Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/4f7f1a-b37e-403c-80c1-909f30894a59/1/2jhCe_OUGm6a6sr_O1jPrc5fx-g.roa
File: 2jhCe_OUGm6a6sr_O1jPrc5fx-g.roa (raw, json)
Hash identifier: mikevRTzhqGoBrCJbfDLwXWwR0hBClg7t9YGNs5ohiw=
Subject key identifier: DA:38:42:7B:F3:94:1A:6E:9A:EA:CA:FF:3B:58:CF:AD:CE:5F:C7:E8
Certificate issuer: /CN=19ee43190a8d478e757bd25b2ceebbae3e7379e8
Certificate serial: 01875784521366814F4CFB2BB003456145BE
Authority key identifier: 19:EE:43:19:0A:8D:47:8E:75:7B:D2:5B:2C:EE:BB:AE:3E:73:79:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ge5DGQqNR451e9JbLO67rj5zeeg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/4f7f1a-b37e-403c-80c1-909f30894a59/1/2jhCe_OUGm6a6sr_O1jPrc5fx-g.roa
Signing time: Thu 06 Apr 2023 17:01:42 +0000
ROA not before: Thu 06 Apr 2023 17:01:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58057
IP address blocks: 185.248.132.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:57:84:52:13:66:81:4f:4c:fb:2b:b0:03:45:61:45:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19ee43190a8d478e757bd25b2ceebbae3e7379e8
Validity
Not Before: Apr 6 17:01:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=da38427bf3941a6e9aeacaff3b58cfadce5fc7e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:5a:62:8e:54:ae:60:65:c2:eb:b0:08:92:ac:
2c:02:b1:95:97:cb:3f:a0:27:b1:b2:c4:51:49:c4:
cc:08:81:b8:a2:5a:cf:45:19:bd:72:8c:62:94:33:
42:15:b5:25:08:0d:16:97:53:5c:86:2c:d9:88:df:
83:ae:f1:19:50:20:8e:f3:d9:90:48:5e:68:6f:9d:
49:97:57:62:c7:0b:dc:19:06:d7:86:13:dc:e4:1a:
45:b6:e5:91:00:1d:24:e5:44:55:c8:76:a0:4b:32:
30:af:7e:28:6a:e2:be:f4:6e:23:66:f7:73:9d:e1:
4e:78:ab:ba:0f:5f:d8:28:77:a9:7e:0e:4c:d7:c3:
9a:61:75:38:bc:60:5e:15:3f:da:b1:c7:94:96:42:
6c:85:05:91:10:63:82:e3:78:4d:c7:33:95:64:b5:
79:14:5c:e9:f2:55:eb:9a:88:f9:78:9a:94:d1:8f:
35:a7:f8:bf:27:00:49:c8:f5:6a:e1:f8:7f:e9:cf:
5c:16:6d:63:e0:01:1f:b5:22:91:68:a8:b5:08:26:
47:ce:80:c5:a5:af:71:4f:21:26:96:c9:3d:0b:f9:
65:32:87:55:d3:ff:69:1c:f5:5d:41:b9:4f:5c:c9:
64:dc:54:81:eb:69:da:5f:21:81:bd:94:69:5f:67:
68:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:38:42:7B:F3:94:1A:6E:9A:EA:CA:FF:3B:58:CF:AD:CE:5F:C7:E8
X509v3 Authority Key Identifier:
keyid:19:EE:43:19:0A:8D:47:8E:75:7B:D2:5B:2C:EE:BB:AE:3E:73:79:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ge5DGQqNR451e9JbLO67rj5zeeg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/4f7f1a-b37e-403c-80c1-909f30894a59/1/2jhCe_OUGm6a6sr_O1jPrc5fx-g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/4f7f1a-b37e-403c-80c1-909f30894a59/1/Ge5DGQqNR451e9JbLO67rj5zeeg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.248.132.0/24
Signature Algorithm: sha256WithRSAEncryption
84:60:c9:03:39:e2:f4:d6:cc:c6:0c:47:9e:12:b9:8f:45:11:
30:e3:88:a9:6a:ea:46:85:f0:ee:a8:f4:9c:5e:aa:bc:8e:77:
66:7f:10:fa:3e:66:c8:f9:31:07:2d:33:14:d1:54:a0:1d:c3:
72:17:db:30:9f:27:e6:1a:aa:e7:99:5b:13:87:24:57:b4:0c:
44:ad:e8:ee:45:6e:da:ca:fb:22:61:df:54:5a:96:e6:10:10:
95:6b:11:7b:22:a2:04:f8:ba:75:62:c9:ba:79:19:85:1f:de:
20:15:b1:db:2b:c0:76:2f:86:5c:05:11:48:4e:5a:42:46:89:
c8:e4:22:e2:9c:06:53:02:40:09:77:e9:7c:b9:f5:46:fe:4d:
6c:4f:55:bd:7f:0a:5b:82:43:d4:32:13:48:2b:05:1a:37:04:
58:89:2b:81:3b:9c:e8:36:c7:dd:81:21:d1:cb:3a:4b:7b:69:
01:f2:8f:86:94:6b:68:14:ee:4b:15:72:c0:a0:b6:f8:43:a8:
b5:b7:0f:b9:45:83:11:d5:91:36:a6:73:9d:46:97:37:55:72:
4c:ff:a9:ae:26:39:ac:10:e1:ea:b8:fd:8a:31:34:19:ca:3d:
e3:a4:c6:c8:d5:0e:62:76:b8:02:75:14:77:73:47:5f:77:e8:
2e:b1:98:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:58:14 2025 by rpki-client