Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/d5bce2-a92f-442a-a235-aa88a4ba58ef/1/sw4N2lxJHY4O1_YExcGjN1F8VGo.roa
File: sw4N2lxJHY4O1_YExcGjN1F8VGo.roa (raw, json)
Hash identifier: KXUZgZkZitwfC1Jk6g2FCiMl9s8x5hfwqmR4gq981VM=
Subject key identifier: B3:0E:0D:DA:5C:49:1D:8E:0E:D7:F6:04:C5:C1:A3:37:51:7C:54:6A
Certificate issuer: /CN=866b8e05d938e45d65ae314dc675237dec8311a1
Certificate serial: 019424B3BAF07E2F2A6467C17EEC1C4593A0
Authority key identifier: 86:6B:8E:05:D9:38:E4:5D:65:AE:31:4D:C6:75:23:7D:EC:83:11:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hmuOBdk45F1lrjFNxnUjfeyDEaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/d5bce2-a92f-442a-a235-aa88a4ba58ef/1/sw4N2lxJHY4O1_YExcGjN1F8VGo.roa
Signing time: Thu 02 Jan 2025 01:49:06 +0000
ROA not before: Thu 02 Jan 2025 01:49:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212041
IP address blocks: 31.43.186.0/23 maxlen: 23
37.153.140.0/22 maxlen: 22
193.169.104.0/24 maxlen: 24
2a10:c580::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:ba:f0:7e:2f:2a:64:67:c1:7e:ec:1c:45:93:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=866b8e05d938e45d65ae314dc675237dec8311a1
Validity
Not Before: Jan 2 01:49:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b30e0dda5c491d8e0ed7f604c5c1a337517c546a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:47:87:31:dd:8b:32:92:4d:57:02:97:64:c5:
69:91:7d:ef:26:19:9e:81:3b:72:09:52:14:80:99:
4c:0b:2b:e3:d9:86:0f:ee:6b:35:73:16:4a:90:8d:
6c:d3:c1:f3:74:ae:22:ad:90:11:09:30:c2:62:b1:
79:81:ca:fa:97:2a:36:de:a7:37:fb:7e:b9:70:59:
d7:47:1c:62:88:e6:f7:e2:bd:88:36:4e:89:d9:dd:
a7:15:10:da:22:d1:8b:f3:cb:02:07:c2:cb:7f:b0:
c8:bc:31:0c:04:b1:6e:80:51:14:12:fe:71:7f:b1:
95:63:0a:4a:3e:4c:a8:11:46:be:3b:3d:83:3a:f2:
ae:43:27:68:7f:59:46:32:51:35:78:ab:7a:1a:e0:
30:d1:e5:ca:01:b6:25:93:1c:55:36:ba:2b:21:92:
89:35:bd:7f:c2:6e:07:1f:3a:f7:3f:10:16:71:a5:
0c:30:41:74:3b:c5:db:cb:da:ec:59:90:15:f6:a1:
73:f7:6d:f2:d9:94:98:20:78:b6:69:3e:98:ef:a8:
de:68:f1:e4:f2:d8:7f:30:ff:96:4f:ac:00:2f:da:
3a:c1:2e:94:90:3e:90:b3:4d:90:72:96:a6:6b:ca:
b4:28:c0:09:0c:aa:69:86:69:8e:98:af:16:8b:60:
b5:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:0E:0D:DA:5C:49:1D:8E:0E:D7:F6:04:C5:C1:A3:37:51:7C:54:6A
X509v3 Authority Key Identifier:
keyid:86:6B:8E:05:D9:38:E4:5D:65:AE:31:4D:C6:75:23:7D:EC:83:11:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hmuOBdk45F1lrjFNxnUjfeyDEaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/d5bce2-a92f-442a-a235-aa88a4ba58ef/1/sw4N2lxJHY4O1_YExcGjN1F8VGo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/d5bce2-a92f-442a-a235-aa88a4ba58ef/1/hmuOBdk45F1lrjFNxnUjfeyDEaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.43.186.0/23
37.153.140.0/22
193.169.104.0/24
IPv6:
2a10:c580::/29
Signature Algorithm: sha256WithRSAEncryption
89:d9:fa:6a:55:7f:f0:29:b9:b4:01:87:a8:19:74:bf:31:51:
bf:e1:84:0a:ef:12:6b:15:86:47:68:3f:f8:46:62:9c:2f:7a:
9e:35:5b:60:64:d0:77:35:88:f8:07:60:50:06:4e:d0:a4:f6:
a4:bf:2e:39:7b:e1:18:68:24:ed:77:87:cd:8a:88:3d:10:9c:
93:36:20:e5:8a:59:0c:2f:bd:72:9d:77:ea:94:e0:fc:59:ab:
70:ea:fc:98:a5:47:c3:83:c6:c7:e4:f0:ab:1c:a6:10:94:a6:
e2:ad:f4:a8:36:a5:67:c1:7e:ea:e4:78:d5:8e:44:84:e4:06:
c4:a8:d9:74:73:59:17:0f:07:73:3a:34:4c:df:93:7f:56:f8:
ab:a4:36:76:7e:7c:ee:fa:31:82:07:ba:e4:d9:32:4b:7e:4e:
a4:e1:a3:7a:1c:e4:5d:8b:9b:61:d0:96:af:27:a1:39:cc:26:
bb:02:f7:d6:38:bd:5d:88:7a:b1:f4:95:97:68:d4:b9:86:66:
f6:f3:fc:d3:59:7a:ba:cf:ad:60:5b:c0:18:a9:72:78:e5:79:
41:a1:a5:ad:8b:9e:33:1b:89:77:9c:ed:0e:81:e4:d2:46:e7:
63:ed:cd:d6:4a:c1:bb:d2:1a:bf:1b:15:15:81:c8:34:d0:88:
52:9e:52:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:27 2025 by rpki-client on console.sobornost.net