Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/4ffe92-00ce-4faa-885c-e9617d66a74b/1/swB_r0IFBPm9Iemed8mXUpcDjzs.roa
File: swB_r0IFBPm9Iemed8mXUpcDjzs.roa (raw, json)
Hash identifier: 4f+/BeqDILlbNbuoHwEa+IBP8dJNYECac82k/mVW3hE=
Subject key identifier: B3:00:7F:AF:42:05:04:F9:BD:21:E9:9E:77:C9:97:52:97:03:8F:3B
Certificate issuer: /CN=49f093bb8e8ad11c4c834edfd2df54d41cb49f79
Certificate serial: 0195F62EB0F10417437DF253C417FA99AA89
Authority key identifier: 49:F0:93:BB:8E:8A:D1:1C:4C:83:4E:DF:D2:DF:54:D4:1C:B4:9F:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SfCTu46K0RxMg07f0t9U1By0n3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/4ffe92-00ce-4faa-885c-e9617d66a74b/1/swB_r0IFBPm9Iemed8mXUpcDjzs.roa
Signing time: Wed 02 Apr 2025 11:06:49 +0000
ROA not before: Wed 02 Apr 2025 11:06:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198904
IP address blocks: 5.32.184.0/21 maxlen: 21
5.32.184.0/22 maxlen: 22
5.32.184.0/24 maxlen: 24
5.32.185.0/24 maxlen: 24
5.32.186.0/24 maxlen: 24
5.32.187.0/24 maxlen: 24
5.32.188.0/22 maxlen: 22
5.32.188.0/24 maxlen: 24
5.32.189.0/24 maxlen: 24
5.32.190.0/24 maxlen: 24
5.32.191.0/24 maxlen: 24
2a01:6ec0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:f6:2e:b0:f1:04:17:43:7d:f2:53:c4:17:fa:99:aa:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49f093bb8e8ad11c4c834edfd2df54d41cb49f79
Validity
Not Before: Apr 2 11:06:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b3007faf420504f9bd21e99e77c9975297038f3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:a8:53:ce:7f:5d:15:0f:29:ee:ed:85:3d:b5:
5a:d9:b3:1e:08:3f:4a:cc:1e:50:7f:91:59:c4:91:
48:11:f3:cc:ef:06:1a:32:bf:ca:bd:42:90:ba:0b:
92:ad:06:65:fe:d6:f9:ab:53:cf:72:e9:73:2d:c4:
5a:85:6e:37:f0:9b:b9:1c:cc:c3:72:cf:48:b1:0f:
2b:f7:1f:c9:59:d6:63:ff:62:f3:f9:da:5b:61:3a:
a9:34:9c:c5:b0:fa:87:6f:69:15:49:d9:f6:52:76:
98:7e:d8:39:a2:4b:86:65:4c:51:02:3d:b2:ac:9d:
05:2d:97:76:b3:5b:46:fb:ef:f7:42:b7:3f:8c:ac:
66:70:cc:c5:46:3b:19:ff:e5:7e:a3:67:da:df:db:
f1:a4:18:97:3e:20:f7:da:5c:ce:d5:ef:19:70:ff:
7f:6b:73:3a:e3:ba:c2:05:50:bb:1d:27:83:83:2e:
a4:48:16:04:e1:29:78:87:1c:01:ce:3c:9a:6f:1a:
b5:0f:1b:89:23:7a:9e:18:46:01:ec:a1:d1:0e:ff:
5f:9f:b8:96:14:ff:2b:80:1d:ef:12:ed:8b:5b:6d:
a1:8f:67:f5:3a:4b:fd:fe:11:b6:a4:4a:b1:6f:00:
1e:cd:bb:36:95:aa:92:d0:be:e4:dc:c6:ce:ab:ee:
2e:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:00:7F:AF:42:05:04:F9:BD:21:E9:9E:77:C9:97:52:97:03:8F:3B
X509v3 Authority Key Identifier:
keyid:49:F0:93:BB:8E:8A:D1:1C:4C:83:4E:DF:D2:DF:54:D4:1C:B4:9F:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SfCTu46K0RxMg07f0t9U1By0n3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/4ffe92-00ce-4faa-885c-e9617d66a74b/1/swB_r0IFBPm9Iemed8mXUpcDjzs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/4ffe92-00ce-4faa-885c-e9617d66a74b/1/SfCTu46K0RxMg07f0t9U1By0n3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.32.184.0/21
