Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/aa813e-a684-47ba-98ad-9b18237cdb94/1/SWQmo8UlrgTt1wh5wnr-w5sXKWs.roa
File: SWQmo8UlrgTt1wh5wnr-w5sXKWs.roa (raw, json)
Hash identifier: 0VmVJOt3tOUoLh60liErcZ0lPk/NKXs8aUU4q0gdzUI=
Subject key identifier: 49:64:26:A3:C5:25:AE:04:ED:D7:08:79:C2:7A:FE:C3:9B:17:29:6B
Certificate issuer: /CN=a4ff9dc0b66f279ad05ca2f4ea433981cce0f06d
Certificate serial: 018964C13BD88EB2972914F16D1EC039DD43
Authority key identifier: A4:FF:9D:C0:B6:6F:27:9A:D0:5C:A2:F4:EA:43:39:81:CC:E0:F0:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pP-dwLZvJ5rQXKL06kM5gczg8G0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/aa813e-a684-47ba-98ad-9b18237cdb94/1/SWQmo8UlrgTt1wh5wnr-w5sXKWs.roa
Signing time: Mon 17 Jul 2023 16:48:52 +0000
ROA not before: Mon 17 Jul 2023 16:48:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49505
IP address blocks: 93.190.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:64:c1:3b:d8:8e:b2:97:29:14:f1:6d:1e:c0:39:dd:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4ff9dc0b66f279ad05ca2f4ea433981cce0f06d
Validity
Not Before: Jul 17 16:48:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=496426a3c525ae04edd70879c27afec39b17296b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5d:a1:82:26:05:49:90:af:e8:93:4c:36:d9:
6d:30:df:ab:2f:97:da:62:38:d9:7e:0b:58:5d:7c:
d0:cf:fb:0a:4a:dc:e3:53:60:98:3b:a2:7c:dc:6e:
29:da:4b:b3:eb:d5:e5:40:d4:4b:b0:02:89:d2:38:
9e:a4:d2:c0:c6:45:48:11:09:b2:e4:fe:52:33:d1:
17:d4:36:1a:72:d2:ca:b9:28:77:87:9a:c6:5c:36:
fb:9a:1b:71:6c:8a:e8:a5:a2:cc:7b:01:d8:2d:0e:
b1:b6:d4:07:71:89:c6:b2:cd:a6:72:05:fd:22:9c:
77:76:b8:44:3f:34:50:56:35:f5:b7:a8:09:99:2b:
f4:25:6c:56:8a:60:91:e5:f9:82:da:a9:08:98:9b:
69:3b:87:4d:ec:81:64:50:f0:63:39:cb:08:65:31:
9d:9e:42:48:c2:69:0c:ba:b1:df:59:e3:f1:cc:40:
31:99:5e:6d:78:61:45:b8:e9:bb:17:e4:81:1e:dd:
c4:12:53:10:fa:a6:ee:38:3c:5f:bf:25:db:a1:61:
64:f7:b2:fc:28:7a:6f:34:e3:dd:d0:04:52:f1:68:
5a:8a:d3:96:8e:70:2f:76:70:06:47:48:5d:4a:e0:
cd:5f:d6:b1:1d:0d:ee:64:94:4e:6e:bc:da:e1:0f:
ab:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:64:26:A3:C5:25:AE:04:ED:D7:08:79:C2:7A:FE:C3:9B:17:29:6B
X509v3 Authority Key Identifier:
keyid:A4:FF:9D:C0:B6:6F:27:9A:D0:5C:A2:F4:EA:43:39:81:CC:E0:F0:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pP-dwLZvJ5rQXKL06kM5gczg8G0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/aa813e-a684-47ba-98ad-9b18237cdb94/1/SWQmo8UlrgTt1wh5wnr-w5sXKWs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/aa813e-a684-47ba-98ad-9b18237cdb94/1/pP-dwLZvJ5rQXKL06kM5gczg8G0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.190.123.0/24
Signature Algorithm: sha256WithRSAEncryption
74:81:00:e1:a0:9d:75:8a:bc:6a:de:8f:10:32:42:02:39:e6:
9e:9d:74:bd:44:65:ee:a0:ef:d2:9e:9c:d0:58:40:3e:cc:e7:
d5:8e:4b:aa:03:15:18:8c:43:93:42:83:db:3c:34:fc:ae:4e:
4e:47:bf:f2:1d:df:54:6a:a5:27:5c:53:dd:99:eb:44:81:44:
37:1e:46:df:f9:12:3f:56:d0:a5:6f:44:6f:b5:0b:1f:9e:e1:
50:a7:d4:a7:88:76:8c:19:ea:3e:67:18:d4:21:ca:5b:5f:bc:
7f:14:fa:51:16:0f:21:2c:79:51:49:29:3d:71:20:25:88:d2:
71:c5:7f:67:f9:b2:ee:0f:8d:d8:d5:9a:b6:14:6d:85:8f:41:
4b:06:23:d1:00:72:46:23:54:1a:67:63:a4:a4:d4:29:3b:6d:
68:8c:1d:9c:25:87:01:13:61:98:f4:50:14:b7:ef:0b:08:48:
66:e9:89:49:36:9b:00:40:bc:4b:ca:4a:5b:c5:d1:57:6a:3d:
2b:bd:ba:68:4c:ae:2a:0f:f6:b1:35:f1:4b:66:17:63:9a:e0:
a6:6e:9d:29:d3:29:85:cf:54:6c:db:b3:00:d6:f2:af:fc:20:
1d:2e:94:0b:2b:89:5f:d8:85:98:01:73:01:a1:26:82:ef:54:
5c:05:fe:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 03:48:15 2025 by rpki-client