Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/9d63f7-e4b6-4d3c-8044-3c93bb6cfee1/1/swlD7NexiqeUhjpippjXSrPfBRU.roa
File: swlD7NexiqeUhjpippjXSrPfBRU.roa (raw, json)
Hash identifier: a8BMuK2ewbTVEG8qjtK3NV+IeXc5gmKfF4oUMOgajuI=
Subject key identifier: B3:09:43:EC:D7:B1:8A:A7:94:86:3A:62:A6:98:D7:4A:B3:DF:05:15
Certificate issuer: /CN=8a7150074ea6fdd1e84dd95e0b06836407e9411b
Certificate serial: 01942369E617B1E5F1D87928625F6C679BB1
Authority key identifier: 8A:71:50:07:4E:A6:FD:D1:E8:4D:D9:5E:0B:06:83:64:07:E9:41:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/inFQB06m_dHoTdleCwaDZAfpQRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/9d63f7-e4b6-4d3c-8044-3c93bb6cfee1/1/swlD7NexiqeUhjpippjXSrPfBRU.roa
Signing time: Wed 01 Jan 2025 19:48:50 +0000
ROA not before: Wed 01 Jan 2025 19:48:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204203
IP address blocks: 195.88.208.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:e6:17:b1:e5:f1:d8:79:28:62:5f:6c:67:9b:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a7150074ea6fdd1e84dd95e0b06836407e9411b
Validity
Not Before: Jan 1 19:48:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b30943ecd7b18aa794863a62a698d74ab3df0515
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:aa:24:1c:31:73:c9:f5:d3:f8:98:58:2f:81:
ec:16:9f:06:c1:90:0a:66:a8:fb:7b:44:cb:71:dd:
fb:d8:b8:08:08:8e:76:dd:87:f1:8c:03:06:e6:1e:
7a:8e:72:14:89:1b:88:0c:cc:5d:1a:c2:85:46:70:
ab:04:38:d0:c3:4b:ca:5e:1e:f3:b4:65:40:b8:2e:
4e:2f:af:74:73:0e:27:14:f8:81:2c:e8:e2:ec:98:
03:d6:3b:83:13:24:d7:bf:3d:09:42:17:25:ff:16:
90:04:c5:23:48:66:51:40:f0:23:a1:24:d3:21:da:
50:6d:86:1d:bb:23:0d:66:a8:78:ca:69:0b:81:c8:
70:9a:48:f2:6d:41:60:8b:3d:94:aa:9a:65:3d:b3:
a5:fa:2d:5b:65:93:4d:74:d7:1d:f7:8d:7e:d7:ca:
da:b8:1f:c5:99:90:29:93:b1:b7:80:0d:c0:0d:73:
ca:cc:fc:76:e7:6e:2d:3e:3f:90:b3:e1:3f:c4:b9:
34:f3:c1:dc:6e:1e:0b:ca:ae:9a:ba:8f:aa:17:85:
cf:a4:90:5b:b3:d8:ac:7e:36:80:9e:d2:e1:9d:75:
13:21:fa:c1:7b:86:50:3b:d9:d6:62:cd:c0:b7:20:
3f:58:d5:e5:92:d7:87:da:a9:25:0b:b0:d5:1b:72:
07:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:09:43:EC:D7:B1:8A:A7:94:86:3A:62:A6:98:D7:4A:B3:DF:05:15
X509v3 Authority Key Identifier:
keyid:8A:71:50:07:4E:A6:FD:D1:E8:4D:D9:5E:0B:06:83:64:07:E9:41:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/inFQB06m_dHoTdleCwaDZAfpQRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9d63f7-e4b6-4d3c-8044-3c93bb6cfee1/1/swlD7NexiqeUhjpippjXSrPfBRU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9d63f7-e4b6-4d3c-8044-3c93bb6cfee1/1/inFQB06m_dHoTdleCwaDZAfpQRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.88.208.0/24