IPv6:
2a01:6ec0::/32
Signature Algorithm: sha256WithRSAEncryption
46:70:6e:5c:82:97:12:14:38:04:b0:80:7f:6c:0d:ef:96:e6:
9e:64:ba:92:62:82:ae:4e:5e:56:15:2d:c6:de:9a:56:93:0b:
8a:11:fa:df:00:ea:4a:51:df:a1:49:96:e5:04:43:f0:d1:39:
28:24:36:9e:34:c6:52:67:28:2c:5b:e0:02:39:bb:67:ee:e3:
8f:44:58:05:f6:c3:d4:5f:70:1f:fb:6c:a0:2b:77:e5:56:48:
21:4e:d9:6b:18:ca:f2:10:e8:ad:d7:76:c3:39:d8:78:4d:3f:
ba:a6:3d:91:f6:e8:38:ba:4f:44:18:fc:72:5b:ae:9f:2b:6b:
93:3b:41:3f:b2:45:e0:3d:37:34:c2:c5:97:00:63:6d:ca:5f:
87:b5:0b:d7:ee:de:7a:bf:73:6a:b8:75:4b:97:34:0e:ab:71:
32:46:78:ed:10:a1:c8:c4:43:ed:15:f1:39:79:5e:7c:ba:aa:
e9:8e:30:48:75:9f:a7:14:37:7f:5c:04:88:d3:d5:0f:54:3b:
51:4b:ca:f8:c2:f1:b0:32:3f:de:a0:1d:7c:99:59:04:74:eb:
05:ea:76:5a:d3:76:9c:4b:2d:e2:a5:33:34:2e:d3:7b:3f:c7:
41:d7:c7:6c:9a:04:22:98:e9:9f:dc:35:03:f6:1b:aa:5a:b4:
0c:ef:e2:c3
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZX2LrDxBBdDffJTxBf6maqJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5ZjA5M2JiOGU4YWQxMWM0YzgzNGVkZmQyZGY1NGQ0MWNi
NDlmNzkwHhcNMjUwNDAyMTEwNjQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMzAwN2ZhZjQyMDUwNGY5YmQyMWU5OWU3N2M5OTc1Mjk3MDM4ZjNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjqhTzn9dFQ8p7u2FPbVa2bMeCD9K
zB5Qf5FZxJFIEfPM7wYaMr/KvUKQuguSrQZl/tb5q1PPculzLcRahW438Ju5HMzD
cs9IsQ8r9x/JWdZj/2Lz+dpbYTqpNJzFsPqHb2kVSdn2UnaYftg5okuGZUxRAj2y
rJ0FLZd2s1tG++/3Qrc/jKxmcMzFRjsZ/+V+o2fa39vxpBiXPiD32lzO1e8ZcP9/
a3M647rCBVC7HSeDgy6kSBYE4Sl4hxwBzjyabxq1DxuJI3qeGEYB7KHRDv9fn7iW
FP8rgB3vEu2LW22hj2f1Okv9/hG2pEqxbwAezbs2laqS0L7k3MbOq+4uRQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFLMAf69CBQT5vSHpnnfJl1KXA487MB8GA1UdIwQY
MBaAFEnwk7uOitEcTINO39LfVNQctJ95MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2ZDVHU0NkswUnhNZzA3ZjB0OVUxQnkwbjNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS80ZmZlOTItMDBjZS00ZmFhLTg4NWMt
ZTk2MTdkNjZhNzRiLzEvc3dCX3IwSUZCUG05SWVtZWQ4bVhVcGNEanpzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS80ZmZlOTItMDBjZS00ZmFhLTg4NWMtZTk2MTdkNjZhNzRi
LzEvU2ZDVHU0NkswUnhNZzA3ZjB0OVUxQnkwbjNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQDBSC4MA0E
AgACMAcDBQAqAW7AMA0GCSqGSIb3DQEBCwUAA4IBAQBGcG5cgpcSFDgEsIB/bA3v
luaeZLqSYoKuTl5WFS3G3ppWkwuKEfrfAOpKUd+hSZblBEPw0TkoJDaeNMZSZygs
W+ACObtn7uOPRFgF9sPUX3Af+2ygK3flVkghTtlrGMryEOit13bDOdh4TT+6pj2R
9ug4uk9EGPxyW66fK2uTO0E/skXgPTc0wsWXAGNtyl+HtQvX7t56v3NquHVLlzQO
q3EyRnjtEKHIxEPtFfE5eV58uqrpjjBIdZ+nFDd/XASI09UPVDtRS8r4wvGwMj/e
oB18mVkEdOsF6nZa03acSy3ipTM0LtN7P8dB18dsmgQimOmf3DUD9huqWrQM7+LD
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:47 2025 by rpki-client on console.sobornost.net