Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/swiQT2TBoGIzMWfTfwyoGN5pU58.roa
File: swiQT2TBoGIzMWfTfwyoGN5pU58.roa (raw, json)
Hash identifier: lzpzAyGBpTklzH+KOMJ9KtfEBlkD/4NFUFrNsCU7Ym0=
Subject key identifier: B3:08:90:4F:64:C1:A0:62:33:31:67:D3:7F:0C:A8:18:DE:69:53:9F
Certificate issuer: /CN=ba6ed0fb7b320832ac1580534c7b263f304e981b
Certificate serial: 018629382223332DBBD0A0FC993CC7C0B6A0
Authority key identifier: BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/swiQT2TBoGIzMWfTfwyoGN5pU58.roa
Signing time: Tue 07 Feb 2023 00:13:09 +0000
ROA not before: Tue 07 Feb 2023 00:13:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60253
IP address blocks: 92.205.192.0/20 maxlen: 24
92.205.156.0/22 maxlen: 24
2a00:116a::/40 maxlen: 48
2a00:116a:100::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:29:38:22:23:33:2d:bb:d0:a0:fc:99:3c:c7:c0:b6:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba6ed0fb7b320832ac1580534c7b263f304e981b
Validity
Not Before: Feb 7 00:13:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b308904f64c1a062333167d37f0ca818de69539f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:0f:e0:95:bb:c2:4f:c6:38:3b:82:10:c2:64:
c0:dc:b8:98:e0:97:b9:46:94:5a:ee:24:fb:0f:29:
57:46:bc:bf:db:4a:1a:7e:ce:8d:6f:0c:24:16:28:
1a:34:da:99:e0:04:39:4b:72:11:84:2b:ae:5a:0b:
0e:3d:28:91:de:f9:89:45:27:67:d2:56:7f:10:f0:
88:8e:8e:77:81:93:44:34:c8:6d:23:79:66:83:53:
fe:5d:c4:ee:89:2d:f1:70:78:39:f8:b8:26:46:4e:
13:64:da:57:8c:57:be:0e:2c:a5:b7:9b:16:ba:9f:
10:7d:8a:a2:c8:03:7c:10:81:99:62:94:84:4d:50:
6c:c1:bd:f1:10:64:ac:75:79:09:5d:a4:64:64:da:
b5:67:e5:df:90:cc:76:a5:61:09:f6:b3:c7:f7:73:
2d:7e:5f:20:d0:03:ce:a0:01:9f:92:c7:37:ef:21:
8a:e7:04:a9:2a:f1:63:6b:fd:17:0f:c5:e3:6e:d8:
7a:be:30:ce:ec:e7:7a:dd:d1:aa:1b:cc:dc:b2:62:
f6:08:51:15:a0:22:be:bc:a2:6e:b7:be:44:74:b9:
08:31:91:4d:3a:e1:4e:da:79:24:42:10:00:42:5a:
0f:1d:d2:26:7f:2d:97:85:7a:0b:18:47:31:ea:f5:
5a:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:08:90:4F:64:C1:A0:62:33:31:67:D3:7F:0C:A8:18:DE:69:53:9F
X509v3 Authority Key Identifier:
keyid:BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/swiQT2TBoGIzMWfTfwyoGN5pU58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.205.156.0/22
92.205.192.0/20
IPv6:
2a00:116a::/39
Signature Algorithm: sha256WithRSAEncryption
58:84:8e:eb:82:ac:65:dc:4b:86:a8:9a:a8:9b:cc:db:12:a4:
e8:5b:43:15:88:b3:6e:3e:c7:dc:50:16:76:90:16:f5:3e:52:
c4:64:a3:25:ff:0f:6c:b5:29:3f:27:d8:92:ba:57:d6:90:03:
ce:3f:bf:d2:ad:e3:03:a4:a8:48:0c:30:50:14:02:43:c9:2d:
92:da:e5:14:fc:a0:4e:3e:ca:ca:82:b6:f2:0b:ae:2a:ca:81:
d0:b5:a9:9b:17:20:7b:5f:92:44:ec:3d:00:52:9d:71:b7:f9:
28:57:21:85:cf:da:80:0c:34:f4:2e:49:8c:f7:66:cf:73:4e:
20:5a:de:4f:37:8c:b6:03:0f:c0:5a:06:fa:d7:c3:5c:33:2b:
c6:ed:eb:39:1c:64:da:1a:56:0c:77:c1:23:48:62:ce:87:0c:
63:a5:35:1a:f9:e0:a5:9a:45:ea:46:74:38:c7:f9:b7:81:19:
2f:95:c0:47:a0:7c:56:31:55:42:b6:f4:53:3e:4e:92:ad:89:
39:12:ea:10:d4:2c:d6:d9:9c:4a:6d:5f:6e:4a:5b:46:96:59:
d0:0f:32:e7:dc:5b:aa:3e:1f:f7:b3:2e:1a:62:fc:c6:dd:5d:
b1:4b:30:53:3f:f5:1f:55:73:63:60:8a:24:0f:f3:d3:36:f9:
9d:b0:80:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:33:17 2025 by rpki-client