Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/4f7f1a-b37e-403c-80c1-909f30894a59/1/b-CBMMyX-xRaWd4teTsXcgawTvU.roa
File: b-CBMMyX-xRaWd4teTsXcgawTvU.roa (raw, json)
Hash identifier: B6zv6em8HisqkXddFdsOWmebxT9akdJKOGx6kcyZWQk=
Subject key identifier: 6F:E0:81:30:CC:97:FB:14:5A:59:DE:2D:79:3B:17:72:06:B0:4E:F5
Certificate issuer: /CN=19ee43190a8d478e757bd25b2ceebbae3e7379e8
Certificate serial: 0188C45859622A5169826C0363EA64951ADF
Authority key identifier: 19:EE:43:19:0A:8D:47:8E:75:7B:D2:5B:2C:EE:BB:AE:3E:73:79:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ge5DGQqNR451e9JbLO67rj5zeeg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/4f7f1a-b37e-403c-80c1-909f30894a59/1/b-CBMMyX-xRaWd4teTsXcgawTvU.roa
Signing time: Fri 16 Jun 2023 13:15:04 +0000
ROA not before: Fri 16 Jun 2023 13:15:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 185.248.132.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:c4:58:59:62:2a:51:69:82:6c:03:63:ea:64:95:1a:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19ee43190a8d478e757bd25b2ceebbae3e7379e8
Validity
Not Before: Jun 16 13:15:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6fe08130cc97fb145a59de2d793b177206b04ef5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:56:36:05:9f:4f:e3:15:d8:81:4a:34:5b:1e:
fd:fb:70:4a:4b:9b:9f:40:c7:86:ed:30:8f:e3:ca:
6c:62:75:5b:50:55:1f:b4:9a:88:e1:7f:9c:39:82:
d2:63:ae:06:08:5a:25:25:17:ea:4f:a5:00:7b:a0:
da:21:f9:5d:c8:43:35:31:4d:de:25:a9:23:9f:63:
d5:ce:64:09:c7:9a:c3:a2:b4:f2:0e:d3:8a:31:55:
38:0a:83:99:ec:74:e0:3b:81:ff:0b:4e:f7:7b:7a:
be:03:a6:50:28:09:99:4a:ab:40:1a:4c:88:a5:02:
8a:85:06:1b:c7:aa:f7:f0:2c:85:95:6a:7b:e7:96:
3e:06:38:f4:09:c3:2b:91:c4:6a:04:d3:95:7d:67:
ce:ee:ec:ec:b8:d2:a1:08:8b:15:cc:11:d5:da:48:
40:d8:4f:f5:b1:d9:5a:4b:d3:ad:af:a4:a2:fc:72:
ad:d4:3c:d4:09:68:9b:22:47:30:51:d1:92:9f:f1:
a1:5a:87:a8:2f:bf:72:ba:74:ad:ff:64:26:19:f2:
f3:71:e0:83:f6:08:a2:55:67:64:ba:69:f1:8d:03:
47:44:1b:a9:c6:5f:00:74:a0:c0:bc:a1:57:fa:b4:
2c:3a:c0:26:2d:74:04:1b:b2:fb:13:ab:40:49:2c:
13:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:E0:81:30:CC:97:FB:14:5A:59:DE:2D:79:3B:17:72:06:B0:4E:F5
X509v3 Authority Key Identifier:
keyid:19:EE:43:19:0A:8D:47:8E:75:7B:D2:5B:2C:EE:BB:AE:3E:73:79:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ge5DGQqNR451e9JbLO67rj5zeeg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/4f7f1a-b37e-403c-80c1-909f30894a59/1/b-CBMMyX-xRaWd4teTsXcgawTvU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/4f7f1a-b37e-403c-80c1-909f30894a59/1/Ge5DGQqNR451e9JbLO67rj5zeeg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.248.132.0/24
Signature Algorithm: sha256WithRSAEncryption
52:36:38:ad:b9:71:08:8c:9e:85:85:c5:25:ff:cf:f7:4d:d0:
ed:d8:0d:b9:59:08:ad:43:31:81:b9:a8:67:ef:8c:7c:47:c9:
86:ca:19:1b:9c:a4:06:cd:33:98:7d:e9:dc:c3:be:ef:f1:dd:
e4:a4:f0:31:ea:1c:9c:9f:79:dd:d3:f7:8a:c0:88:d6:1e:65:
32:0e:d2:2e:30:9c:9f:6d:d4:9c:fa:70:42:d8:3e:1c:ce:e0:
3f:92:3f:37:9f:16:e2:2a:1e:6a:30:67:85:e2:ad:f1:ba:b6:
f6:66:39:66:fd:bd:5c:1c:76:99:3c:aa:10:53:79:28:65:a1:
0b:38:d9:19:98:5b:ec:35:36:e2:8d:04:8f:86:88:d3:b2:97:
94:67:60:0c:f8:17:2e:d2:3d:03:cb:99:2a:93:c7:5a:f7:b3:
53:47:f5:99:84:5d:43:71:0e:49:55:2b:b0:11:6c:2b:eb:ad:
fc:57:42:53:91:e7:36:68:5e:9a:f2:d6:b8:2c:9a:8a:6a:81:
01:aa:c1:2c:91:4e:b6:f4:17:14:57:03:44:8c:bf:dd:f9:41:
e5:b0:b4:45:23:85:e4:5e:19:ea:65:7f:a2:ef:40:fa:51:13:
5c:1e:38:96:07:58:a5:3c:ae:15:68:0a:a3:a1:d2:a8:e7:87:
cb:cf:28:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 20:25:29 2025 by rpki-client