Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/r-swhppIcOXVOL-qulJXjDeie58.roa
File: r-swhppIcOXVOL-qulJXjDeie58.roa (raw, json)
Hash identifier: tLe4aQVO3I/Ibbb/ytDDCDyBYPXI1bQa/rhwVMn9mk0=
Subject key identifier: AF:EB:30:86:9A:48:70:E5:D5:38:BF:AA:BA:52:57:8C:37:A2:7B:9F
Certificate issuer: /CN=4ee843a85dd664e9dc0310892bd7dd9ce52591c7
Certificate serial: 019427486A139AA1F6F98BBF3806AAE911B3
Authority key identifier: 4E:E8:43:A8:5D:D6:64:E9:DC:03:10:89:2B:D7:DD:9C:E5:25:91:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TuhDqF3WZOncAxCJK9fdnOUlkcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/r-swhppIcOXVOL-qulJXjDeie58.roa
Signing time: Thu 02 Jan 2025 13:50:44 +0000
ROA not before: Thu 02 Jan 2025 13:50:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215324
IP address blocks: 206.245.238.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:6a:13:9a:a1:f6:f9:8b:bf:38:06:aa:e9:11:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ee843a85dd664e9dc0310892bd7dd9ce52591c7
Validity
Not Before: Jan 2 13:50:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=afeb30869a4870e5d538bfaaba52578c37a27b9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:24:1d:e3:7d:ae:c2:20:36:82:2b:ab:6e:1b:
1f:70:a5:66:b3:ce:e0:55:ae:33:c1:d6:86:18:59:
d4:e5:25:b3:a7:62:26:9f:dc:f5:85:b1:e8:1c:44:
bb:75:55:54:54:8f:78:7b:19:be:42:f5:ca:48:7e:
9f:c6:2d:dc:fb:ac:c6:d7:94:0e:f7:d9:91:7b:86:
7e:e9:52:8b:42:bb:ec:68:be:38:51:31:14:01:9d:
3d:23:7e:5d:ac:ff:2c:90:92:d9:59:e8:7b:40:e7:
df:70:09:7f:7b:14:94:4e:04:57:9f:4e:c5:07:82:
29:92:0f:00:5c:eb:da:68:e6:98:70:cf:d9:94:5f:
e8:80:9b:d6:35:92:8a:f8:29:8d:ab:dd:86:84:fc:
b4:31:72:24:b1:d7:73:71:35:58:b2:45:a1:47:26:
d2:d5:73:19:fe:ad:82:72:ce:d5:44:a9:67:5e:a8:
ec:39:83:e5:ce:9b:81:bf:cd:33:9a:99:9a:96:c3:
9c:5a:22:d5:73:af:73:34:f6:f2:3c:1e:2f:2d:f2:
70:07:a0:5c:b7:8a:15:52:e8:ca:20:c9:3e:47:d9:
cf:cc:48:d5:74:7c:ec:46:01:0a:f0:71:64:3c:c4:
19:0c:27:83:40:e0:60:06:f5:6c:97:c9:74:99:be:
65:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:EB:30:86:9A:48:70:E5:D5:38:BF:AA:BA:52:57:8C:37:A2:7B:9F
X509v3 Authority Key Identifier:
keyid:4E:E8:43:A8:5D:D6:64:E9:DC:03:10:89:2B:D7:DD:9C:E5:25:91:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuhDqF3WZOncAxCJK9fdnOUlkcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/r-swhppIcOXVOL-qulJXjDeie58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/TuhDqF3WZOncAxCJK9fdnOUlkcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
206.245.238.0/23
Signature Algorithm: sha256WithRSAEncryption
