Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/SwP1NYlZc5jbDBXXeMNl1hjy1LA.roa
File: SwP1NYlZc5jbDBXXeMNl1hjy1LA.roa (raw, json)
Hash identifier: DMSgzACIbB/JZuNfMaMP2kCv3jA/gmECBXJyT4DQzwk=
Subject key identifier: 4B:03:F5:35:89:59:73:98:DB:0C:15:D7:78:C3:65:D6:18:F2:D4:B0
Certificate issuer: /CN=e0574c2878d6b536139b895f08c9c6db18e12a9b
Certificate serial: 019423D71046722B6C134636EDED8015730B
Authority key identifier: E0:57:4C:28:78:D6:B5:36:13:9B:89:5F:08:C9:C6:DB:18:E1:2A:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FdMKHjWtTYTm4lfCMnG2xjhKps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/SwP1NYlZc5jbDBXXeMNl1hjy1LA.roa
Signing time: Wed 01 Jan 2025 21:48:04 +0000
ROA not before: Wed 01 Jan 2025 21:48:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24618
IP address blocks: 81.17.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:10:46:72:2b:6c:13:46:36:ed:ed:80:15:73:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0574c2878d6b536139b895f08c9c6db18e12a9b
Validity
Not Before: Jan 1 21:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4b03f53589597398db0c15d778c365d618f2d4b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:80:de:3b:72:62:96:06:8d:23:e8:27:c5:01:
9f:22:17:c5:24:e8:0a:61:67:4e:ef:ac:b7:c7:0e:
19:80:66:02:3c:a3:5b:2d:d2:45:c9:d3:d2:ab:1c:
b3:57:f9:eb:62:12:9f:25:92:52:c4:11:80:e0:a8:
a7:ff:09:c4:aa:1d:95:20:da:63:ab:1c:03:eb:6e:
92:f7:3a:1d:9b:22:77:1f:4b:b8:df:3f:5d:01:f4:
94:84:fb:e8:1a:c4:38:4d:d4:5c:18:5d:93:1b:c8:
4f:15:94:2e:79:52:d5:1c:ef:e6:13:2f:f7:c7:eb:
03:28:38:2b:cf:d2:5e:d0:f8:d3:e0:42:29:0c:03:
44:1a:12:02:63:d7:a6:8d:6c:4c:a3:59:ad:18:27:
f8:8e:89:9c:e6:8b:d9:eb:36:3b:df:34:39:82:d9:
e9:c0:25:8c:52:d2:20:67:c7:58:9d:78:ee:1c:1e:
b7:8e:5a:8f:ab:48:92:4d:ed:b3:07:2b:f3:4d:57:
7d:03:8c:fa:b9:5a:a6:f7:22:70:e5:2e:d6:c7:87:
e1:74:65:11:c5:78:7d:61:3d:95:4b:c5:bd:66:90:
2e:2e:d5:4a:c2:48:97:d5:4d:3a:c4:db:3b:96:76:
5d:85:6d:dc:c2:72:18:15:3f:e9:59:8f:8b:2f:d4:
6e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:03:F5:35:89:59:73:98:DB:0C:15:D7:78:C3:65:D6:18:F2:D4:B0
X509v3 Authority Key Identifier:
keyid:E0:57:4C:28:78:D6:B5:36:13:9B:89:5F:08:C9:C6:DB:18:E1:2A:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FdMKHjWtTYTm4lfCMnG2xjhKps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/SwP1NYlZc5jbDBXXeMNl1hjy1LA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.17.129.0/24
Signature Algorithm: sha256WithRSAEncryption
22:78:ff:1e:f3:56:df:0d:07:77:53:17:a6:08:7c:89:b9:7b:
cd:ed:32:af:34:ae:a7:7c:e4:18:13:a2:b8:3e:25:4d:36:25:
02:cc:89:81:82:7f:34:4c:6f:c6:1d:d1:a6:bb:24:7e:3b:b8:
9c:0e:e9:cb:03:ad:14:0a:f2:be:49:f8:cc:4a:c8:ff:76:f5:
b8:29:e1:ef:7f:22:94:f9:b6:06:f1:f1:b3:5e:5e:24:02:24:
a7:b9:0b:c7:91:31:4b:2e:09:45:e5:da:9d:22:09:53:bb:1b:
1c:a1:5e:a7:dc:94:f4:e0:f9:0b:95:98:57:88:86:4e:67:b8:
25:6f:64:14:09:be:b2:26:d6:86:af:ab:27:0b:d8:ef:97:d8:
c0:fe:e0:87:4e:bd:87:0f:95:ad:85:88:c5:4e:7b:93:b3:ef:
5d:a8:8e:13:e2:f1:7f:ec:b4:8c:43:2d:6e:ae:0b:9a:0f:57:
2b:38:5b:ee:c3:d5:0a:09:91:61:ef:e4:f8:b5:24:3b:55:16:
33:1a:48:20:1a:1e:80:a3:e1:ce:5c:78:27:36:61:93:e5:d3:
2e:27:c3:32:34:9c:ea:ed:8f:75:6c:ff:df:00:ce:8c:99:5e:
34:b7:41:7a:9a:85:3c:27:40:ec:38:fd:14:f3:1b:c1:76:11:
50:43:65:44
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQj1xBGcitsE0Y27e2AFXMLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwNTc0YzI4NzhkNmI1MzYxMzliODk1ZjA4YzljNmRiMThl
MTJhOWIwHhcNMjUwMTAxMjE0ODA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YjAzZjUzNTg5NTk3Mzk4ZGIwYzE1ZDc3OGMzNjVkNjE4ZjJkNGIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy4DeO3JilgaNI+gnxQGfIhfFJOgK
YWdO76y3xw4ZgGYCPKNbLdJFydPSqxyzV/nrYhKfJZJSxBGA4Kin/wnEqh2VINpj
qxwD626S9zodmyJ3H0u43z9dAfSUhPvoGsQ4TdRcGF2TG8hPFZQueVLVHO/mEy/3
x+sDKDgrz9Je0PjT4EIpDANEGhICY9emjWxMo1mtGCf4jomc5ovZ6zY73zQ5gtnp
wCWMUtIgZ8dYnXjuHB63jlqPq0iSTe2zByvzTVd9A4z6uVqm9yJw5S7Wx4fhdGUR
xXh9YT2VS8W9ZpAuLtVKwkiX1U06xNs7lnZdhW3cwnIYFT/pWY+LL9RuPwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEsD9TWJWXOY2wwV13jDZdYY8tSwMB8GA1UdIwQY
MBaAFOBXTCh41rU2E5uJXwjJxtsY4SqbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEZkTUtIald0VFlUbTRsZkNNbkcyeGpoS3BzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC8yOGQ2MDAtYTg2OS00YWIxLTliMmUt
NDQ2MDE5OTY2YTE5LzEvU3dQMU5ZbFpjNWpiREJYWGVNTmwxaGp5MUxBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC8yOGQ2MDAtYTg2OS00YWIxLTliMmUtNDQ2MDE5OTY2YTE5
LzEvNEZkTUtIald0VFlUbTRsZkNNbkcyeGpoS3BzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAURGBMA0G
CSqGSIb3DQEBCwUAA4IBAQAieP8e81bfDQd3UxemCHyJuXvN7TKvNK6nfOQYE6K4
PiVNNiUCzImBgn80TG/GHdGmuyR+O7icDunLA60UCvK+SfjMSsj/dvW4KeHvfyKU
+bYG8fGzXl4kAiSnuQvHkTFLLglF5dqdIglTuxscoV6n3JT04PkLlZhXiIZOZ7gl
b2QUCb6yJtaGr6snC9jvl9jA/uCHTr2HD5WthYjFTnuTs+9dqI4T4vF/7LSMQy1u
rguaD1crOFvuw9UKCZFh7+T4tSQ7VRYzGkggGh6Ao+HOXHgnNmGT5dMuJ8MyNJzq
7Y91bP/fAM6MmV40t0F6moU8J0DsOP0U8xvBdhFQQ2VE
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:31 2025 by rpki-client on console.sobornost.net