Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/4dc07a-da6d-49fb-be8e-8eb02c23f7e5/1/SmMcHaFB4EuCBfjDsl4JrTHcoIA.roa
File: SmMcHaFB4EuCBfjDsl4JrTHcoIA.roa (raw, json)
Hash identifier: UyM9yvDpN1C/wsh3NEgz7luko9t4PdVpuoKVRX/nf8U=
Subject key identifier: 4A:63:1C:1D:A1:41:E0:4B:82:05:F8:C3:B2:5E:09:AD:31:DC:A0:80
Certificate issuer: /CN=c0d1b3287b9d9db1af7059da10b46b61187969c4
Certificate serial: 018915E554A7418E550DE7FB4BF156527B95
Authority key identifier: C0:D1:B3:28:7B:9D:9D:B1:AF:70:59:DA:10:B4:6B:61:18:79:69:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wNGzKHudnbGvcFnaELRrYRh5acQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/4dc07a-da6d-49fb-be8e-8eb02c23f7e5/1/SmMcHaFB4EuCBfjDsl4JrTHcoIA.roa
Signing time: Sun 02 Jul 2023 09:18:18 +0000
ROA not before: Sun 02 Jul 2023 09:18:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43754
IP address blocks: 85.208.252.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:15:e5:54:a7:41:8e:55:0d:e7:fb:4b:f1:56:52:7b:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0d1b3287b9d9db1af7059da10b46b61187969c4
Validity
Not Before: Jul 2 09:18:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4a631c1da141e04b8205f8c3b25e09ad31dca080
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:16:bd:a7:db:f1:6c:fb:8a:34:71:7a:af:f3:
4c:90:64:05:df:e0:e0:7d:10:a3:75:f2:a0:fd:95:
ea:97:11:17:2c:23:22:0c:2b:6c:4f:8a:8c:50:b4:
ea:99:c5:bf:af:60:e4:55:97:31:fb:a9:46:29:3b:
88:9f:8d:b1:16:12:41:b9:88:08:8f:d5:0f:4e:89:
9b:41:fe:3e:02:ae:f5:21:75:66:c8:49:5c:3e:cd:
c1:43:ee:91:cb:80:c5:e4:41:c0:ab:63:ef:1a:81:
e2:39:78:a0:b0:ad:f3:d7:74:51:77:1d:bb:ad:00:
5c:f8:8e:c9:26:41:84:59:0b:ae:32:27:69:6a:85:
38:58:a3:6d:c5:1b:4e:68:9c:6d:5b:0f:4a:6d:dc:
e8:7c:32:7d:d8:46:2d:50:bf:1c:26:be:f7:6e:c2:
64:84:44:92:dc:84:39:9f:14:9e:13:38:79:b6:3b:
9d:f5:98:c3:6c:3c:dd:41:01:7c:7b:4c:1a:60:f1:
f3:66:3a:48:8c:0b:0b:39:f5:ff:9f:45:54:ae:a6:
51:12:97:d2:1b:cc:00:92:ed:8c:ae:6a:06:23:c4:
84:4b:ad:8e:08:9c:62:5e:65:1a:e7:3e:f8:51:a9:
9c:7b:8c:dd:7f:78:6b:8c:8f:e1:f2:8b:7f:32:cb:
bc:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:63:1C:1D:A1:41:E0:4B:82:05:F8:C3:B2:5E:09:AD:31:DC:A0:80
X509v3 Authority Key Identifier:
keyid:C0:D1:B3:28:7B:9D:9D:B1:AF:70:59:DA:10:B4:6B:61:18:79:69:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wNGzKHudnbGvcFnaELRrYRh5acQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/4dc07a-da6d-49fb-be8e-8eb02c23f7e5/1/SmMcHaFB4EuCBfjDsl4JrTHcoIA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/4dc07a-da6d-49fb-be8e-8eb02c23f7e5/1/wNGzKHudnbGvcFnaELRrYRh5acQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.208.252.0/24
Signature Algorithm: sha256WithRSAEncryption
f6:7a:82:4e:36:e4:ba:da:56:1c:bb:5a:f3:3a:14:26:45:02:
6b:e3:86:63:9f:45:bb:a1:9f:02:35:9a:ae:79:26:77:f1:e5:
2d:25:fe:97:d9:70:05:c3:78:17:f7:95:d4:e5:df:2b:2a:e9:
e5:dd:92:7f:b9:7e:1d:f2:3e:44:30:a4:1a:1e:f7:1c:3f:db:
05:9e:f2:6d:0b:7b:c5:6e:03:61:ec:71:3a:d9:f7:fc:53:d4:
df:df:f2:05:3c:30:44:1f:24:59:4c:53:65:33:0c:cd:e5:bc:
62:64:96:9c:e9:a6:7c:90:b7:62:c8:d9:02:bd:0b:46:bd:c2:
7a:36:4c:1c:75:df:dd:95:09:32:90:10:be:48:34:9b:5e:63:
06:be:46:4a:a8:a8:a7:cd:0f:26:c9:5c:cb:7a:d3:8b:2c:01:
52:06:9c:ea:18:f0:f4:d3:5c:a1:c5:72:10:69:34:86:ac:c0:
f6:26:06:3c:45:4d:b1:b0:68:b7:ea:c1:52:6e:68:c0:3d:4f:
bb:92:bc:15:6d:b1:b4:ce:b5:71:32:5c:68:f2:00:40:f4:f7:
fd:52:3e:e0:a1:8e:e7:9d:ce:49:ed:bb:e4:e8:0e:b2:da:de:
00:b9:46:2c:b5:68:71:3b:c3:ed:35:f6:33:88:55:26:98:c1:
bb:72:b0:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 16:57:02 2025 by rpki-client