Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/015f44-0f4c-4714-8615-23b072f5b188/1/smgpsm_CQ3OFohaJxoWMkkDmqi4.roa
File: smgpsm_CQ3OFohaJxoWMkkDmqi4.roa (raw, json)
Hash identifier: JxY9cOn6ezjdGWIBSl+TkBS9n5u0i7XKaZE/qWPWQW0=
Subject key identifier: B2:68:29:B2:6F:C2:43:73:85:A2:16:89:C6:85:8C:92:40:E6:AA:2E
Certificate issuer: /CN=3adeea3b6aac4d834b4fd7c2e5d3c397f61f43d6
Certificate serial: 35032864
Authority key identifier: 3A:DE:EA:3B:6A:AC:4D:83:4B:4F:D7:C2:E5:D3:C3:97:F6:1F:43:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ot7qO2qsTYNLT9fC5dPDl_YfQ9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/015f44-0f4c-4714-8615-23b072f5b188/1/smgpsm_CQ3OFohaJxoWMkkDmqi4.roa
Signing time: Wed 25 May 2022 04:00:13 +0000
ROA not before: Wed 25 May 2022 04:00:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43260
IP address blocks: 193.106.198.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 889399396 (0x35032864)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3adeea3b6aac4d834b4fd7c2e5d3c397f61f43d6
Validity
Not Before: May 25 04:00:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b26829b26fc2437385a21689c6858c9240e6aa2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d8:9a:ac:e2:e7:34:02:a9:16:e9:da:93:76:
1a:4d:93:4e:7f:38:84:b1:01:bd:21:20:98:db:eb:
36:65:57:9a:51:da:3b:1c:d6:8e:7f:de:c5:cb:80:
92:28:83:ef:a1:42:53:48:d0:82:0c:1b:29:9f:86:
29:78:a7:1e:1d:d1:47:43:cd:c4:70:04:eb:0c:27:
80:8d:1f:07:88:e1:12:d6:3f:7a:dc:41:2f:81:a5:
9a:e5:8d:28:dc:a9:27:ba:05:1e:98:fa:1e:66:b2:
27:96:aa:57:bb:05:25:6f:a3:29:6c:75:a9:25:b2:
ce:8d:32:3d:e0:ec:e9:9b:fc:ae:83:a1:0a:1b:1e:
fd:a3:55:67:30:a8:d0:c6:93:d2:34:c7:19:57:ea:
83:c9:db:0e:69:04:cc:c6:cc:34:40:19:78:00:ba:
ca:f7:a9:27:41:ab:93:c2:07:7d:3c:9d:c6:cd:5d:
24:cb:7c:9d:30:fc:9b:a5:2f:e1:c6:b1:f2:df:1a:
40:8a:2b:31:f9:10:d6:5b:ae:ae:af:e3:ea:aa:d1:
2b:bb:42:c6:90:e5:a8:db:95:2b:6c:6a:be:40:34:
20:a6:f8:be:cd:cb:96:00:20:82:c0:a2:92:2e:11:
ce:c6:0b:1d:35:f1:11:0e:00:82:0c:08:3e:83:1d:
10:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:68:29:B2:6F:C2:43:73:85:A2:16:89:C6:85:8C:92:40:E6:AA:2E
X509v3 Authority Key Identifier:
keyid:3A:DE:EA:3B:6A:AC:4D:83:4B:4F:D7:C2:E5:D3:C3:97:F6:1F:43:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ot7qO2qsTYNLT9fC5dPDl_YfQ9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/015f44-0f4c-4714-8615-23b072f5b188/1/smgpsm_CQ3OFohaJxoWMkkDmqi4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/015f44-0f4c-4714-8615-23b072f5b188/1/Ot7qO2qsTYNLT9fC5dPDl_YfQ9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.106.198.0/24
Signature Algorithm: sha256WithRSAEncryption
03:ad:22:a1:1d:8b:ec:d4:bb:70:d2:af:c3:db:cd:7c:07:02:
48:30:07:a0:d4:e9:62:ce:7b:a4:bb:69:3a:56:17:1d:72:7d:
35:ae:8d:af:95:f6:be:95:43:3b:01:b4:24:bf:fb:59:7a:dc:
01:a2:ee:d1:c1:00:f7:53:88:aa:6f:22:d0:46:7f:fd:d4:f4:
43:db:6c:de:8c:24:13:ec:38:e1:36:ed:47:9f:fe:65:ba:a4:
e6:a3:33:3b:0f:40:bf:94:7f:f8:fa:9c:91:e5:a8:8e:da:e6:
65:d8:7c:f9:ac:63:5b:3c:ed:c9:7d:1f:4e:27:c0:54:74:3a:
27:36:1c:34:10:f2:e8:57:44:47:01:7a:59:2a:95:aa:61:5e:
38:d3:01:73:bf:36:15:e9:6a:d2:81:59:16:20:1d:8e:0b:19:
e1:4b:87:1b:ee:57:67:d4:ba:0d:c4:49:12:d9:a9:dd:5c:3b:
25:8d:cd:7b:2c:53:1a:69:1d:c0:44:6c:50:25:6a:d6:a1:96:
84:12:a1:d4:a9:7f:53:11:7e:99:31:3c:36:b7:69:5e:cb:b9:
8b:0b:15:5a:f3:74:a3:9d:f9:7a:9a:b8:f7:58:42:f9:ac:e9:
71:e4:b5:c2:93:80:70:c1:2b:a3:3a:89:8c:b4:6c:5f:ad:70:
22:76:6d:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:20 2023 by rpki-client on console-fra.rpki-client.org