Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/d3dba0-d715-495f-9178-393a4080c747/1/SMdmZCBafosJrnJKr5sPtmuLOdY.roa
File: SMdmZCBafosJrnJKr5sPtmuLOdY.roa (raw, json)
Hash identifier: FJx8qHxJHCHf4EV2WOuwMlpGTDSTRxUV5FP5ZMkBIVo=
Subject key identifier: 48:C7:66:64:20:5A:7E:8B:09:AE:72:4A:AF:9B:0F:B6:6B:8B:39:D6
Certificate issuer: /CN=e7fec2833d3c8e232903cdd3afc03ecdbe83b085
Certificate serial: 01942444AEE2E89D1200C37181B15EF6401B
Authority key identifier: E7:FE:C2:83:3D:3C:8E:23:29:03:CD:D3:AF:C0:3E:CD:BE:83:B0:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_7Cgz08jiMpA83Tr8A-zb6DsIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/d3dba0-d715-495f-9178-393a4080c747/1/SMdmZCBafosJrnJKr5sPtmuLOdY.roa
Signing time: Wed 01 Jan 2025 23:47:48 +0000
ROA not before: Wed 01 Jan 2025 23:47:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56403
IP address blocks: 46.235.16.0/22 maxlen: 22
46.235.20.0/23 maxlen: 23
46.235.22.0/24 maxlen: 24
46.235.23.0/24 maxlen: 24
185.194.128.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:ae:e2:e8:9d:12:00:c3:71:81:b1:5e:f6:40:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7fec2833d3c8e232903cdd3afc03ecdbe83b085
Validity
Not Before: Jan 1 23:47:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=48c76664205a7e8b09ae724aaf9b0fb66b8b39d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:59:a5:52:22:e4:8d:30:f0:76:c6:98:a3:f9:
96:b3:0c:9d:89:f3:07:a2:b0:af:a1:2e:6d:ae:7c:
8d:f4:cc:10:f1:e4:b2:99:c8:8e:1e:c7:6b:32:47:
3a:1d:c1:d1:a5:85:1c:71:21:5e:98:32:2f:d9:d7:
84:96:1c:24:85:1e:e6:b1:59:19:7c:40:cc:8c:93:
65:dc:05:48:a6:9c:53:8e:f3:03:5f:58:be:e1:f4:
f5:eb:3e:b3:6b:87:97:d5:02:91:0a:9a:c0:36:08:
f4:b3:cd:e0:f7:ce:f9:0e:1e:6a:31:1c:6e:4b:32:
8e:fb:36:c9:1a:04:b7:d6:81:17:24:7b:26:42:6f:
62:07:7a:35:2d:5d:a9:a3:89:0a:19:0b:79:5a:11:
e4:17:42:1e:a9:fb:11:fd:16:f0:27:01:c0:8b:98:
c8:7c:c3:0c:e3:b0:17:b6:73:b4:c8:e0:86:46:79:
4d:d2:6d:dc:ec:51:19:4f:1a:a2:1a:e0:35:a7:1d:
4f:a6:b2:32:ee:df:19:e9:53:e7:09:e0:c0:d8:6a:
2f:1e:0b:42:d2:04:45:c9:88:30:3a:5f:94:d0:80:
6d:50:44:25:05:50:74:4a:86:ca:cd:1a:fe:94:5b:
8b:95:22:84:ac:20:92:b9:6f:c4:a3:17:75:35:c3:
fd:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:C7:66:64:20:5A:7E:8B:09:AE:72:4A:AF:9B:0F:B6:6B:8B:39:D6
X509v3 Authority Key Identifier:
keyid:E7:FE:C2:83:3D:3C:8E:23:29:03:CD:D3:AF:C0:3E:CD:BE:83:B0:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_7Cgz08jiMpA83Tr8A-zb6DsIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/d3dba0-d715-495f-9178-393a4080c747/1/SMdmZCBafosJrnJKr5sPtmuLOdY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/d3dba0-d715-495f-9178-393a4080c747/1/5_7Cgz08jiMpA83Tr8A-zb6DsIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.235.16.0/21
