Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/smgQhR1WkDuLYZtnSt3KxLnFFME.roa
File: smgQhR1WkDuLYZtnSt3KxLnFFME.roa (raw, json)
Hash identifier: Z1MOxUq6sxBXZipioFKdR/NpXqOoPsix9279r6reGW4=
Subject key identifier: B2:68:10:85:1D:56:90:3B:8B:61:9B:67:4A:DD:CA:C4:B9:C5:14:C1
Certificate issuer: /CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d
Certificate serial: 01942521A85F866712445DD20870DF21D4CB
Authority key identifier: FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/smgQhR1WkDuLYZtnSt3KxLnFFME.roa
Signing time: Thu 02 Jan 2025 03:49:10 +0000
ROA not before: Thu 02 Jan 2025 03:49:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216299
IP address blocks: 2a13:a5c3:ff40::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:a8:5f:86:67:12:44:5d:d2:08:70:df:21:d4:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d
Validity
Not Before: Jan 2 03:49:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b26810851d56903b8b619b674addcac4b9c514c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:7e:cd:1c:a8:fc:89:1d:ef:c4:86:ce:2a:6b:
07:94:c1:b1:54:aa:4d:25:99:61:e3:95:25:9a:ed:
6f:46:cd:ff:28:28:5c:3b:51:4d:33:b8:56:ea:38:
73:e7:57:f0:3a:70:c2:96:e7:a4:83:1a:3f:73:98:
10:5d:18:ef:94:2c:c8:cd:73:cf:a8:2b:3b:03:01:
cd:cb:db:ed:5f:e8:e2:e5:38:ac:da:05:4f:a8:cb:
e5:57:b6:4c:c0:cf:1d:6f:03:a4:4c:ce:67:6d:ba:
b4:dc:41:26:a9:18:12:9d:be:fe:ca:55:71:ed:1d:
b6:e6:f8:54:b9:47:19:fd:5f:cd:f7:a1:29:3c:d1:
5e:79:df:e6:ec:87:02:9b:7e:b9:ef:02:12:d3:75:
3d:76:ed:af:9b:06:25:d1:33:a6:87:02:7a:f4:f6:
f6:5b:a5:35:41:51:cc:0f:8e:13:9d:6c:fa:da:26:
d1:30:ce:1b:cb:87:59:e1:9c:80:d7:e6:53:6e:2c:
ef:e1:9c:94:d8:3f:45:ec:93:12:a2:d9:64:ec:cb:
63:4c:9d:0b:b2:45:39:de:95:5a:b4:69:e8:8d:3c:
83:6a:1c:34:fd:e5:3b:a5:b7:4f:e2:7c:dc:66:a0:
f4:82:b8:04:97:df:ac:80:5b:81:24:d0:2f:5f:aa:
58:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:68:10:85:1D:56:90:3B:8B:61:9B:67:4A:DD:CA:C4:B9:C5:14:C1
X509v3 Authority Key Identifier:
keyid:FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/smgQhR1WkDuLYZtnSt3KxLnFFME.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:a5c3:ff40::/44
Signature Algorithm: sha256WithRSAEncryption
5d:6b:48:56:8a:98:9b:f7:b5:14:ce:22:93:59:d3:7c:76:e2:
69:5e:7b:df:c6:5a:cf:f6:aa:c9:3e:05:4b:b5:fc:b8:74:06:
8f:31:2f:8b:06:5a:4d:f8:aa:f3:15:10:c0:15:67:f8:7f:2f:
