Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/swtpyb16QpdGAc8RWB9iBgBD830.roa
File: swtpyb16QpdGAc8RWB9iBgBD830.roa (raw, json)
Hash identifier: 5VPIsE+j2ZB+z4dp8u2vWWzMkob7qjVNMnSiltb9uCU=
Subject key identifier: B3:0B:69:C9:BD:7A:42:97:46:01:CF:11:58:1F:62:06:00:43:F3:7D
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C563803C08C06DD23D514AFD2121E2435
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/swtpyb16QpdGAc8RWB9iBgBD830.roa
Signing time: Mon 11 Dec 2023 00:12:40 +0000
ROA not before: Mon 11 Dec 2023 00:12:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:56:38:03:c0:8c:06:dd:23:d5:14:af:d2:12:1e:24:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 11 00:12:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b30b69c9bd7a42974601cf11581f62060043f37d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:59:92:6b:06:3d:83:79:f4:5e:2a:86:6b:66:
a4:91:f3:a5:75:1a:21:3f:91:a8:a1:cd:44:5f:86:
ce:f8:ce:7d:ff:91:bd:c4:b3:06:30:c4:88:70:0c:
b1:59:ce:a8:f8:16:60:2d:d5:32:22:f7:ee:62:0e:
26:bb:e8:ac:8f:92:4e:d8:a6:d3:27:de:c9:39:41:
64:7a:b0:bb:35:49:d6:c6:fe:e2:bc:a4:35:11:27:
ec:f2:5a:bc:aa:43:c9:a7:50:6d:84:89:7c:7a:13:
1c:72:7f:fd:0c:3e:87:45:e9:02:e0:3b:6d:78:b2:
e4:14:2e:c3:2a:e0:c9:98:6b:b3:87:6a:77:c2:b9:
46:3a:1f:7f:7d:11:6c:66:df:7b:fa:ef:f0:15:b6:
39:4a:21:cb:24:cc:96:79:2e:d0:62:7a:93:7e:5e:
3a:c0:2c:03:40:55:25:4b:ee:28:34:ec:ea:8e:c1:
ff:e7:91:72:52:eb:71:31:26:b6:aa:2e:e8:6d:7d:
7d:a8:f3:ee:63:1c:b9:95:7e:27:03:9e:42:61:15:
8c:b3:e2:1c:41:76:38:2d:80:9a:e9:60:1d:a2:18:
84:70:60:70:99:f8:2e:45:f9:ba:1e:bf:e5:62:47:
8d:63:ef:86:64:4f:43:75:de:ac:5e:87:b3:77:7f:
9a:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:0B:69:C9:BD:7A:42:97:46:01:CF:11:58:1F:62:06:00:43:F3:7D
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/swtpyb16QpdGAc8RWB9iBgBD830.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a5:f1:52:97:65:41:52:9c:b9:11:3a:77:6b:40:62:83:70:09:
64:55:5d:f0:91:84:94:66:0f:d1:30:53:65:61:9b:c1:5a:32:
9a:9b:e2:68:bb:f8:e6:92:d8:11:c8:2d:61:ad:87:78:57:43:
54:6d:a4:61:64:71:0b:4d:e7:5f:82:21:2b:04:91:39:03:de:
09:18:c7:9e:f4:49:9f:26:08:c7:d0:c2:a5:48:36:e1:3d:a1:
a4:54:93:ec:d1:2a:a1:c8:00:86:f3:b6:ca:08:29:43:0e:f3:
ae:cb:ed:2c:fb:e0:4f:14:7c:f6:b5:8e:1c:25:13:f7:9a:46:
f7:32:18:b8:ee:fd:0c:a7:6a:d1:a0:4e:90:71:ee:75:00:44:
6d:11:e1:2d:ca:7f:72:72:b4:65:43:e8:42:9e:56:25:54:a2:
f0:7e:3d:9e:5d:ba:2d:4e:98:ce:9c:06:fa:22:38:38:a1:b7:
a0:fa:a4:9e:41:2f:8b:8b:43:81:d6:94:1e:21:01:bb:6d:a6:
33:3f:3a:a4:5f:71:46:33:da:b4:50:2c:83:72:a7:3a:e4:97:
63:c1:9c:67:78:62:dc:db:38:da:d9:11:00:28:ed:a5:09:b5:
a0:ea:66:14:fd:57:cb:b1:9e:48:d1:1c:70:da:a9:46:d2:58:
24:04:82:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:52:17 2025 by rpki-client