Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/SMFYXsoOngNHyoT5NGl4RKsjvkQ.roa
File: SMFYXsoOngNHyoT5NGl4RKsjvkQ.roa (raw, json)
Hash identifier: oeMiYCKWgMQLfjnvhrxjxrYLJVYZlD1pG1W3Uf/yIRE=
Subject key identifier: 48:C1:58:5E:CA:0E:9E:03:47:CA:84:F9:34:69:78:44:AB:23:BE:44
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B180189493D9C66B291C79F69A8FD5D41
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/SMFYXsoOngNHyoT5NGl4RKsjvkQ.roa
Signing time: Tue 10 Oct 2023 05:13:55 +0000
ROA not before: Tue 10 Oct 2023 05:13:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:18:01:89:49:3d:9c:66:b2:91:c7:9f:69:a8:fd:5d:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 10 05:13:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=48c1585eca0e9e0347ca84f934697844ab23be44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:1f:4d:22:cf:83:24:d8:17:f7:e2:e2:ee:98:
8e:51:3d:fd:cd:8b:e3:73:ae:35:9c:cc:a5:c3:ea:
2b:5c:9a:98:69:f5:f1:17:3f:a7:57:de:36:28:e5:
a6:23:ba:8c:f6:46:57:7e:9c:5a:60:b0:31:5f:a1:
bb:ba:fb:0a:0a:63:f6:93:5f:6b:06:1f:5a:ed:53:
ea:27:62:85:ff:ad:71:f3:bb:8b:b8:5d:ea:96:be:
e1:22:05:71:03:52:6c:c3:54:d5:a6:56:18:ce:a2:
95:d6:73:65:29:8f:80:c2:25:4d:ee:6d:79:40:b9:
56:b8:52:a4:33:d4:7c:07:7c:4e:14:23:d7:5d:17:
34:52:bb:6c:74:26:f0:ce:73:e8:db:06:16:d2:55:
7e:ce:e4:03:53:f3:c3:6a:76:cd:53:4b:a3:ee:42:
50:cf:82:74:e0:73:fd:af:22:68:5e:f9:a3:30:89:
11:f0:05:e2:52:9e:ae:e9:cc:f2:7c:10:95:14:80:
c5:28:f2:59:ec:7d:75:ce:6a:dd:d1:72:c6:d1:71:
be:0a:23:84:39:ab:cf:05:d2:e8:d5:c1:78:a1:2b:
8b:4d:0b:0f:6c:6e:52:f4:26:f9:53:73:25:d9:3f:
1a:f3:a7:02:c9:40:c9:97:19:54:69:75:5f:aa:9e:
b3:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:C1:58:5E:CA:0E:9E:03:47:CA:84:F9:34:69:78:44:AB:23:BE:44
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/SMFYXsoOngNHyoT5NGl4RKsjvkQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ae:19:46:12:fc:e1:72:66:aa:1a:ed:f5:d0:fa:f5:67:e4:22:
e4:16:24:c3:9d:00:ef:3c:81:b4:5b:3c:ad:bc:36:3b:c1:06:
03:50:ae:41:b2:d7:67:58:4d:d7:13:e3:86:0b:f8:86:4e:41:
60:3e:73:fe:52:40:df:d0:37:65:b4:b5:9d:73:35:df:2a:1d:
e7:a0:39:3c:21:a2:a2:a9:5a:4b:c6:57:79:8e:4f:47:c9:10:
35:c7:ee:cf:21:d5:e6:b4:2a:7e:35:a4:f1:b4:5a:e6:48:23:
20:d5:ca:0d:7f:20:65:b4:35:e2:d2:96:4b:88:6a:ec:74:94:
ab:ed:d1:bd:05:5c:b1:ac:65:53:e8:71:02:62:05:7a:56:eb:
27:23:db:8c:aa:30:25:69:23:45:83:71:40:4b:db:67:e4:b9:
31:79:0e:c0:e1:8a:c7:54:58:45:58:48:9a:8f:ea:54:88:53:
e2:20:4a:9b:b1:3b:b6:d5:dd:55:02:30:1d:5b:45:f0:ba:8f:
9a:d2:51:30:ec:2b:6c:e1:ed:e1:b5:83:fd:3f:4e:14:a1:7f:
46:db:c5:12:83:88:11:46:d1:96:0d:09:55:56:58:35:a7:de:
20:a6:ad:c0:e1:a2:5d:bf:0c:98:4f:a6:0a:58:ae:f1:03:a6:
22:fb:5c:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 11:53:53 2025 by rpki-client