eb:cd:e2:d0:6d:2f:36:ea:c1:40:b7:08:1c:9f:4d:2b:51:d2:
b9:1d:1e:97:93:91:14:f9:48:51:70:3e:35:98:e7:b4:05:ba:
26:05:9e:bb:ea:54:85:d6:17:7d:8b:34:2d:bb:0e:13:e8:e4:
c5:ed:b6:48:a6:5c:22:ee:79:66:fa:fb:9b:57:a3:8c:99:07:
f9:fa:1f:61:65:75:59:b5:a6:15:c2:ee:1f:a2:bc:00:d8:27:
9e:f2:97:4e:60:6b:44:03:cd:33:7c:09:98:84:bb:76:7b:c0:
a0:ea:4e:f2:f9:e5:cd:ca:72:a3:1a:de:7f:25:f8:a0:cb:d3:
d4:5c:bc:d5:b7:4f:4d:30:9a:f0:c0:94:d1:b9:bd:d6:14:e3:
e4:21:89:e9:c2:05:0f:f6:c6:4f:1c:12:e1:d4:b3:dc:b2:19:
bc:c4:d3:bc:72:cf:fd:03:b4:5f:dd:13:f0:a0:3c:0b:65:e3:
0d:a3:c2:bd:21:0a:d5:ea:d3:ad:f3:a1:f0:67:0a:22:ef:fa:
c8:7a:79:26
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQlIahfhmcSRF3SCHDfIdTLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkZDZlZTAxMGI5OTBhMzM3MzU3NTZiNGZlMmYzZDNjMjY3
MWRkOWQwHhcNMjUwMTAyMDM0OTEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMjY4MTA4NTFkNTY5MDNiOGI2MTliNjc0YWRkY2FjNGI5YzUxNGMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA237NHKj8iR3vxIbOKmsHlMGxVKpN
JZlh45Ulmu1vRs3/KChcO1FNM7hW6jhz51fwOnDCluekgxo/c5gQXRjvlCzIzXPP
qCs7AwHNy9vtX+ji5Tis2gVPqMvlV7ZMwM8dbwOkTM5nbbq03EEmqRgSnb7+ylVx
7R225vhUuUcZ/V/N96EpPNFeed/m7IcCm3657wIS03U9du2vmwYl0TOmhwJ69Pb2
W6U1QVHMD44TnWz62ibRMM4by4dZ4ZyA1+ZTbizv4ZyU2D9F7JMSotlk7MtjTJ0L
skU53pVatGnojTyDahw0/eU7pbdP4nzcZqD0grgEl9+sgFuBJNAvX6pYgwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFLJoEIUdVpA7i2GbZ0rdysS5xRTBMB8GA1UdIwQY
MBaAFP3W7gELmQozc1dWtP4vPTwmcd2dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2RidUFRdVpDak56VjFhMF9pODlQQ1p4M1owLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8yZDFhMzUtZmY4YS00NmI0LThjNDct
NjNjNzIxY2YxZjU2LzEvc21nUWhSMVdrRHVMWVp0blN0M0t4TG5GRk1FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS8yZDFhMzUtZmY4YS00NmI0LThjNDctNjNjNzIxY2YxZjU2
LzEvX2RidUFRdVpDak56VjFhMF9pODlQQ1p4M1owLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhOlw/9A
MA0GCSqGSIb3DQEBCwUAA4IBAQBda0hWipib97UUziKTWdN8duJpXnvfxlrP9qrJ
PgVLtfy4dAaPMS+LBlpN+KrzFRDAFWf4fy/rzeLQbS826sFAtwgcn00rUdK5HR6X
k5EU+UhRcD41mOe0BbomBZ676lSF1hd9izQtuw4T6OTF7bZIplwi7nlm+vubV6OM
mQf5+h9hZXVZtaYVwu4forwA2Cee8pdOYGtEA80zfAmYhLt2e8Cg6k7y+eXNynKj
Gt5/Jfigy9PUXLzVt09NMJrwwJTRub3WFOPkIYnpwgUP9sZPHBLh1LPcshm8xNO8
cs/9A7Rf3RPwoDwLZeMNo8K9IQrV6tOt86HwZwoi7/rIenkm
-----END CERTIFICATE-----
Generated at Sun Apr 6 20:34:21 2025 by rpki-client