Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/sm34Mo7NGLL90AZvU5ha3TSmJ3U.roa
File: sm34Mo7NGLL90AZvU5ha3TSmJ3U.roa (raw, json)
Hash identifier: DQJszROwS2bN8tQQBOERaG+niM8IfeAYSlI8dETEj0M=
Subject key identifier: B2:6D:F8:32:8E:CD:18:B2:FD:D0:06:6F:53:98:5A:DD:34:A6:27:75
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01942824D617E78705104887436D674B64AB
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/sm34Mo7NGLL90AZvU5ha3TSmJ3U.roa
Signing time: Thu 02 Jan 2025 17:51:30 +0000
ROA not before: Thu 02 Jan 2025 17:51:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 393398
IP address blocks: 81.161.237.0/24 maxlen: 24
193.58.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:d6:17:e7:87:05:10:48:87:43:6d:67:4b:64:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 17:51:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b26df8328ecd18b2fdd0066f53985add34a62775
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ad:e7:ed:77:d6:5e:84:f6:19:25:25:3f:94:
d7:52:79:b0:dc:78:f5:25:18:c0:71:3f:be:77:b7:
d8:bd:04:f1:28:f2:15:ec:c2:03:f2:ac:cb:f7:8e:
5e:46:1d:aa:ab:7f:af:fe:34:cb:3f:c9:3a:3f:5b:
1b:87:2b:17:b2:23:34:88:c6:66:7a:db:8a:78:a5:
cd:7d:2e:3f:c3:55:97:89:df:6e:42:d0:b6:79:91:
57:53:ec:bb:da:b5:17:62:93:25:0c:19:4c:d6:a6:
7d:95:54:a5:7a:a8:0a:3d:8f:35:d2:59:c3:2a:f6:
90:66:cd:83:3b:9a:06:f1:35:52:4b:5c:51:6a:e0:
95:f2:c8:fd:f3:87:a1:2b:0b:ef:af:b6:31:0d:79:
f3:e8:4c:4a:c7:c6:54:6c:74:c5:d3:67:eb:69:ea:
16:c4:be:58:be:66:41:d9:ad:65:62:85:0e:01:7e:
4a:ed:f9:c0:0a:7c:dd:f3:cb:ce:05:3a:13:42:eb:
f9:ae:e7:1d:ec:4b:0e:63:98:90:56:80:ae:14:fd:
d2:a8:8b:14:82:c7:78:38:e4:a2:f0:7f:a7:35:88:
14:81:21:a6:3f:01:9a:66:22:f4:57:bb:8c:fe:6a:
ca:ee:19:5c:96:55:a1:22:76:12:d8:d2:47:87:97:
27:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:6D:F8:32:8E:CD:18:B2:FD:D0:06:6F:53:98:5A:DD:34:A6:27:75
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/sm34Mo7NGLL90AZvU5ha3TSmJ3U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.161.237.0/24
193.58.123.0/24
Signature Algorithm: sha256WithRSAEncryption
66:e6:77:67:59:8f:34:b1:01:0b:84:36:b9:55:44:b0:fc:b5:
1c:fe:54:fa:f9:10:fc:24:30:aa:a4:df:65:4d:85:e8:02:d5:
8e:37:10:cc:00:e1:cf:0f:f4:66:b9:5a:d3:42:74:a2:5c:58:
5e:72:62:67:57:fa:36:63:46:0e:19:be:48:53:68:fd:bf:29:
0d:32:37:bf:d1:25:7a:8e:a3:3e:03:3f:3d:9a:28:ba:eb:e8:
de:63:50:ea:10:95:02:45:68:18:1d:a4:7c:1c:49:57:35:d9:
20:96:a3:50:3a:f6:82:4b:e5:87:db:9a:c9:40:db:9e:7f:8b:
99:04:81:08:65:81:49:77:79:4d:b6:7c:5e:bb:9e:da:fc:fe:
d7:0f:dd:e9:94:4d:7f:58:89:60:06:91:b2:1e:51:5c:e7:7c:
18:38:45:33:92:c9:95:b9:5f:b0:6c:a4:8e:0e:1d:c1:f5:f8:
74:7d:bc:43:58:60:2f:a9:5b:ca:f9:c9:72:75:d1:b3:e8:cb:
02:d3:a6:0a:aa:9d:c6:41:df:c5:b2:d7:4c:46:85:67:a5:c9:
3c:7f:bb:c4:7f:e9:7e:76:06:76:4d:e9:db:89:b8:7e:8c:93:
df:bf:74:fb:2b:ef:75:70:f7:01:d0:45:2d:ab:be:ea:48:64:
ce:ea:0d:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:39:57 2025 by rpki-client