Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/485ebc-7ee4-4270-bdc8-97fa80c0df41/1/SWKxeLe_GGuPotQH4HKhFwr-_-A.roa
File: SWKxeLe_GGuPotQH4HKhFwr-_-A.roa (raw, json)
Hash identifier: nzRbtMsfHtfSOMu7Pb2PpTkqYw2TVYbIXEMhQXP/4G0=
Subject key identifier: 49:62:B1:78:B7:BF:18:6B:8F:A2:D4:07:E0:72:A1:17:0A:FE:FF:E0
Certificate issuer: /CN=6b378df27bd9260c7eb15273e993e36b0985da10
Certificate serial: 01941F8C2A56C01E92CA89989EE30EEA1587
Authority key identifier: 6B:37:8D:F2:7B:D9:26:0C:7E:B1:52:73:E9:93:E3:6B:09:85:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/azeN8nvZJgx-sVJz6ZPjawmF2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/485ebc-7ee4-4270-bdc8-97fa80c0df41/1/SWKxeLe_GGuPotQH4HKhFwr-_-A.roa
Signing time: Wed 01 Jan 2025 01:47:47 +0000
ROA not before: Wed 01 Jan 2025 01:47:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56786
IP address blocks: 84.21.176.0/22 maxlen: 24
84.21.176.0/24 maxlen: 24
84.21.177.0/24 maxlen: 24
84.21.178.0/24 maxlen: 24
84.21.179.0/24 maxlen: 24
2a0d:f540::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:2a:56:c0:1e:92:ca:89:98:9e:e3:0e:ea:15:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b378df27bd9260c7eb15273e993e36b0985da10
Validity
Not Before: Jan 1 01:47:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4962b178b7bf186b8fa2d407e072a1170afeffe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:90:1d:4a:14:4c:61:20:69:0f:49:94:6d:f3:
ae:b5:ee:5e:9b:9f:6d:83:45:06:16:32:c7:7e:31:
92:a5:5a:ef:60:a5:07:90:05:92:9d:39:b5:3c:ac:
79:e2:50:c9:53:8c:16:f6:a7:05:42:26:90:5e:0a:
27:99:ec:76:9e:05:af:e7:fa:27:ae:11:68:92:48:
4e:91:1c:9a:73:51:67:89:6d:f5:eb:9b:ad:02:36:
4f:8f:1f:4a:34:b0:ed:7a:92:fd:25:9e:ec:89:5a:
a6:0d:59:01:38:4c:bd:5a:28:86:f5:2f:d2:42:1f:
c2:88:5c:d2:a0:72:2c:f6:8a:cb:ad:e6:c2:12:1c:
87:78:d2:44:8f:7f:b7:72:4f:cb:29:6c:aa:91:48:
5d:99:f8:bf:50:b6:62:4d:69:49:a6:3f:0f:38:d8:
1e:e8:41:46:5a:40:c1:dd:64:dc:c3:9c:54:38:9b:
53:69:43:91:c8:0b:aa:75:25:9b:7b:7c:09:8f:c4:
a0:cc:52:24:69:6a:98:26:58:0e:1f:94:a1:2f:a2:
a9:de:d6:4e:e5:57:7b:87:8a:24:09:37:6a:f2:14:
82:94:78:68:26:ea:57:de:ed:0a:3e:ae:9f:56:68:
64:c4:47:b7:46:ee:e3:be:72:15:6b:f8:13:36:6a:
03:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:62:B1:78:B7:BF:18:6B:8F:A2:D4:07:E0:72:A1:17:0A:FE:FF:E0
X509v3 Authority Key Identifier:
keyid:6B:37:8D:F2:7B:D9:26:0C:7E:B1:52:73:E9:93:E3:6B:09:85:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/azeN8nvZJgx-sVJz6ZPjawmF2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/485ebc-7ee4-4270-bdc8-97fa80c0df41/1/SWKxeLe_GGuPotQH4HKhFwr-_-A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/485ebc-7ee4-4270-bdc8-97fa80c0df41/1/azeN8nvZJgx-sVJz6ZPjawmF2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.21.176.0/22
IPv6:
2a0d:f540::/29
Signature Algorithm: sha256WithRSAEncryption
20:48:03:14:cf:56:05:7c:1a:cc:2e:c8:a1:0e:86:f7:bf:11:
98:00:e5:73:91:65:89:5d:08:ed:74:f7:76:bc:ef:12:d3:85:
fa:b7:a9:2d:54:d1:fc:3a:2b:19:8b:91:d2:34:4f:14:fd:8b:
94:fa:23:73:ae:8c:b8:45:7b:d9:55:fb:c0:c5:e0:e0:a8:fe:
15:37:9f:03:2a:6f:f0:c5:d7:db:e3:a3:ee:36:07:84:58:fe:
17:c6:8b:3b:e2:87:6d:e9:b5:1a:a4:7c:c1:16:29:72:80:5d:
56:d5:f9:4e:3c:18:3b:ab:63:fa:ef:3c:14:f8:b8:4d:d3:83:
84:f4:64:99:6f:35:59:49:ea:2d:f2:3c:41:ed:12:a8:0a:ed:
d6:29:f4:63:7a:65:b0:ee:0d:b9:a4:2e:b4:05:dd:3d:73:00:
0e:96:cc:1d:94:fe:55:dc:0d:11:a8:c4:b7:87:63:10:c0:e4:
df:9e:32:4b:91:9f:37:83:62:9b:5e:3f:a3:38:95:83:4c:7d:
79:5f:1a:d8:b8:90:98:27:47:86:6a:d8:a0:96:98:e6:79:4e:
87:5a:47:e5:48:05:41:4e:18:74:87:5a:c7:40:a6:26:56:e9:
79:a7:5c:51:af:71:f3:b2:ba:77:50:10:fc:bd:00:71:13:fb:
1a:42:78:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:27:21 2025 by rpki-client