Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/swArkw1WrgEtnFWKgy2T8Yxbxk8.roa
File: swArkw1WrgEtnFWKgy2T8Yxbxk8.roa (raw, json)
Hash identifier: bKLtf3nq/pwMdtbtyxrjobL7Vr7HNNRpTM/YWiFEPk8=
Subject key identifier: B3:00:2B:93:0D:56:AE:01:2D:9C:55:8A:83:2D:93:F1:8C:5B:C6:4F
Certificate issuer: /CN=557b0ac10b8642a27dd3d74ed6cb5ee045e67b97
Certificate serial: 01864A21B518CEAFEEDA5DA687CCD99800B7
Authority key identifier: 55:7B:0A:C1:0B:86:42:A2:7D:D3:D7:4E:D6:CB:5E:E0:45:E6:7B:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/swArkw1WrgEtnFWKgy2T8Yxbxk8.roa
Signing time: Mon 13 Feb 2023 09:36:08 +0000
ROA not before: Mon 13 Feb 2023 09:36:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34909
IP address blocks: 95.169.212.0/24 maxlen: 24
95.169.210.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:4a:21:b5:18:ce:af:ee:da:5d:a6:87:cc:d9:98:00:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=557b0ac10b8642a27dd3d74ed6cb5ee045e67b97
Validity
Not Before: Feb 13 09:36:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b3002b930d56ae012d9c558a832d93f18c5bc64f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:cb:7b:d9:6f:1c:91:bd:37:64:0a:3a:3e:27:
ae:45:57:0d:c8:2b:17:05:be:31:9d:91:fe:c0:ea:
09:a9:78:cd:2d:14:30:95:ba:8c:1b:d8:12:90:49:
2c:af:5a:c8:92:93:21:2d:f2:aa:de:4c:92:f1:fb:
d9:5f:f6:15:b7:5d:c9:e5:66:4b:ee:ef:31:a3:f1:
29:52:37:7a:83:58:6c:1a:a6:4b:d2:9c:0e:60:64:
91:ec:f0:e2:7a:0f:67:e5:37:25:1f:ce:c0:42:7a:
7d:bf:1c:6d:47:93:40:f3:23:ba:dd:88:e1:14:be:
7b:1a:e3:72:b5:ff:03:b3:de:ec:b8:06:02:1d:bf:
cf:be:cf:61:59:74:2f:9f:f8:72:70:56:39:c4:2e:
49:0d:42:99:72:b0:f7:4e:2e:3d:71:dc:fe:90:cf:
51:a2:d6:09:5d:c7:1b:2c:4b:99:09:98:83:9a:6a:
3d:5b:26:8a:bb:fa:68:57:76:94:44:de:2e:d2:56:
c5:be:36:28:47:88:eb:29:ef:b3:4b:24:26:78:12:
c4:0a:dc:94:20:9a:6b:d2:f5:28:a4:68:bd:d5:28:
db:ac:10:b0:3d:98:a6:af:1c:ad:f9:8b:65:bb:d8:
5d:7c:bc:14:ef:67:f7:4e:72:5d:8a:28:86:81:87:
cc:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:00:2B:93:0D:56:AE:01:2D:9C:55:8A:83:2D:93:F1:8C:5B:C6:4F
X509v3 Authority Key Identifier:
keyid:55:7B:0A:C1:0B:86:42:A2:7D:D3:D7:4E:D6:CB:5E:E0:45:E6:7B:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/swArkw1WrgEtnFWKgy2T8Yxbxk8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.169.210.0-95.169.212.255
Signature Algorithm: sha256WithRSAEncryption
57:f1:c7:a2:f4:55:88:bb:3a:95:9e:d6:9f:4c:91:17:9c:23:
f0:a1:05:73:d7:64:33:ea:bf:7d:80:29:a8:3a:3b:e2:08:37:
35:22:be:56:1c:3c:4e:df:0d:1f:20:c1:ea:2a:04:ed:d5:2c:
b3:90:fb:7b:c5:11:9d:f9:5c:7b:54:25:e6:c9:01:2c:75:7c:
e2:8c:b5:8a:5d:be:73:f0:8f:93:64:1e:dc:b5:ec:47:f7:e1:
ff:3c:0a:e7:37:7e:0c:22:ce:bf:0a:55:b3:38:2e:be:49:9b:
05:0b:b2:94:ec:c4:46:92:51:e2:49:fc:5f:fb:06:a6:bd:9e:
8f:0c:4c:08:91:78:70:84:5b:69:af:ff:c2:ec:cb:ce:9e:f4:
75:7e:84:f6:2f:5d:42:2e:2d:89:c7:ee:96:99:12:15:14:50:
71:22:05:f4:51:23:d9:90:7d:5e:e6:99:94:45:ce:7f:bd:47:
f8:42:df:9a:65:a4:04:e3:bb:9d:e4:fe:34:1e:fd:7b:78:a2:
69:0d:80:fd:ae:44:70:e8:9b:c5:dd:84:fc:e3:65:31:ac:f0:
6d:c7:fd:b0:3a:2a:f7:74:43:05:ac:34:34:b1:75:f7:ec:09:
25:b0:62:17:c3:53:dc:c6:7a:24:7c:6b:2d:f1:7a:f0:ee:86:
68:7a:e4:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 10:12:57 2025 by rpki-client