Signing time: Wed 01 Jan 2025 09:48:28 +0000
ROA not before: Wed 01 Jan 2025 09:48:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2119
IP address blocks: 193.160.1.0/24 maxlen: 24
193.160.2.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:40:45:e7:8c:c9:ae:32:2a:ca:90:b8:0c:34:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e67ba8207b81c1b47263b1fde8f79b99597037d
Validity
Not Before: Jan 1 09:48:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4b0db252347564bd01c806040e6a89d4f2affb7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b2:c6:fb:10:9f:94:10:df:d0:0c:6a:6b:ae:
82:90:7b:f8:d0:de:f4:fc:39:1c:b5:0d:16:7f:a8:
b7:e2:d4:a3:e9:d6:1b:80:2e:84:f8:21:18:cf:77:
40:ba:5f:76:8b:3c:c7:31:71:19:a4:ec:ab:21:5f:
e1:5b:57:f0:19:4a:d0:95:29:09:7a:d4:a9:6b:37:
41:7c:af:bb:48:56:b4:7e:7c:3a:37:22:fc:11:e4:
df:76:96:75:4f:31:6e:52:b2:4c:49:58:19:03:74:
26:a8:ed:6c:08:52:86:1d:78:b9:8a:99:79:39:a8:
b9:ac:41:2e:07:b1:47:eb:fa:79:cc:d5:ac:0e:41:
47:9c:ac:73:d6:ca:df:2a:3f:3e:88:ec:94:46:9a:
60:18:a3:18:2b:c6:b4:88:bb:fc:ed:3b:0b:27:0b:
a7:d0:d9:dc:e5:f7:62:51:91:ef:32:d7:e2:a1:dc:
e5:7b:4a:ad:46:89:73:fc:9c:e0:2d:d6:6c:10:4e:
e6:58:dc:46:f4:ad:07:c6:9c:b3:c7:13:72:dd:ad:
60:88:46:88:fb:34:ed:9a:01:bd:6c:5d:8a:9d:dc:
1d:0d:78:c0:52:08:9c:bc:9e:73:fe:48:f4:ac:9f:
34:be:95:cf:00:51:e1:57:20:90:87:ea:91:ee:f9:
d0:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:0D:B2:52:34:75:64:BD:01:C8:06:04:0E:6A:89:D4:F2:AF:FB:7E
X509v3 Authority Key Identifier:
keyid:3E:67:BA:82:07:B8:1C:1B:47:26:3B:1F:DE:8F:79:B9:95:97:03:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pme6gge4HBtHJjsf3o95uZWXA30.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a02136-db9b-4bef-ae12-4c25fcbdedd1/1/Sw2yUjR1ZL0ByAYEDmqJ1PKv-34.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a02136-db9b-4bef-ae12-4c25fcbdedd1/1/Pme6gge4HBtHJjsf3o95uZWXA30.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.160.1.0-193.160.3.255
Signature Algorithm: sha256WithRSAEncryption
81:4a:48:5e:2f:2a:59:f3:de:27:eb:7b:9e:05:f5:37:d2:b4:
d3:af:d7:3e:0b:a9:27:25:94:74:9d:2b:1e:5f:00:bf:cd:7f:
6d:a2:4b:bd:2e:cb:07:84:0a:f5:9b:8a:dc:c4:dd:f7:56:a5:
9a:8a:78:da:a9:9e:b3:53:63:5c:65:61:1c:19:71:d2:ac:68:
bf:16:37:0d:fd:6e:19:0a:4c:55:48:57:5a:97:81:7e:73:74:
b9:5b:b0:78:17:ce:78:56:4f:bb:c0:00:70:51:cc:38:ab:ac:
7f:2f:bc:7e:2d:45:3c:33:f5:8d:98:9e:ea:80:df:e6:85:e7:
e8:ea:3b:81:62:a5:f5:80:99:52:30:9d:db:6a:44:46:34:dc:
ed:a7:c9:9a:38:1f:4c:f0:56:e0:ea:92:06:68:db:16:2a:86:
60:b6:6b:8d:52:d8:97:3e:c8:41:c0:aa:33:b5:80:b9:f0:dd:
43:fc:29:99:38:5a:00:26:24:4e:eb:5c:6d:9c:83:a4:29:f4:
c8:72:0d:dc:4b:2e:df:b0:e3:91:b8:cb:21:31:1f:2f:3d:c5:
c0:e5:f5:9f:63:37:14:c2:a8:0f:ef:02:e5:a2:90:d5:6a:04:
75:a0:8a:8d:17:bb:c5:a4:45:3f:ea:ca:a6:a5:fa:61:88:41:
3e:fa:8a:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:25:21 2025 by rpki-client