Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/c05d4c-96d3-4b57-ae34-3477c7fcd4d9/1/SW5rOT-I_TKdCQhlQPFGnstXhQU.roa
File: SW5rOT-I_TKdCQhlQPFGnstXhQU.roa (raw, json)
Hash identifier: g9My/qk5ljxZS6oPdcHUARy/Y8teVsqkMfCfq/dyURY=
Subject key identifier: 49:6E:6B:39:3F:88:FD:32:9D:09:08:65:40:F1:46:9E:CB:57:85:05
Certificate issuer: /CN=21c1672dbbbf7165a6a83b3227a7119f0d31e8ee
Certificate serial: 0194266C3969B7B3B12642C2A2954B9B2753
Authority key identifier: 21:C1:67:2D:BB:BF:71:65:A6:A8:3B:32:27:A7:11:9F:0D:31:E8:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IcFnLbu_cWWmqDsyJ6cRnw0x6O4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/c05d4c-96d3-4b57-ae34-3477c7fcd4d9/1/SW5rOT-I_TKdCQhlQPFGnstXhQU.roa
Signing time: Thu 02 Jan 2025 09:50:14 +0000
ROA not before: Thu 02 Jan 2025 09:50:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213336
IP address blocks: 45.148.176.0/22 maxlen: 24
45.148.176.0/24 maxlen: 24
45.148.177.0/24 maxlen: 24
45.148.178.0/24 maxlen: 24
45.148.179.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:39:69:b7:b3:b1:26:42:c2:a2:95:4b:9b:27:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21c1672dbbbf7165a6a83b3227a7119f0d31e8ee
Validity
Not Before: Jan 2 09:50:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=496e6b393f88fd329d09086540f1469ecb578505
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:0d:99:c9:95:70:f7:16:7a:4e:c1:67:e7:fe:
16:8c:0b:3d:c2:e4:4a:fa:6e:f6:b4:6d:27:8f:46:
55:70:e4:a6:d5:da:dc:46:94:54:db:1d:6e:72:83:
8d:15:67:36:f2:9e:a0:c6:f7:1b:b9:3d:bb:86:a2:
08:37:9a:e2:e7:de:ba:56:e9:c6:29:90:98:98:60:
b4:0d:30:6c:93:ee:89:b5:57:e9:fb:5e:56:7d:4f:
03:5d:5f:2d:19:1e:0e:19:66:0d:00:9f:86:4b:94:
c9:26:7a:a5:0a:3f:56:9c:a3:37:ef:a4:a2:c6:e0:
fd:54:ac:33:d9:fa:35:78:87:26:73:60:10:8d:52:
67:ac:0c:b2:1c:ac:04:ca:1f:5c:b5:30:e9:cd:5d:
04:b7:4e:53:58:7b:e0:44:f9:0f:b0:2c:54:cc:18:
f3:6e:5a:60:76:3b:e6:ae:a9:69:24:c1:29:e0:c8:
d4:e2:4e:3d:f3:5b:c9:a4:6a:fa:36:25:a4:c1:ce:
c1:87:fd:19:3c:dc:ee:22:84:a6:b1:06:ea:ad:af:
cd:ee:6c:47:a8:59:9b:f1:ab:05:2d:eb:c2:64:98:
cc:57:fc:5a:b4:9d:6d:fd:d9:8e:81:da:1a:44:a9:
0a:cb:ca:f1:51:43:35:a1:49:16:f0:62:8b:8c:66:
47:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:6E:6B:39:3F:88:FD:32:9D:09:08:65:40:F1:46:9E:CB:57:85:05
X509v3 Authority Key Identifier:
keyid:21:C1:67:2D:BB:BF:71:65:A6:A8:3B:32:27:A7:11:9F:0D:31:E8:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IcFnLbu_cWWmqDsyJ6cRnw0x6O4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c05d4c-96d3-4b57-ae34-3477c7fcd4d9/1/SW5rOT-I_TKdCQhlQPFGnstXhQU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c05d4c-96d3-4b57-ae34-3477c7fcd4d9/1/IcFnLbu_cWWmqDsyJ6cRnw0x6O4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.176.0/22
Signature Algorithm: sha256WithRSAEncryption
8f:2a:16:6c:40:0c:5e:7b:6f:66:ed:30:eb:30:ee:00:9f:41:
6e:7d:e8:80:69:c9:20:07:a4:6f:47:e0:e3:24:66:b2:51:26:
99:cb:42:37:9b:c9:fc:8f:2b:8e:cf:29:6a:e1:d4:80:da:89:
f7:4d:7d:be:32:38:09:08:66:ee:71:ac:c8:ad:11:b1:ef:cd:
dd:4e:50:91:63:69:78:e2:e1:f4:11:0f:ca:44:2c:0c:58:54:
84:c9:0b:6a:5c:d7:1a:8e:63:f7:60:64:98:98:d3:a4:c7:e4:
df:61:64:ff:69:2b:32:72:a9:4a:d0:59:b7:7d:2f:49:66:ea:
00:07:5f:99:66:e6:d7:35:b1:0a:57:2a:ff:d1:6d:1f:57:c9:
a3:9f:f3:88:94:67:08:90:3e:a4:e9:83:d1:6a:ce:f6:63:2d:
c2:8b:16:d4:f4:ca:36:4d:b4:2f:be:d8:f9:f1:f4:10:94:94:
76:b4:c8:e6:3e:75:f7:5d:40:8a:0b:68:12:a7:8d:4d:27:fe:
2d:d5:19:73:bc:f7:80:0f:f2:94:67:66:e6:b1:d2:12:d2:d2:
7b:c2:06:13:d6:ce:0c:1b:a3:82:fd:8b:af:fc:80:60:69:18:
c4:34:04:67:86:32:f9:d2:b5:d8:a3:3e:0f:2b:c6:ec:3a:6a:
bd:0e:9e:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:48 2025 by rpki-client on console.sobornost.net