Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/SwMA-S5-c1N638JiooLZF7juNzQ.roa
File: SwMA-S5-c1N638JiooLZF7juNzQ.roa (raw, json)
Hash identifier: 8duSuMEszanDEagc0SoqocEgVoUH5bDhhPmctdpKj1I=
Subject key identifier: 4B:03:00:F9:2E:7E:73:53:7A:DF:C2:62:A2:82:D9:17:B8:EE:37:34
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 065F833A
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/SwMA-S5-c1N638JiooLZF7juNzQ.roa
Signing time: Sat 30 Apr 2022 05:48:14 +0000
ROA not before: Sat 30 Apr 2022 05:48:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
151.216.5.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
2001:7fc:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106922810 (0x65f833a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Apr 30 05:48:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4b0300f92e7e73537adfc262a282d917b8ee3734
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:10:f3:a2:01:4e:4d:75:5a:58:35:11:51:22:
a5:1f:0b:b7:3b:07:ea:89:0c:12:7b:0e:44:7f:35:
04:17:9e:c5:3f:f9:3e:37:2a:2a:35:36:52:bc:a5:
02:2a:56:20:36:a8:ca:2f:10:d1:e3:f8:e2:39:94:
08:55:fa:80:4f:a2:13:19:0c:53:19:9c:85:f7:46:
a1:d4:be:67:fd:a0:73:df:bd:e3:e4:02:74:f8:d2:
62:ed:90:57:0d:47:a6:bc:6d:5f:00:13:80:a7:00:
b1:da:9d:ba:df:8b:ea:7a:5c:b4:f8:be:7b:96:cf:
07:5d:4f:ac:32:3f:48:1e:d3:7f:ea:70:e2:3f:e6:
19:8d:bb:36:ad:ec:ce:80:bb:a1:60:e5:99:72:b0:
19:14:ea:9f:e6:9c:36:95:2c:d7:6a:f6:d8:3f:37:
d2:e2:21:3f:67:48:da:67:40:c5:9f:e0:2d:d5:f3:
83:54:2a:c9:fb:86:36:46:74:1e:00:8b:c6:51:bb:
9f:6f:01:fe:32:62:a8:e0:9b:e1:82:7d:47:f9:62:
26:e5:3a:79:ab:f8:2a:a1:5b:ac:74:ab:e5:cf:ac:
72:f0:b7:91:b6:8f:36:88:61:2f:70:41:44:09:24:
ab:48:17:29:2c:53:01:ff:ea:4a:2b:d7:80:e4:93:
ef:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:03:00:F9:2E:7E:73:53:7A:DF:C2:62:A2:82:D9:17:B8:EE:37:34
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/SwMA-S5-c1N638JiooLZF7juNzQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/23
IPv6:
2001:7fc:2::/47
Signature Algorithm: sha256WithRSAEncryption
a2:52:cd:20:f5:9c:d6:a7:b5:de:06:24:04:0c:e2:12:97:d2:
09:50:0c:74:57:ee:4a:07:36:ff:85:90:a2:37:35:d1:ef:5c:
fc:94:38:d5:11:e6:9a:62:99:fc:c2:1a:22:34:a3:95:21:92:
08:e5:9e:c0:5a:a2:67:4a:0a:18:3d:13:d8:25:28:f5:be:3e:
2a:8e:b1:52:6b:65:7c:cb:33:9c:86:2e:a4:58:5c:5b:70:a4:
26:ad:ea:90:bc:0b:c9:1f:33:c2:9a:04:55:5d:0c:e8:a4:b8:
cf:1f:86:fc:6b:43:18:12:b9:5c:aa:c9:c4:d3:22:10:1c:09:
dc:e3:f8:bd:5c:00:75:3d:7b:79:bd:c0:55:33:94:e0:9f:d4:
a5:53:54:91:bf:49:50:a7:b2:f0:ad:56:20:45:7b:1b:78:d6:
6d:52:ea:01:20:23:0a:eb:54:98:ad:06:c3:6a:59:8f:40:a4:
0a:68:62:49:75:ec:4c:45:97:34:01:77:4b:d9:bc:45:1a:9d:
53:54:c8:de:a4:8d:4d:c8:87:e2:16:ca:e5:c4:0a:40:17:f6:
db:17:3d:11:a7:f1:f1:9b:fb:23:5f:fc:cb:41:2c:a3:5d:8d:
36:66:2b:5c:51:96:ec:9b:9e:45:35:f5:0e:cc:78:b8:e0:bc:
76:51:aa:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:46 2023 by rpki-client on console-ams.rpki-client.org