Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/SwPASjatWVfjOIL0CfqNkbjsbwo.roa
File: SwPASjatWVfjOIL0CfqNkbjsbwo.roa (raw, json)
Hash identifier: yYkYDdowlNUsc+pSQllQw8BCPb1GPkpcD2ftLICeF7s=
Subject key identifier: 4B:03:C0:4A:36:AD:59:57:E3:38:82:F4:09:FA:8D:91:B8:EC:6F:0A
Certificate issuer: /CN=67955b1aa1c0284d2843b96f26c5fe751e66946f
Certificate serial: 0194221FD1113ACE721EF603ED4888B63B55
Authority key identifier: 67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/SwPASjatWVfjOIL0CfqNkbjsbwo.roa
Signing time: Wed 01 Jan 2025 13:48:18 +0000
ROA not before: Wed 01 Jan 2025 13:48:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215678
IP address blocks: 91.237.181.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:d1:11:3a:ce:72:1e:f6:03:ed:48:88:b6:3b:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67955b1aa1c0284d2843b96f26c5fe751e66946f
Validity
Not Before: Jan 1 13:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4b03c04a36ad5957e33882f409fa8d91b8ec6f0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e4:65:88:28:51:c8:93:30:ab:be:99:30:7b:
30:b7:6c:1f:70:94:7d:62:15:2b:16:50:50:90:f5:
a9:b3:74:bf:b6:d7:1e:46:71:ed:5e:53:07:7e:51:
63:7c:60:2b:73:33:c9:df:3a:a3:97:01:91:b1:50:
b2:c6:21:fe:a4:0b:16:0b:66:68:50:5b:4f:b7:73:
20:ed:f4:0d:90:8c:49:fd:cc:f8:c3:05:1d:6d:a4:
e7:6c:92:51:e7:ed:c5:ac:60:1c:2a:a4:9a:1f:a1:
86:73:40:02:f3:31:13:81:4c:a7:15:02:5d:5a:87:
9b:ad:21:c7:20:42:5c:0b:9b:84:d5:21:3d:a7:83:
e3:e4:ee:d7:a1:c6:66:e9:c4:ea:58:3c:34:af:5f:
ea:92:64:1e:da:cc:32:35:d1:86:c3:b7:5b:61:7e:
b8:f4:c7:a7:a8:a3:17:a1:ec:6b:1d:5e:99:b9:c1:
ac:2a:3a:43:a9:70:76:9a:3a:65:17:a6:20:c4:1c:
36:0c:c0:74:6b:f1:6a:e6:7b:cf:45:a0:d6:0f:bf:
38:55:95:c2:6b:94:57:df:92:4d:6e:93:9d:54:c3:
35:38:aa:f1:57:ec:64:dc:f1:76:2b:ba:49:7e:21:
53:8a:a8:4c:80:51:e1:22:a9:77:48:41:8e:03:97:
b8:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:03:C0:4A:36:AD:59:57:E3:38:82:F4:09:FA:8D:91:B8:EC:6F:0A
X509v3 Authority Key Identifier:
keyid:67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/SwPASjatWVfjOIL0CfqNkbjsbwo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.237.181.0/24
Signature Algorithm: sha256WithRSAEncryption
49:f4:63:29:1f:1b:5f:9b:d3:73:62:2b:4a:b9:81:3a:cb:33:
47:da:81:fc:65:ad:58:34:4e:6a:88:f1:5f:50:1c:db:b7:0a:
9d:b0:b9:ff:a3:ed:b0:c9:dd:67:42:6f:27:b3:69:8a:36:6a:
0e:6d:f8:ac:8a:c0:ff:ac:1b:17:3e:32:1f:65:ff:e2:c1:2e:
46:21:7c:fc:d2:7d:cb:20:81:7c:b3:cc:1e:9c:54:6c:ac:7e:
33:ba:89:d5:d8:6e:ef:9c:92:a4:db:7c:a8:0f:7b:c3:8b:04:
8a:91:0c:c1:3e:88:7c:ae:41:9c:7c:bd:62:ea:1e:21:b0:80:
5f:99:1b:bf:b6:10:da:e6:56:e4:56:37:81:20:66:19:ac:cb:
12:2e:98:82:e7:bc:3c:22:4f:a0:56:74:b3:43:af:1a:59:80:
bc:ec:2d:0b:85:50:2c:10:ca:06:b3:07:46:e8:45:c6:93:45:
38:10:d4:a7:bd:89:56:d3:35:c0:90:d4:54:d5:a4:fd:92:4e:
f7:b3:18:59:53:92:e1:ad:96:52:2f:0b:8a:b8:48:55:57:b2:
a4:4b:45:7e:38:5a:9c:34:84:c1:12:81:18:13:6c:18:28:b4:
fb:62:86:9f:20:12:75:f9:ef:76:77:17:46:bc:0d:97:61:6a:
e3:91:50:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 23 16:46:08 2025 by rpki-client on console.sobornost.net