185.194.128.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:09:a9:21:93:93:1a:6c:b5:1b:ea:5a:85:17:9a:83:84:ee:
47:8e:14:a1:9f:0a:03:b8:ba:b1:ca:26:29:31:9e:66:43:33:
fb:73:d8:37:37:61:fa:f0:7c:56:71:ca:05:a8:0f:9e:3b:94:
a2:d1:cb:26:18:72:d7:0a:ac:35:50:75:0c:32:b4:a7:eb:51:
28:7f:b5:d9:67:f9:d3:fb:3c:e5:39:35:84:57:ab:10:2b:de:
cb:46:55:ae:bb:97:d8:19:ee:45:6e:37:1d:0c:a0:6b:cd:e8:
5d:cd:52:db:be:f0:20:ef:08:92:90:0c:23:ae:d5:ef:4d:38:
5b:17:22:75:b8:d3:1d:c6:11:49:67:c0:aa:0a:29:c9:18:7e:
8e:3f:9a:8e:96:46:d9:a9:0e:42:e9:45:c0:51:4e:e9:de:fc:
a8:78:a8:4b:b2:56:3a:f8:44:09:dc:c0:c2:25:c9:60:e0:a9:
75:95:6b:94:2c:4b:23:3a:c5:5f:ee:39:40:61:ef:60:6e:17:
bb:c6:0c:f9:52:5a:5e:9d:96:29:e1:18:aa:41:05:04:cc:7d:
c6:f8:8e:82:0d:62:40:17:b2:98:d2:9a:f6:3d:71:20:a9:66:
a5:8a:55:f5:cd:14:d0:d5:d7:4a:a5:68:55:7d:79:bc:62:36:
86:b1:41:5b
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQkRK7i6J0SAMNxgbFe9kAbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3ZmVjMjgzM2QzYzhlMjMyOTAzY2RkM2FmYzAzZWNkYmU4
M2IwODUwHhcNMjUwMTAxMjM0NzQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0OGM3NjY2NDIwNWE3ZThiMDlhZTcyNGFhZjliMGZiNjZiOGIzOWQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw1mlUiLkjTDwdsaYo/mWswydifMH
orCvoS5trnyN9MwQ8eSymciOHsdrMkc6HcHRpYUccSFemDIv2deElhwkhR7msVkZ
fEDMjJNl3AVIppxTjvMDX1i+4fT16z6za4eX1QKRCprANgj0s83g9875Dh5qMRxu
SzKO+zbJGgS31oEXJHsmQm9iB3o1LV2po4kKGQt5WhHkF0IeqfsR/RbwJwHAi5jI
fMMM47AXtnO0yOCGRnlN0m3c7FEZTxqiGuA1px1PprIy7t8Z6VPnCeDA2GovHgtC
0gRFyYgwOl+U0IBtUEQlBVB0SobKzRr+lFuLlSKErCCSuW/Eoxd1NcP9kwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFEjHZmQgWn6LCa5ySq+bD7ZriznWMB8GA1UdIwQY
MBaAFOf+woM9PI4jKQPN06/APs2+g7CFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNV83Q2d6MDhqaU1wQTgzVHI4QS16YjZEc0lVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9kM2RiYTAtZDcxNS00OTVmLTkxNzgt
MzkzYTQwODBjNzQ3LzEvU01kbVpDQmFmb3NKcm5KS3I1c1B0bXVMT2RZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC9kM2RiYTAtZDcxNS00OTVmLTkxNzgtMzkzYTQwODBjNzQ3
LzEvNV83Q2d6MDhqaU1wQTgzVHI4QS16YjZEc0lVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDLusQAwQA
ucKAMA0GCSqGSIb3DQEBCwUAA4IBAQB7Cakhk5MabLUb6lqFF5qDhO5HjhShnwoD
uLqxyiYpMZ5mQzP7c9g3N2H68HxWccoFqA+eO5Si0csmGHLXCqw1UHUMMrSn61Eo
f7XZZ/nT+zzlOTWEV6sQK97LRlWuu5fYGe5FbjcdDKBrzehdzVLbvvAg7wiSkAwj
rtXvTThbFyJ1uNMdxhFJZ8CqCinJGH6OP5qOlkbZqQ5C6UXAUU7p3vyoeKhLslY6
+EQJ3MDCJclg4Kl1lWuULEsjOsVf7jlAYe9gbhe7xgz5UlpenZYp4RiqQQUEzH3G
+I6CDWJAF7KY0pr2PXEgqWalilX1zRTQ1ddKpWhVfXm8YjaGsUFb
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:40:58 2025 by rpki-client