Signature Algorithm: sha256WithRSAEncryption
52:a7:48:18:49:b9:c1:12:c5:10:2d:15:dd:78:8c:9b:17:f0:
0f:13:df:93:3a:f2:43:08:c2:e0:01:f4:34:2d:bb:c1:c4:67:
3d:09:7a:3b:c3:4f:52:67:9a:09:8a:12:54:4c:98:a5:49:81:
41:16:40:98:d6:c6:9d:76:54:87:6e:87:33:17:cb:bb:94:eb:
d1:c8:e2:e3:f3:8d:14:b6:18:7f:b5:48:58:b3:e6:5f:c3:68:
02:bb:c2:38:5b:70:1c:ac:ad:35:a3:64:08:27:d5:96:17:03:
4c:62:e0:18:34:0a:01:33:0b:9b:9f:aa:ab:39:a4:7b:13:89:
e9:c5:4e:03:da:18:72:98:e5:54:0a:8d:b0:83:da:e6:08:22:
1c:a9:0a:5d:57:82:96:60:fc:54:da:00:8f:23:db:d2:ee:78:
c9:c6:d1:48:80:f5:8a:fc:05:f7:5a:a7:28:a5:03:7f:df:ee:
2e:c7:93:ab:6e:f7:fd:2d:0b:0b:50:f5:22:f2:81:a0:14:c7:
83:89:99:f2:3c:27:cc:d5:c5:49:13:96:e8:62:77:eb:ec:59:
31:e7:bc:79:9c:15:e4:63:a0:3f:91:be:c2:e1:3b:89:c1:93:
4f:6a:66:61:14:b1:de:c4:af:ee:ed:bf:85:6a:ee:a6:01:0d:
bc:44:7d:05
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQjaeYXseXx2HkoYl9sZ5uxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhNzE1MDA3NGVhNmZkZDFlODRkZDk1ZTBiMDY4MzY0MDdl
OTQxMWIwHhcNMjUwMTAxMTk0ODUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMzA5NDNlY2Q3YjE4YWE3OTQ4NjNhNjJhNjk4ZDc0YWIzZGYwNTE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA36okHDFzyfXT+JhYL4HsFp8GwZAK
Zqj7e0TLcd372LgICI523YfxjAMG5h56jnIUiRuIDMxdGsKFRnCrBDjQw0vKXh7z
tGVAuC5OL690cw4nFPiBLOji7JgD1juDEyTXvz0JQhcl/xaQBMUjSGZRQPAjoSTT
IdpQbYYduyMNZqh4ymkLgchwmkjybUFgiz2UqpplPbOl+i1bZZNNdNcd941+18ra
uB/FmZApk7G3gA3ADXPKzPx2524tPj+Qs+E/xLk088Hcbh4Lyq6auo+qF4XPpJBb
s9isfjaAntLhnXUTIfrBe4ZQO9nWYs3AtyA/WNXlkteH2qklC7DVG3IH2wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLMJQ+zXsYqnlIY6YqaY10qz3wUVMB8GA1UdIwQY
MBaAFIpxUAdOpv3R6E3ZXgsGg2QH6UEbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaW5GUUIwNm1fZEhvVGRsZUN3YURaQWZwUVJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni85ZDYzZjctZTRiNi00ZDNjLTgwNDQt
M2M5M2JiNmNmZWUxLzEvc3dsRDdOZXhpcWVVaGpwaXBwalhTclBmQlJVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni85ZDYzZjctZTRiNi00ZDNjLTgwNDQtM2M5M2JiNmNmZWUx
LzEvaW5GUUIwNm1fZEhvVGRsZUN3YURaQWZwUVJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw1jQMA0G
CSqGSIb3DQEBCwUAA4IBAQBSp0gYSbnBEsUQLRXdeIybF/APE9+TOvJDCMLgAfQ0
LbvBxGc9CXo7w09SZ5oJihJUTJilSYFBFkCY1saddlSHboczF8u7lOvRyOLj840U
thh/tUhYs+Zfw2gCu8I4W3AcrK01o2QIJ9WWFwNMYuAYNAoBMwubn6qrOaR7E4np
xU4D2hhymOVUCo2wg9rmCCIcqQpdV4KWYPxU2gCPI9vS7njJxtFIgPWK/AX3Wqco
pQN/3+4ux5Orbvf9LQsLUPUi8oGgFMeDiZnyPCfM1cVJE5boYnfr7Fkx57x5nBXk
Y6A/kb7C4TuJwZNPamZhFLHexK/u7b+Fau6mAQ28RH0F
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:58 2025 by rpki-client on console.sobornost.net