Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/SmdTLHKwW0UYdiY-cQpJtz_qzzQ.roa
File: SmdTLHKwW0UYdiY-cQpJtz_qzzQ.roa (raw, json)
Hash identifier: VMDkzQcBaDNJgx2HaenT5Cf+EfqvPkTC0XZwgw/BKgA=
Subject key identifier: 4A:67:53:2C:72:B0:5B:45:18:76:26:3E:71:0A:49:B7:3F:EA:CF:34
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018720D8B950A54F3FBACF166C8F7ADF7836
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/SmdTLHKwW0UYdiY-cQpJtz_qzzQ.roa
Signing time: Mon 27 Mar 2023 02:14:46 +0000
ROA not before: Mon 27 Mar 2023 02:14:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:20:d8:b9:50:a5:4f:3f:ba:cf:16:6c:8f:7a:df:78:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 27 02:14:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4a67532c72b05b451876263e710a49b73feacf34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:61:71:61:dc:4b:c4:a2:64:29:42:07:07:00:
95:fa:94:db:07:6d:32:ae:a6:18:03:f2:29:86:67:
97:1c:7b:27:f8:f5:51:92:e8:04:52:e4:0e:c2:f0:
9a:95:70:44:a5:10:14:1d:ce:6b:f7:26:71:ce:c0:
06:dd:b0:c0:43:75:8b:dc:52:98:bb:e6:c8:7d:91:
49:d2:3b:73:e0:7d:8a:6a:5d:4b:6a:75:5b:7a:1f:
73:82:10:dc:75:7f:02:04:fc:04:5e:26:3e:2f:35:
d3:a4:fb:5e:09:01:63:ed:b7:33:cb:64:e2:d0:ae:
ac:87:56:d2:53:41:14:88:e7:52:31:77:c1:9f:95:
c7:2a:20:f8:6a:3d:33:4f:44:03:23:86:18:44:18:
be:d0:9f:10:29:68:b9:94:88:1a:e1:d7:5d:0d:7f:
d0:58:0f:c5:70:6f:5e:b9:fd:ca:2b:fd:48:e3:24:
54:10:62:d1:e3:06:05:3e:00:fb:0a:88:34:c2:0f:
a4:46:6b:cc:62:c5:08:d6:49:33:65:b4:0d:13:d0:
22:b9:6b:2a:93:2e:df:2c:23:3e:58:8e:cb:31:36:
1a:f2:1a:7c:36:6b:69:79:1f:bd:84:07:49:5e:d5:
77:cc:07:7a:fe:8c:01:8b:43:1e:b4:29:21:09:47:
7c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:67:53:2C:72:B0:5B:45:18:76:26:3E:71:0A:49:B7:3F:EA:CF:34
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/SmdTLHKwW0UYdiY-cQpJtz_qzzQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
58:5c:3c:73:d1:61:b5:30:41:71:77:4d:fa:07:58:b8:38:21:
d0:e1:5b:8c:e3:06:8a:ea:d1:f1:e0:f8:9b:bb:c0:35:db:24:
74:63:db:50:bb:21:61:04:b5:97:69:b7:fc:ae:25:06:8d:ee:
62:c7:51:a1:4b:9f:e4:06:24:76:f8:15:7c:c4:08:be:52:ea:
a6:72:dd:55:0a:6d:29:6a:c3:84:99:68:27:03:13:7a:7e:85:
4d:4c:65:4f:15:6d:f8:34:1c:9d:d8:4a:ab:8f:8e:14:8c:69:
18:46:dd:b4:f4:b3:34:f4:23:10:1e:c6:ed:8c:c2:64:e6:f0:
6a:b7:c0:01:f7:89:51:fc:43:aa:8b:c9:1e:cd:7b:c2:28:42:
49:4b:70:40:1e:4d:57:62:23:ed:bc:ed:dc:75:7b:3f:5b:f8:
bd:b0:80:d1:3f:9d:a3:3d:4e:1e:55:cb:5d:c0:68:f1:9e:76:
db:49:9c:c8:58:64:44:9d:fc:4b:0e:d2:ae:a0:a5:b4:16:25:
58:6f:0a:55:fc:75:e1:41:f7:7d:82:c7:fd:a8:2e:4d:20:a5:
9c:0e:fa:ac:fd:f6:24:50:f9:44:3f:a0:da:0c:55:37:0c:2d:
c3:c9:7d:af:ae:c2:a8:aa:be:48:3e:44:65:f6:2b:6e:3b:2c:
8a:51:22:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 16:05:52 2025 by rpki-client