Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/a7830b-a569-40c9-8df9-71cffb13c4fd/1/SMaGnc5NyFgmDGhjAj8M3cisWns.roa
File: SMaGnc5NyFgmDGhjAj8M3cisWns.roa (raw, json)
Hash identifier: ezse7ViYEjUS7dv1BuLn8UHqK70W97uKpHIH8bUfFck=
Subject key identifier: 48:C6:86:9D:CE:4D:C8:58:26:0C:68:63:02:3F:0C:DD:C8:AC:5A:7B
Certificate issuer: /CN=49158878df2bb4b08912be8604721e2d2567c9bf
Certificate serial: 01856B8A2777DE908E33AA72104077961550
Authority key identifier: 49:15:88:78:DF:2B:B4:B0:89:12:BE:86:04:72:1E:2D:25:67:C9:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SRWIeN8rtLCJEr6GBHIeLSVnyb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/a7830b-a569-40c9-8df9-71cffb13c4fd/1/SMaGnc5NyFgmDGhjAj8M3cisWns.roa
Signing time: Sun 01 Jan 2023 04:14:54 +0000
ROA not before: Sun 01 Jan 2023 04:14:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 91.246.35.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:8a:27:77:de:90:8e:33:aa:72:10:40:77:96:15:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49158878df2bb4b08912be8604721e2d2567c9bf
Validity
Not Before: Jan 1 04:14:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=48c6869dce4dc858260c6863023f0cddc8ac5a7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2d:95:13:9a:37:a3:8c:2e:e3:ab:f5:19:ae:
f7:a5:3a:7f:b8:25:bb:39:96:72:64:7d:eb:b9:9b:
48:0b:ae:66:5e:c0:35:c2:e6:6a:f2:cc:b2:6d:f5:
6e:ea:4a:c5:98:8b:1d:12:f3:ab:27:45:93:fc:e9:
c7:d0:ff:6c:5d:b8:0f:72:78:07:10:9b:76:6b:e5:
d4:0a:77:21:78:c8:b1:7a:cb:9b:4e:b7:0f:71:e1:
dd:d1:0d:27:2e:84:18:44:91:97:52:1f:2c:ee:a0:
8a:08:d1:51:b9:a0:bb:10:93:9a:c7:bc:85:6a:91:
24:01:cf:55:9e:4c:53:b0:15:55:b7:c3:1a:60:9c:
b0:23:b6:5b:70:f9:eb:e3:c7:d0:0d:24:db:4e:f4:
8b:80:89:5a:15:9b:86:aa:62:17:c9:2a:09:4b:54:
d2:83:1c:8c:eb:33:2e:76:8e:e5:fd:98:d2:46:c2:
27:3a:1d:4b:01:b6:4e:70:96:af:37:bb:a4:6e:3c:
17:4b:6c:27:17:ba:06:d8:fe:15:bd:9b:64:28:97:
aa:2e:e3:20:e9:36:7a:5b:99:4d:a2:cb:d6:f7:80:
ba:f8:b6:8d:25:6e:37:11:03:12:32:75:c7:40:7f:
0c:48:1a:50:d0:ff:fa:43:d2:35:0c:2e:fc:e6:fa:
16:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:C6:86:9D:CE:4D:C8:58:26:0C:68:63:02:3F:0C:DD:C8:AC:5A:7B
X509v3 Authority Key Identifier:
keyid:49:15:88:78:DF:2B:B4:B0:89:12:BE:86:04:72:1E:2D:25:67:C9:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SRWIeN8rtLCJEr6GBHIeLSVnyb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a7830b-a569-40c9-8df9-71cffb13c4fd/1/SMaGnc5NyFgmDGhjAj8M3cisWns.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a7830b-a569-40c9-8df9-71cffb13c4fd/1/SRWIeN8rtLCJEr6GBHIeLSVnyb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.246.35.0/24
Signature Algorithm: sha256WithRSAEncryption
20:77:29:7b:7b:d7:56:6a:6d:0a:76:1b:58:8b:1b:90:c1:69:
35:1e:5f:db:a6:e5:9e:b3:fa:6c:3f:f7:22:9e:dd:60:31:0a:
c5:79:40:38:7e:2c:49:91:28:22:80:b9:c3:d6:91:05:6b:e0:
53:c9:ac:8e:ef:b6:5c:20:8d:35:55:88:2d:0d:47:37:cc:fe:
33:bd:99:3c:f5:86:fa:ff:0e:f1:2d:b5:52:f3:54:01:7d:cd:
25:16:e2:d3:d7:e4:30:53:e5:28:c2:aa:80:9a:07:35:17:16:
14:47:ef:6d:8a:c6:40:61:3d:8c:4c:1d:aa:72:68:6f:b1:82:
9e:99:7f:9f:ac:ec:16:68:b9:f6:67:a3:91:5a:ea:13:a5:1c:
f6:48:fa:fd:0b:07:fe:3f:8d:f8:9f:88:c6:25:49:64:77:e7:
0e:77:01:7d:ec:b7:8f:86:8d:b5:2d:23:f5:3b:38:9c:01:5c:
b5:e8:24:66:6c:ca:27:22:a2:81:00:91:56:3e:90:24:f6:52:
15:a2:c9:b8:d8:6e:09:ed:62:16:1a:20:96:1a:b1:29:71:ac:
21:e8:7f:3e:d8:6b:07:b2:0c:fc:cd:9b:96:37:b9:58:1f:9e:
8e:13:12:d1:a7:d9:e0:68:67:78:74:5e:c6:42:ab:90:ff:f4:
08:d2:e6:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:48:01 2025 by rpki-client