Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/c493ee-f66e-4208-a31d-726f83d23892/1/cmmjWfTbdXm_bIqEm3CK7WZFF7I.roa
File: cmmjWfTbdXm_bIqEm3CK7WZFF7I.roa (raw, json)
Hash identifier: byumgI5wcwBFgn7pCdwnQhSp1RnK/Pa96CjEn1SbRyM=
Subject key identifier: 72:69:A3:59:F4:DB:75:79:BF:6C:8A:84:9B:70:8A:ED:66:45:17:B2
Certificate issuer: /CN=4d88eb730ab1a501ea36ea3482d764544e141111
Certificate serial: 019427B3C19ECBD53119A7DD538AE11C4945
Authority key identifier: 4D:88:EB:73:0A:B1:A5:01:EA:36:EA:34:82:D7:64:54:4E:14:11:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TYjrcwqxpQHqNuo0gtdkVE4UERE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/c493ee-f66e-4208-a31d-726f83d23892/1/cmmjWfTbdXm_bIqEm3CK7WZFF7I.roa
Signing time: Thu 02 Jan 2025 15:47:59 +0000
ROA not before: Thu 02 Jan 2025 15:47:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62563
IP address blocks: 185.225.236.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b3:c1:9e:cb:d5:31:19:a7:dd:53:8a:e1:1c:49:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d88eb730ab1a501ea36ea3482d764544e141111
Validity
Not Before: Jan 2 15:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7269a359f4db7579bf6c8a849b708aed664517b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:d5:61:90:25:e2:99:1f:f6:69:65:66:72:d2:
28:3d:da:c8:46:97:fc:03:0f:e1:ec:11:a6:7e:39:
15:35:dc:f3:e4:dc:8f:8b:91:40:a8:d1:5a:5f:cd:
ee:b9:52:10:02:50:04:4a:c1:38:7e:9b:4c:f5:69:
a0:31:41:12:ad:3e:19:ee:97:76:8c:af:37:57:ae:
a7:ea:25:f1:a4:bf:cc:aa:28:bb:eb:23:1d:cf:62:
be:c5:33:65:b6:47:07:83:d4:98:bc:b5:07:05:81:
c8:09:83:78:2c:4f:ad:d0:6b:8e:7b:8b:0d:7e:f9:
c9:1a:92:e4:e4:78:7f:87:99:8e:f6:b3:0b:b0:ac:
b5:b9:3a:bd:2e:d4:2b:b8:50:c1:ee:0e:2e:c9:ab:
cc:02:75:c6:f2:60:b2:9e:29:c0:fd:6a:96:ce:54:
b2:1f:9a:d1:d9:99:86:78:12:d8:64:17:ca:28:cb:
ad:44:39:e7:09:a4:75:4e:31:83:0b:88:df:ac:36:
bb:d2:18:41:ae:c1:c4:69:c9:be:e1:8b:49:d5:05:
a4:4a:16:ec:f7:a8:0f:73:51:64:e1:e2:e5:de:2b:
30:0a:60:3b:c5:28:45:f5:c2:8c:b1:e7:56:2a:cb:
6e:73:a5:e6:4f:8b:4b:21:da:95:1a:85:a3:f0:59:
8c:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:69:A3:59:F4:DB:75:79:BF:6C:8A:84:9B:70:8A:ED:66:45:17:B2
X509v3 Authority Key Identifier:
keyid:4D:88:EB:73:0A:B1:A5:01:EA:36:EA:34:82:D7:64:54:4E:14:11:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TYjrcwqxpQHqNuo0gtdkVE4UERE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c493ee-f66e-4208-a31d-726f83d23892/1/cmmjWfTbdXm_bIqEm3CK7WZFF7I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c493ee-f66e-4208-a31d-726f83d23892/1/TYjrcwqxpQHqNuo0gtdkVE4UERE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.225.236.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:2e:7b:fd:54:8f:72:bf:63:11:b3:e6:52:df:fa:e9:b5:c1:
e3:f9:b8:97:50:6c:f2:57:ac:a8:3d:b3:f4:c0:76:65:59:4a:
d0:69:87:e0:b2:bb:83:a3:d1:7f:11:9a:17:8e:a6:17:bb:66:
b8:5b:a2:21:0c:7b:49:80:68:e9:4a:2d:34:a0:77:33:cb:c2:
12:14:70:ab:c1:24:f5:b1:f0:fc:97:14:01:0e:54:96:be:3d:
42:f2:b8:89:a6:ee:4f:77:48:a8:ff:d9:da:4e:ec:35:ed:9b:
3f:b0:e2:40:1f:33:0e:0b:0d:48:83:47:ea:75:ec:9a:f3:65:
94:63:fb:1a:e9:1f:eb:f8:b3:73:8b:62:3c:12:2b:f9:10:42:
f8:36:ad:f7:de:02:63:20:cc:61:c8:c3:1d:57:37:23:c0:ab:
3e:8d:4b:77:96:84:45:bb:8b:7f:71:73:ae:77:91:92:96:4a:
e9:0d:74:70:ca:02:be:3c:27:bf:81:32:f6:12:8e:c6:17:ff:
b6:05:4d:cb:cd:a8:3e:1d:41:de:39:c2:07:95:b2:40:a6:0d:
2d:86:ed:1b:d3:0a:a8:58:a6:0e:f7:82:fc:6c:b8:e4:34:0b:
32:89:db:2c:7e:83:ce:08:ff:72:32:e6:fd:41:c2:b1:14:2c:
38:29:4d:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:51:02 2025 by rpki-client