Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/a87b6e-d842-4c0c-881b-210940da177b/1/swtJRJu4zR0PsrP6wQX1p_rvSus.roa
File: swtJRJu4zR0PsrP6wQX1p_rvSus.roa (raw, json)
Hash identifier: oPitqhqg7DjBBPr9NtW1BLfhReaHIQDlnrOPkqG7puw=
Subject key identifier: B3:0B:49:44:9B:B8:CD:1D:0F:B2:B3:FA:C1:05:F5:A7:FA:EF:4A:EB
Certificate issuer: /CN=9042e83976e35fe29a01d3c43a9bc5964b37b443
Certificate serial: 019591E3A3E9FDD2BC792069FFD6CE5D0019
Authority key identifier: 90:42:E8:39:76:E3:5F:E2:9A:01:D3:C4:3A:9B:C5:96:4B:37:B4:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kELoOXbjX-KaAdPEOpvFlks3tEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/a87b6e-d842-4c0c-881b-210940da177b/1/swtJRJu4zR0PsrP6wQX1p_rvSus.roa
Signing time: Thu 13 Mar 2025 23:42:49 +0000
ROA not before: Thu 13 Mar 2025 23:42:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207936
IP address blocks: 194.124.235.0/24 maxlen: 24
2a0f:3cc0::/29 maxlen: 32
2a0f:3cc0::/32 maxlen: 32
2a0f:3cc1::/32 maxlen: 32
2a0f:3cc2::/32 maxlen: 32
2a0f:3cc4::/32 maxlen: 32
2a0f:3cc5::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:91:e3:a3:e9:fd:d2:bc:79:20:69:ff:d6:ce:5d:00:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9042e83976e35fe29a01d3c43a9bc5964b37b443
Validity
Not Before: Mar 13 23:42:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b30b49449bb8cd1d0fb2b3fac105f5a7faef4aeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:65:68:7d:6a:41:e6:0b:db:62:53:ad:8b:d4:
fe:45:65:27:6c:fb:d4:93:4d:45:7a:d4:d3:ee:96:
10:05:2c:76:71:cf:03:9b:4e:76:c2:d3:fa:39:a7:
4c:f4:ab:b9:da:37:bc:3d:9a:a0:c3:34:c3:f8:be:
2d:51:d4:82:7c:e1:cd:5c:42:17:54:64:81:58:02:
ea:d8:09:f1:a5:7c:3c:ff:51:4c:7b:93:6e:e9:4d:
7a:7a:e0:3c:c4:05:11:d9:49:8e:17:65:2b:be:4d:
82:71:76:c6:5e:54:af:f0:52:98:28:5b:63:e4:17:
0d:d1:1c:38:64:37:7c:3e:f4:36:a9:63:0d:d6:f0:
af:44:b7:97:4e:41:76:1c:91:c3:97:d6:33:3c:83:
37:f0:fb:10:70:06:25:47:80:ea:2d:e5:40:fa:83:
36:47:56:59:06:16:d6:85:02:8d:e8:88:cf:e3:0f:
02:d7:41:2e:70:50:7b:ab:cd:cf:c5:aa:12:41:8d:
6e:c1:ce:b0:3d:49:e4:4a:c4:cb:b5:a2:f9:4d:d8:
85:d0:dc:2b:90:77:d1:4a:a9:3b:b2:49:c6:2d:7e:
85:d9:47:9d:bc:3c:cd:a2:22:1b:f9:77:6c:d8:0f:
cc:cc:fa:40:9f:fb:9b:76:7e:45:3f:c0:0f:27:07:
c7:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:0B:49:44:9B:B8:CD:1D:0F:B2:B3:FA:C1:05:F5:A7:FA:EF:4A:EB
X509v3 Authority Key Identifier:
keyid:90:42:E8:39:76:E3:5F:E2:9A:01:D3:C4:3A:9B:C5:96:4B:37:B4:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kELoOXbjX-KaAdPEOpvFlks3tEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a87b6e-d842-4c0c-881b-210940da177b/1/swtJRJu4zR0PsrP6wQX1p_rvSus.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a87b6e-d842-4c0c-881b-210940da177b/1/kELoOXbjX-KaAdPEOpvFlks3tEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.124.235.0/24
IPv6:
2a0f:3cc0::/29
Signature Algorithm: sha256WithRSAEncryption
a2:06:b9:8c:7f:6f:0a:44:6e:5e:3d:8d:b0:30:35:c4:2c:77:
f8:ba:e9:d6:29:e7:84:43:08:57:bf:41:8a:8f:cc:af:07:b5:
c5:d6:e6:6f:f4:f4:22:27:81:d1:38:cc:41:b5:bf:0e:3c:27:
c8:4e:5a:f6:97:eb:e4:a6:08:31:2f:05:f3:2c:a6:53:c9:f0:
ed:12:79:63:9d:d3:1b:9a:54:f0:a5:bf:ba:c2:fd:c5:88:e5:
12:51:52:ec:41:fa:5e:06:2a:b5:a9:ca:20:54:cd:6d:ad:cf:
91:5a:13:94:fb:45:5b:8f:0d:b0:27:7b:fb:f5:bf:78:03:b5:
6b:de:6d:fa:90:c8:77:61:f7:76:b6:1a:9f:5e:14:81:90:ce:
2a:a9:2b:f1:32:2b:f7:24:03:25:07:10:9f:f3:f5:81:d3:41:
30:d7:28:54:e4:24:b7:7c:ac:9a:18:f2:d9:7a:12:fc:b4:81:
0d:f6:e8:f2:3b:ca:b0:ee:80:70:8c:4f:5b:58:bb:20:05:c0:
9a:f5:e1:bd:84:0f:84:6d:7b:b3:ca:87:27:c5:e3:0f:61:23:
4a:c0:36:84:f1:9a:02:81:b0:42:48:7d:f6:21:2e:20:51:0c:
11:91:59:ce:c1:12:74:96:71:82:83:6c:cc:24:72:ae:48:0a:
a4:76:f3:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 05:02:45 2025 by rpki-client