43:c2:e5:65:a7:d0:d4:8e:0e:56:04:9c:89:19:da:7b:f2:dc:
a2:0f:49:fc:06:44:dd:9b:18:0a:25:3a:8d:72:27:92:4d:02:
43:b0:b6:8d:17:9a:3e:2d:ed:ad:e0:8a:1c:f3:60:b6:34:57:
9f:cf:cb:25:59:57:cf:68:e7:5e:0b:fd:17:85:1a:47:41:9f:
c6:45:55:8a:5f:bd:16:98:14:a3:40:12:ea:b4:f2:fb:ba:78:
2a:45:80:c4:3f:9b:5b:cc:58:fa:df:12:1a:8d:23:e5:bb:c9:
de:e6:34:10:d9:a5:ba:54:49:cc:cd:c9:1c:b1:ce:d8:6b:de:
55:d5:3b:9a:85:31:88:42:d2:6b:81:b8:8b:fc:8a:d9:55:3b:
5f:3e:93:56:cb:64:13:ea:02:76:1b:4c:c9:e8:b2:5a:d8:4b:
bd:a7:94:8e:a3:f1:ff:76:2c:86:db:26:a8:8d:bf:13:a1:6f:
3c:02:80:00:a1:77:d5:08:13:5f:7f:6a:3a:5d:df:9c:bf:a0:
67:c9:6a:64:a7:7a:4f:8a:76:96:a5:d1:30:1c:c6:e8:71:78:
0f:eb:33:e2:09:ac:ce:f8:16:8d:02:7f:45:c3:3d:e2:5c:18:
68:1a:5c:8c:d9:6e:41:97:13:72:fa:06:d9:eb:65:1f:8d:b5:
f7:78:53:12
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQnSGoTmqH2+Yu/OAaq6RGzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlZTg0M2E4NWRkNjY0ZTlkYzAzMTA4OTJiZDdkZDljZTUy
NTkxYzcwHhcNMjUwMTAyMTM1MDQ0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZmViMzA4NjlhNDg3MGU1ZDUzOGJmYWFiYTUyNTc4YzM3YTI3YjlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6CQd432uwiA2giurbhsfcKVms87g
Va4zwdaGGFnU5SWzp2Imn9z1hbHoHES7dVVUVI94exm+QvXKSH6fxi3c+6zG15QO
99mRe4Z+6VKLQrvsaL44UTEUAZ09I35drP8skJLZWeh7QOffcAl/exSUTgRXn07F
B4Ipkg8AXOvaaOaYcM/ZlF/ogJvWNZKK+CmNq92GhPy0MXIksddzcTVYskWhRybS
1XMZ/q2Ccs7VRKlnXqjsOYPlzpuBv80zmpmalsOcWiLVc69zNPbyPB4vLfJwB6Bc
t4oVUujKIMk+R9nPzEjVdHzsRgEK8HFkPMQZDCeDQOBgBvVsl8l0mb5l4wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFK/rMIaaSHDl1Ti/qrpSV4w3onufMB8GA1UdIwQY
MBaAFE7oQ6hd1mTp3AMQiSvX3ZzlJZHHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHVoRHFGM1daT25jQXhDSks5ZmRuT1Vsa2NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9hZGFkMjAtYzUxMi00ZmIwLWExMjct
NDhjZjQxMmIzODdiLzEvci1zd2hwcEljT1hWT0wtcXVsSlhqRGVpZTU4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC9hZGFkMjAtYzUxMi00ZmIwLWExMjctNDhjZjQxMmIzODdi
LzEvVHVoRHFGM1daT25jQXhDSks5ZmRuT1Vsa2NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzvXuMA0G
CSqGSIb3DQEBCwUAA4IBAQBDwuVlp9DUjg5WBJyJGdp78tyiD0n8BkTdmxgKJTqN
cieSTQJDsLaNF5o+Le2t4Ioc82C2NFefz8slWVfPaOdeC/0XhRpHQZ/GRVWKX70W
mBSjQBLqtPL7ungqRYDEP5tbzFj63xIajSPlu8ne5jQQ2aW6VEnMzckcsc7Ya95V
1TuahTGIQtJrgbiL/IrZVTtfPpNWy2QT6gJ2G0zJ6LJa2Eu9p5SOo/H/diyG2yao
jb8ToW88AoAAoXfVCBNff2o6Xd+cv6BnyWpkp3pPinaWpdEwHMbocXgP6zPiCazO
+BaNAn9Fwz3iXBhoGlyM2W5BlxNy+gbZ62UfjbX3eFMS
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:00:04 2025 by rpki-client