Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/1SW-2xi11V63HCREW8hUdL3tZmw.roa
File: 1SW-2xi11V63HCREW8hUdL3tZmw.roa (raw, json)
Hash identifier: cOv7Oi38iBDrDb9WZ2Ip3z9u0lLKK3yHhjWLwQyWMKM=
Subject key identifier: D5:25:BE:DB:18:B5:D5:5E:B7:1C:24:44:5B:C8:54:74:BD:ED:66:6C
Certificate issuer: /CN=d81d42aae019e4ea44a616378eb66b389de8c511
Certificate serial: 0194266BC7D5073A03D0FB97CFE9F5BC820A
Authority key identifier: D8:1D:42:AA:E0:19:E4:EA:44:A6:16:37:8E:B6:6B:38:9D:E8:C5:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2B1CquAZ5OpEphY3jrZrOJ3oxRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/1SW-2xi11V63HCREW8hUdL3tZmw.roa
Signing time: Thu 02 Jan 2025 09:49:45 +0000
ROA not before: Thu 02 Jan 2025 09:49:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50902
IP address blocks: 2a0f:fc80::/32 maxlen: 32
2a0f:fc81::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:c7:d5:07:3a:03:d0:fb:97:cf:e9:f5:bc:82:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d81d42aae019e4ea44a616378eb66b389de8c511
Validity
Not Before: Jan 2 09:49:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d525bedb18b5d55eb71c24445bc85474bded666c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:f7:25:45:bb:aa:9f:7b:76:d3:23:dd:09:b5:
f3:fb:89:e4:f9:ab:52:d7:44:5d:b4:62:4d:15:fa:
36:6e:dd:f3:02:ae:af:bb:0c:0e:c6:36:e4:ce:4b:
14:34:82:2f:34:1d:3a:86:12:e5:36:4d:58:7e:3d:
c5:36:ce:1d:7e:ef:4e:ed:90:97:4b:40:57:ce:ec:
6e:fa:4e:1e:91:6f:98:4b:9e:12:af:10:73:6f:2f:
2e:65:a7:88:9f:df:8e:88:45:3b:4f:34:9e:99:e9:
ac:fa:a4:12:50:76:96:e4:65:c5:1a:b7:e3:7d:30:
5c:29:b1:3e:c8:a7:48:5a:9c:e9:37:55:57:dd:ca:
8b:db:31:6a:4e:9a:80:d5:8a:95:9e:ac:4d:7f:c4:
45:81:5d:e4:1f:ce:38:ab:f1:45:56:19:84:aa:dc:
19:d2:51:2a:74:12:f7:20:40:09:7a:61:98:50:35:
99:0d:a5:c4:40:85:2b:e0:a1:4a:be:ea:36:0b:79:
02:c0:54:9a:c5:3c:f6:4a:3c:b8:12:06:aa:2a:ae:
3e:47:d4:72:a8:34:d2:5a:a3:48:3f:94:f2:02:58:
b0:f2:d1:04:51:b0:45:ae:b7:55:ea:08:50:e2:d4:
aa:8f:9a:8a:d8:bc:65:4e:9c:68:a1:79:43:f9:5c:
20:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:25:BE:DB:18:B5:D5:5E:B7:1C:24:44:5B:C8:54:74:BD:ED:66:6C
X509v3 Authority Key Identifier:
keyid:D8:1D:42:AA:E0:19:E4:EA:44:A6:16:37:8E:B6:6B:38:9D:E8:C5:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2B1CquAZ5OpEphY3jrZrOJ3oxRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/1SW-2xi11V63HCREW8hUdL3tZmw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:fc80::/31
Signature Algorithm: sha256WithRSAEncryption
