Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/SMOV1v07nTPDCQaVyuxI45PCyeA.roa
File: SMOV1v07nTPDCQaVyuxI45PCyeA.roa (raw, json)
Hash identifier: BhJF2HdvcG+JZt0MGLsvFzfRPbbtgLTnKdQdEjGpA+Q=
Subject key identifier: 48:C3:95:D6:FD:3B:9D:33:C3:09:06:95:CA:EC:48:E3:93:C2:C9:E0
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0194A83E2175C27098E3BA9692E9F613F3A5
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/SMOV1v07nTPDCQaVyuxI45PCyeA.roa
Signing time: Mon 27 Jan 2025 14:50:31 +0000
ROA not before: Mon 27 Jan 2025 14:50:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 40676
IP address blocks: 31.58.68.0/22 maxlen: 24
31.58.76.0/22 maxlen: 24
31.58.84.0/22 maxlen: 24
31.58.92.0/22 maxlen: 24
31.58.100.0/22 maxlen: 24
31.59.29.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:a8:3e:21:75:c2:70:98:e3:ba:96:92:e9:f6:13:f3:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jan 27 14:50:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=48c395d6fd3b9d33c3090695caec48e393c2c9e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:86:e6:73:9b:0b:c9:b5:4c:c5:07:bb:ce:be:
4e:87:73:ed:2a:27:64:ed:ff:a6:d2:8c:8a:78:8b:
26:bd:1c:a6:a7:b5:a9:dc:9b:7d:5f:24:13:5c:fb:
ab:e7:21:82:97:a0:13:87:e3:4b:47:bc:a1:64:f6:
cb:37:75:9b:72:bc:98:a7:5f:86:08:ca:b7:3a:38:
54:49:d9:c9:cd:47:a4:83:a5:af:17:d9:c9:01:a3:
67:4c:4c:38:61:12:0a:d9:e7:ee:a8:9c:5c:68:54:
3b:a8:97:0f:1b:4b:4d:b6:1c:90:41:c7:06:f4:b4:
d3:bb:27:7d:09:8a:dc:ee:26:25:8d:72:26:14:c3:
dd:0c:24:47:04:b4:93:fd:cc:3d:b4:14:cf:be:53:
06:0c:cb:0e:8f:81:9f:01:0a:c5:d8:69:94:d7:c5:
6f:07:60:97:7d:8f:25:df:e8:c2:dc:cb:08:c0:af:
59:3d:75:06:85:01:79:c7:34:77:1e:72:e6:61:99:
f8:2e:d1:e7:e9:cc:1c:2c:f7:de:ab:2b:40:07:32:
3a:a8:79:da:f2:28:41:d2:b0:5f:84:23:f3:4f:f9:
8e:99:5c:fe:f4:9d:65:99:18:f8:e0:4c:5d:08:c7:
d5:41:7f:ae:93:58:c4:d8:76:7b:e1:4e:10:c4:9e:
f8:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:C3:95:D6:FD:3B:9D:33:C3:09:06:95:CA:EC:48:E3:93:C2:C9:E0
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/SMOV1v07nTPDCQaVyuxI45PCyeA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.68.0/22
31.58.76.0/22
31.58.84.0/22
31.58.92.0/22
31.58.100.0/22
31.59.29.0/24
Signature Algorithm: sha256WithRSAEncryption
02:0a:42:ad:84:2b:9d:75:b2:43:0f:6a:c2:1b:a6:54:5a:31:
f5:f4:7d:40:0a:be:c9:45:ce:de:15:ab:fc:86:89:9d:ee:87:
31:b4:77:4d:2b:03:b0:54:e3:29:1a:4a:4a:d0:6e:b8:b4:cb:
fe:95:da:29:84:80:36:1b:8a:a1:eb:75:47:90:89:8d:1d:1e:
5a:02:b3:e6:2a:56:a7:28:c6:20:f9:ea:ec:8d:2c:1c:eb:c8:
c4:fe:b5:8e:a0:a6:22:02:7a:14:4d:04:a5:10:03:45:24:02:
9c:dd:ce:59:23:1e:56:36:45:79:ed:87:24:4d:62:57:15:13:
0a:be:7a:fc:96:c4:66:bf:08:32:dc:b3:65:98:2a:9b:0f:94:
b7:b8:4d:1d:15:39:9e:9b:e9:85:6e:84:8e:9d:b8:04:77:d1:
12:c5:a5:0f:f1:3a:93:b2:f4:55:f4:0b:57:00:ca:c8:ca:b2:
80:48:81:a9:79:fb:79:15:69:8f:6d:84:fb:62:91:49:56:8b:
89:2f:8f:9e:64:0b:3f:6c:27:a0:95:d2:a1:0a:66:1d:08:9e:
f0:dc:43:91:c9:fb:42:8f:48:38:98:7f:40:b3:97:a1:e2:56:
22:d4:ce:b5:c8:f7:1b:a9:a7:32:b1:5d:05:7e:62:fd:3e:a6:
da:9f:dd:56
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAZSoPiF1wnCY47qWkun2E/OlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjUwMTI3MTQ1MDMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0OGMzOTVkNmZkM2I5ZDMzYzMwOTA2OTVjYWVjNDhlMzkzYzJjOWUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlYbmc5sLybVMxQe7zr5Oh3PtKidk
7f+m0oyKeIsmvRymp7Wp3Jt9XyQTXPur5yGCl6ATh+NLR7yhZPbLN3WbcryYp1+G
CMq3OjhUSdnJzUekg6WvF9nJAaNnTEw4YRIK2efuqJxcaFQ7qJcPG0tNthyQQccG
9LTTuyd9CYrc7iYljXImFMPdDCRHBLST/cw9tBTPvlMGDMsOj4GfAQrF2GmU18Vv
B2CXfY8l3+jC3MsIwK9ZPXUGhQF5xzR3HnLmYZn4LtHn6cwcLPfeqytABzI6qHna
8ihB0rBfhCPzT/mOmVz+9J1lmRj44ExdCMfVQX+uk1jE2HZ74U4QxJ74JwIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFEjDldb9O50zwwkGlcrsSOOTwsngMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvU01PVjF2MDduVFBEQ1FhVnl1eEk0NVBDeWVBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQCHzpEAwQC
HzpMAwQCHzpUAwQCHzpcAwQCHzpkAwQAHzsdMA0GCSqGSIb3DQEBCwUAA4IBAQAC
CkKthCuddbJDD2rCG6ZUWjH19H1ACr7JRc7eFav8homd7ocxtHdNKwOwVOMpGkpK
0G64tMv+ldophIA2G4qh63VHkImNHR5aArPmKlanKMYg+ersjSwc68jE/rWOoKYi
AnoUTQSlEANFJAKc3c5ZIx5WNkV57YckTWJXFRMKvnr8lsRmvwgy3LNlmCqbD5S3
uE0dFTmem+mFboSOnbgEd9ESxaUP8TqTsvRV9AtXAMrIyrKASIGpeft5FWmPbYT7
YpFJVouJL4+eZAs/bCegldKhCmYdCJ7w3EORyftCj0g4mH9As5eh4lYi1M61yPcb
qacysV0FfmL9Pqban91W
-----END CERTIFICATE-----
Generated at Fri Apr 25 19:51:03 2025 by rpki-client