Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/67c3f1-175b-4bf7-9fbb-b8b9b0131b41/1/Swgkux6e7bwanH6-qpzjogs02Zg.roa
File: Swgkux6e7bwanH6-qpzjogs02Zg.roa (raw, json)
Hash identifier: Be5c5k9y62umu2jc+UsCFcH8Y/OXc/hJS8+EvlTHbNw=
Subject key identifier: 4B:08:24:BB:1E:9E:ED:BC:1A:9C:7E:BE:AA:9C:E3:A2:0B:34:D9:98
Certificate issuer: /CN=37e1fa4013fab85d3237b1c35faa0e4ef0b9b817
Certificate serial: 050247E1
Authority key identifier: 37:E1:FA:40:13:FA:B8:5D:32:37:B1:C3:5F:AA:0E:4E:F0:B9:B8:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N-H6QBP6uF0yN7HDX6oOTvC5uBc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/67c3f1-175b-4bf7-9fbb-b8b9b0131b41/1/Swgkux6e7bwanH6-qpzjogs02Zg.roa
Signing time: Sat 01 Jan 2022 05:54:02 +0000
ROA not before: Sat 01 Jan 2022 05:54:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59492
IP address blocks: 193.187.77.0/24 maxlen: 24
193.187.78.0/24 maxlen: 24
193.187.76.0/24 maxlen: 24
193.187.79.0/24 maxlen: 24
193.142.213.0/24 maxlen: 24
195.182.7.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84035553 (0x50247e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37e1fa4013fab85d3237b1c35faa0e4ef0b9b817
Validity
Not Before: Jan 1 05:54:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4b0824bb1e9eedbc1a9c7ebeaa9ce3a20b34d998
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:df:e8:2f:f9:05:8a:04:19:c4:5e:e7:82:33:
dd:29:32:87:38:cc:d9:9b:7c:8e:b5:70:8a:25:e6:
5d:f2:43:72:f7:69:5c:41:44:82:2a:75:8c:b9:99:
56:ad:e2:b5:df:82:7e:43:b0:27:dd:97:ad:e3:60:
a0:45:ca:4f:a9:e9:ec:df:bb:4d:ed:55:a6:aa:12:
e4:41:c4:5c:6c:37:9d:46:5c:97:52:4e:54:ce:11:
b7:33:e1:e5:a2:05:c8:b8:97:f1:65:d8:e0:54:c3:
05:51:f7:6f:4a:10:19:c4:9f:7d:2d:5f:15:46:dd:
f4:e1:d9:b6:fa:ab:d4:f4:11:81:e9:9c:ae:c5:d4:
0c:a5:82:96:20:66:24:ee:a2:7d:fd:99:c3:76:c2:
bf:ea:33:33:92:37:34:36:e1:64:51:fd:92:6d:10:
3c:83:8a:5a:ec:67:06:4e:53:65:e7:d5:95:df:03:
50:d0:ec:3b:14:72:62:d9:d0:ef:b6:cc:a7:ab:f9:
63:96:d4:56:ee:bb:b5:07:49:5d:63:88:9a:51:3d:
8f:7d:a3:7d:ca:ea:2a:16:48:7f:e9:e1:86:ac:ee:
8c:4a:bf:21:bc:91:30:ad:10:da:66:0e:58:eb:df:
fd:21:2f:ad:4d:62:fd:38:08:d9:da:df:8d:85:5a:
f3:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:08:24:BB:1E:9E:ED:BC:1A:9C:7E:BE:AA:9C:E3:A2:0B:34:D9:98
X509v3 Authority Key Identifier:
keyid:37:E1:FA:40:13:FA:B8:5D:32:37:B1:C3:5F:AA:0E:4E:F0:B9:B8:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N-H6QBP6uF0yN7HDX6oOTvC5uBc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/67c3f1-175b-4bf7-9fbb-b8b9b0131b41/1/Swgkux6e7bwanH6-qpzjogs02Zg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/67c3f1-175b-4bf7-9fbb-b8b9b0131b41/1/N-H6QBP6uF0yN7HDX6oOTvC5uBc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.142.213.0/24
193.187.76.0/22
195.182.7.0/24
Signature Algorithm: sha256WithRSAEncryption
45:86:80:8d:ad:60:d6:c2:67:09:34:4d:b3:90:61:c7:5a:81:
62:4d:fa:3a:db:2c:d1:2d:f6:b9:48:46:cc:21:e3:f5:1d:99:
61:4a:84:a9:79:c7:76:2a:af:8f:00:04:ba:07:4a:98:5c:ab:
b3:d2:d9:71:32:76:27:b3:50:b8:8d:74:65:13:40:64:d5:1f:
df:ba:47:76:11:a5:be:ba:84:ea:91:c2:be:d0:59:16:87:53:
42:61:bf:cf:da:0b:77:bf:2d:e4:a8:cd:f9:b7:af:0e:7a:eb:
15:af:34:c5:d3:67:f5:67:ee:0c:1a:71:de:de:fd:6d:17:b6:
bf:48:89:e9:71:8c:12:68:cd:78:ad:17:24:14:6b:f2:9d:ac:
52:b2:b7:dc:59:63:ba:b3:ed:88:69:7c:3e:d7:de:29:3f:b4:
44:2c:04:54:ec:05:d5:2d:b1:5b:9c:3c:e1:9c:2f:e7:56:ff:
8a:e4:87:81:c5:17:f4:f1:26:af:eb:5e:f1:01:48:06:da:4b:
59:c2:ef:aa:ae:93:d8:3f:c5:0f:85:94:12:41:e6:e0:3d:39:
e9:26:ab:c5:8b:f8:8f:2a:54:b2:7b:8a:cd:29:7a:ba:bf:50:
96:f2:06:60:64:79:78:3f:03:a5:db:f2:87:78:37:f7:0e:71:
30:45:ef:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:42:28 2025 by rpki-client