cb:8d:4f:32:1e:b8:dd:3f:be:35:1c:16:69:bf:4c:fd:62:5d:
54:0c:f3:ae:05:1b:86:d0:e6:82:c8:f6:23:c7:5a:3a:5e:9a:
cf:8b:46:ea:21:09:98:94:35:5c:2e:6f:b6:05:ff:1f:70:4d:
8e:cc:bd:3f:82:4a:38:71:73:b1:9e:d1:b2:60:8c:48:af:59:
69:99:b4:df:82:f1:61:dc:5d:ee:52:eb:d2:2d:62:2e:bc:85:
b5:01:64:04:94:ce:44:09:95:6c:94:ba:ac:ba:37:a4:85:d8:
8c:fe:d1:32:46:f6:38:f2:84:d8:3e:fc:bc:0b:8d:e4:b9:a2:
d4:41:d7:68:8c:d7:0d:ef:6e:38:6b:d3:b2:d0:1c:73:ba:d9:
36:b5:f0:1b:20:9c:78:f9:bc:cc:f4:7c:bf:d3:19:ce:a0:97:
96:d3:de:bc:67:51:ad:7a:c4:15:b5:75:c4:1b:3f:51:72:2d:
f9:bb:06:33:7c:ab:c0:b7:83:b6:88:ab:10:02:29:98:db:d7:
c3:ac:2e:13:fb:62:35:27:d0:eb:39:22:73:0e:f5:76:96:66:
ca:80:f5:e7:15:39:50:73:10:ef:ac:9a:62:b7:5d:e3:97:d1:
e7:77:00:bf:40:9d:25:7a:63:83:27:fe:10:3a:6c:44:a9:a4:
b1:4b:d5:84
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZQma8fVBzoD0PuXz+n1vIIKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4MWQ0MmFhZTAxOWU0ZWE0NGE2MTYzNzhlYjY2YjM4OWRl
OGM1MTEwHhcNMjUwMTAyMDk0OTQ1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNTI1YmVkYjE4YjVkNTVlYjcxYzI0NDQ1YmM4NTQ3NGJkZWQ2NjZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2fclRbuqn3t20yPdCbXz+4nk+atS
10RdtGJNFfo2bt3zAq6vuwwOxjbkzksUNIIvNB06hhLlNk1Yfj3FNs4dfu9O7ZCX
S0BXzuxu+k4ekW+YS54SrxBzby8uZaeIn9+OiEU7TzSemems+qQSUHaW5GXFGrfj
fTBcKbE+yKdIWpzpN1VX3cqL2zFqTpqA1YqVnqxNf8RFgV3kH844q/FFVhmEqtwZ
0lEqdBL3IEAJemGYUDWZDaXEQIUr4KFKvuo2C3kCwFSaxTz2Sjy4EgaqKq4+R9Ry
qDTSWqNIP5TyAliw8tEEUbBFrrdV6ghQ4tSqj5qK2LxlTpxooXlD+VwgIwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFNUlvtsYtdVetxwkRFvIVHS97WZsMB8GA1UdIwQY
MBaAFNgdQqrgGeTqRKYWN462azid6MURMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkIxQ3F1QVo1T3BFcGhZM2pyWnJPSjNveFJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS8xYzdjMDktZTAyYy00Y2JmLTllNjct
OTY4NTU1NTE5MGM0LzEvMVNXLTJ4aTExVjYzSENSRVc4aFVkTDN0Wm13LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS8xYzdjMDktZTAyYy00Y2JmLTllNjctOTY4NTU1NTE5MGM0
LzEvMkIxQ3F1QVo1T3BFcGhZM2pyWnJPSjNveFJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUBKg/8gDAN
BgkqhkiG9w0BAQsFAAOCAQEAy41PMh643T++NRwWab9M/WJdVAzzrgUbhtDmgsj2
I8daOl6az4tG6iEJmJQ1XC5vtgX/H3BNjsy9P4JKOHFzsZ7RsmCMSK9ZaZm034Lx
Ydxd7lLr0i1iLryFtQFkBJTORAmVbJS6rLo3pIXYjP7RMkb2OPKE2D78vAuN5Lmi
1EHXaIzXDe9uOGvTstAcc7rZNrXwGyCcePm8zPR8v9MZzqCXltPevGdRrXrEFbV1
xBs/UXIt+bsGM3yrwLeDtoirEAIpmNvXw6wuE/tiNSfQ6zkicw71dpZmyoD15xU5
UHMQ76yaYrdd45fR53cAv0CdJXpjgyf+EDpsRKmksUvVhA==
-----END CERTIFICATE-----
Generated at Mon Apr 7 23:36:52 2025 by rpki-client