Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/91cdfd-2c72-4236-a4c2-2b8f7346f350/1/Swa9pMFTSLy0n_Wa3rYsyOZYvSA.roa
File: Swa9pMFTSLy0n_Wa3rYsyOZYvSA.roa (raw, json)
Hash identifier: 3zJVdSWxQTVh9llFwDq7cagzz/TNovINbw9ExqnV0Ns=
Subject key identifier: 4B:06:BD:A4:C1:53:48:BC:B4:9F:F5:9A:DE:B6:2C:C8:E6:58:BD:20
Certificate issuer: /CN=2fe5b7ccb403d30a44857d47c58cf1346546d283
Certificate serial: 01941FFA029E7E0509525DD7E5CEAD3A0A21
Authority key identifier: 2F:E5:B7:CC:B4:03:D3:0A:44:85:7D:47:C5:8C:F1:34:65:46:D2:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L-W3zLQD0wpEhX1HxYzxNGVG0oM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/91cdfd-2c72-4236-a4c2-2b8f7346f350/1/Swa9pMFTSLy0n_Wa3rYsyOZYvSA.roa
Signing time: Wed 01 Jan 2025 03:47:45 +0000
ROA not before: Wed 01 Jan 2025 03:47:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15924
IP address blocks: 159.253.85.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:02:9e:7e:05:09:52:5d:d7:e5:ce:ad:3a:0a:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fe5b7ccb403d30a44857d47c58cf1346546d283
Validity
Not Before: Jan 1 03:47:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4b06bda4c15348bcb49ff59adeb62cc8e658bd20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b5:74:81:14:f2:51:81:49:9c:49:58:2b:d0:
16:fe:0c:f5:89:e4:6a:2a:b4:a6:7a:fa:f5:e3:ca:
d3:50:35:a9:a0:1b:4c:2e:c1:90:ef:d8:2c:08:73:
a6:3b:bd:f0:57:2d:42:5f:8a:90:1e:81:b1:49:42:
18:cd:8a:2b:3a:e5:46:7a:cc:28:9b:69:8c:0f:18:
ac:23:ad:6f:6c:5d:ee:ab:25:77:97:6c:4f:51:51:
a3:03:f9:97:09:6c:24:a9:21:86:cf:04:79:5b:bc:
02:d1:c0:1f:ed:ec:d9:a6:f2:a6:60:4f:96:08:b3:
02:89:d1:3f:af:be:67:3f:8b:06:06:15:7f:b8:d6:
95:70:81:e2:11:07:d0:cb:0f:b1:e5:34:73:01:df:
c9:55:44:ca:c1:32:b8:96:12:97:31:b9:6c:a8:d1:
b9:d6:98:1f:9d:76:cd:d6:1b:eb:f7:a9:90:ac:f3:
41:74:d7:c1:c1:47:46:6c:dd:6f:be:cf:fa:6d:d2:
5e:1f:b7:a9:da:bb:5c:ac:49:20:ea:57:3d:09:30:
f6:58:3a:3f:e0:10:e8:2e:d8:58:d2:97:08:67:34:
6d:25:bc:7c:c7:33:05:a2:24:ed:bc:01:c4:a2:24:
c0:62:5a:e8:bf:05:15:59:a6:ed:7e:6e:4c:7d:b1:
6f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:06:BD:A4:C1:53:48:BC:B4:9F:F5:9A:DE:B6:2C:C8:E6:58:BD:20
X509v3 Authority Key Identifier:
keyid:2F:E5:B7:CC:B4:03:D3:0A:44:85:7D:47:C5:8C:F1:34:65:46:D2:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L-W3zLQD0wpEhX1HxYzxNGVG0oM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/91cdfd-2c72-4236-a4c2-2b8f7346f350/1/Swa9pMFTSLy0n_Wa3rYsyOZYvSA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/91cdfd-2c72-4236-a4c2-2b8f7346f350/1/L-W3zLQD0wpEhX1HxYzxNGVG0oM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.253.85.0/24
Signature Algorithm: sha256WithRSAEncryption
cb:83:1a:23:03:21:4b:89:1f:31:46:6e:2f:ea:a3:c4:3b:50:
42:69:28:7a:f3:4e:82:2b:a8:8a:df:02:c5:ee:8a:f8:e0:87:
d0:20:72:43:65:63:bb:f9:3f:9c:3b:25:b7:0a:54:ba:d3:64:
2d:38:bf:3c:b8:07:d2:58:98:7a:75:d1:13:5a:58:6f:d8:8f:
3d:d4:c7:29:02:a5:ea:c2:c7:de:b1:9e:66:40:21:c6:fa:3d:
01:5b:a5:5e:90:fe:30:8e:73:5f:da:a6:70:cf:18:07:96:09:
70:59:a1:2c:cc:bf:93:45:e4:e0:79:0d:22:7f:31:c1:c4:91:
db:3b:02:38:a3:e0:a2:bd:52:a7:ee:32:54:9d:a2:fd:53:7b:
53:fb:fe:25:d0:44:ab:8a:bb:3c:d4:92:e6:f7:1f:9e:e7:42:
42:ff:91:24:f0:ad:eb:05:69:cb:27:32:cb:c5:d3:e0:07:38:
f3:cb:bc:a0:bb:ca:e1:21:11:29:3c:9b:3b:88:2d:c4:17:31:
ae:db:5a:4f:9a:10:ef:d8:81:8a:ed:f9:56:7a:33:af:83:53:
fd:e8:b9:ff:b8:9b:e1:a0:f8:e7:62:82:d6:70:c5:c1:19:66:
9e:f6:1f:92:b7:fe:44:d5:11:a9:1f:1a:29:d0:a8:ae:25:08:
17:ff:a6:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:10:40 2025 by rpki-client