Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/SmNQ3D_nWdxKjlh8riOKakfiw0I.roa
File: SmNQ3D_nWdxKjlh8riOKakfiw0I.roa (raw, json)
Hash identifier: qTmZUFKWYe+UBpIoderw0CXjzQqzL6iXYDTPpkF4Cu0=
Subject key identifier: 4A:63:50:DC:3F:E7:59:DC:4A:8E:58:7C:AE:23:8A:6A:47:E2:C3:42
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018519584CBB2F9C8A536B5F903ED47A962A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/SmNQ3D_nWdxKjlh8riOKakfiw0I.roa
Signing time: Fri 16 Dec 2022 05:11:35 +0000
ROA not before: Fri 16 Dec 2022 05:11:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:19:58:4c:bb:2f:9c:8a:53:6b:5f:90:3e:d4:7a:96:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 16 05:11:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4a6350dc3fe759dc4a8e587cae238a6a47e2c342
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:27:b6:a5:fa:50:50:f5:6b:84:45:51:eb:67:
a0:b6:85:8e:79:64:95:d9:24:78:1d:85:84:b5:fa:
45:68:f3:70:b5:a3:fd:a4:81:d1:3b:44:c3:87:28:
51:82:b7:c9:4f:2a:91:a4:4e:4d:55:83:a7:4e:fe:
64:62:ac:a0:a5:4e:e8:99:cf:e8:f9:36:8b:4a:9d:
a8:05:8b:f1:84:d0:c1:56:d8:0e:60:d7:8d:ad:8d:
2d:22:96:42:24:70:e3:e5:d8:52:59:7c:b0:d9:dd:
8f:83:9b:22:a0:95:78:c3:b3:f1:d4:ef:f3:4b:33:
53:93:97:eb:36:ed:44:e8:1f:2b:22:80:74:c6:8e:
2d:c6:d5:3f:87:30:e7:52:83:fd:6c:ab:4d:82:0e:
b2:a4:ff:ae:35:19:7f:1b:f3:88:0a:e8:20:13:33:
70:ac:e1:19:ad:ca:51:f5:21:f5:e4:37:6d:ab:9d:
ed:90:d6:ac:90:38:22:c0:a8:45:3a:2b:8d:47:eb:
20:1d:84:98:d7:dc:e7:de:5f:21:9e:b8:ed:7b:02:
76:2a:c6:cc:1c:c2:1f:63:bd:ad:42:8b:91:45:65:
31:6f:89:71:48:c5:a7:f3:a9:f4:26:15:4b:fb:02:
2e:8b:e7:91:82:f4:30:7b:64:c8:9d:46:14:f6:40:
00:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:63:50:DC:3F:E7:59:DC:4A:8E:58:7C:AE:23:8A:6A:47:E2:C3:42
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/SmNQ3D_nWdxKjlh8riOKakfiw0I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8e:b0:79:34:5d:d2:d2:29:8a:fb:0d:66:74:80:2d:e3:46:17:
77:ee:5f:c3:fd:d4:d8:4c:91:4a:37:26:36:db:9e:31:4e:8b:
0a:cc:4c:a1:16:4a:a1:04:44:7d:97:1d:9a:68:d8:6e:e1:49:
b3:d4:4e:97:76:6c:eb:b9:02:4b:4d:ae:2f:4b:a8:20:d4:7c:
e2:cb:bf:e0:46:21:f5:26:8d:31:9c:5c:da:6d:f5:73:42:b0:
57:70:3c:06:95:bb:ef:7a:52:01:7d:3d:5a:39:8e:21:c5:d6:
fa:7c:74:dd:1f:78:b8:9d:9e:0a:47:a3:78:09:b0:a5:46:82:
fc:8b:2e:a0:89:fb:cf:c5:61:d8:a2:4e:84:e4:c8:f6:a8:44:
e1:04:e7:c2:2a:af:70:7b:ef:97:39:e9:2c:0e:df:cf:7a:aa:
46:b3:da:9b:d6:d4:43:0f:e6:8c:de:27:4b:b6:92:9b:6b:52:
21:08:4f:5f:04:b7:16:99:95:00:cf:15:d5:f8:0e:cc:2d:9e:
1e:b1:9e:d2:33:9a:2b:f1:b8:11:11:9b:1b:ec:cc:37:2a:e0:
e8:cf:f7:1e:98:c0:e2:a4:5c:1d:9e:0e:67:99:61:cf:22:54:
c8:9b:d1:02:05:b5:32:45:2c:f4:c4:78:dc:88:5f:36:fc:0f:
d7:05:17:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 02:22:30 2025 by rpki-client