Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/7d20a2-b881-461c-bbf5-2b6809339702/1/ejjlASXkUcRdnr6-VdCF2Mgcm40.roa
File: ejjlASXkUcRdnr6-VdCF2Mgcm40.roa (raw, json)
Hash identifier: vzr2w6+iif68HBa0Udg4Ex8g0igxmMWxnsZRKLXilEk=
Subject key identifier: 7A:38:E5:01:25:E4:51:C4:5D:9E:BE:BE:55:D0:85:D8:C8:1C:9B:8D
Certificate issuer: /CN=4bd1f50df263fe509fc5de9c5a473a28e3812639
Certificate serial: 01941F8C11EA1CF9712BC2CF326804C6C3B3
Authority key identifier: 4B:D1:F5:0D:F2:63:FE:50:9F:C5:DE:9C:5A:47:3A:28:E3:81:26:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S9H1DfJj_lCfxd6cWkc6KOOBJjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/7d20a2-b881-461c-bbf5-2b6809339702/1/ejjlASXkUcRdnr6-VdCF2Mgcm40.roa
Signing time: Wed 01 Jan 2025 01:47:40 +0000
ROA not before: Wed 01 Jan 2025 01:47:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212597
IP address blocks: 98.158.238.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:11:ea:1c:f9:71:2b:c2:cf:32:68:04:c6:c3:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bd1f50df263fe509fc5de9c5a473a28e3812639
Validity
Not Before: Jan 1 01:47:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7a38e50125e451c45d9ebebe55d085d8c81c9b8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:44:96:a3:da:af:11:af:95:12:f3:ba:89:1c:
91:f4:39:6a:f5:92:d1:e8:8e:0d:48:15:92:5a:19:
fe:b3:78:a1:7b:fc:5e:1f:20:60:b0:ce:5b:ed:57:
d3:a8:76:6b:71:04:1b:5c:ef:56:e1:2d:b6:55:9f:
b2:a9:d9:9f:ad:01:31:80:86:b5:26:72:26:45:1d:
72:b7:4d:dc:6f:9c:de:e9:4a:05:3f:63:69:cd:25:
9f:67:2f:ce:10:1f:ff:4b:85:5c:e9:d7:61:5b:dc:
6e:94:9c:5f:1d:74:3e:de:87:42:c5:49:ca:3b:c7:
a1:6b:fb:d7:56:f3:85:27:66:06:19:f8:b7:67:f9:
d2:fd:48:21:39:8d:c6:91:7c:35:82:02:bc:aa:0a:
0a:44:be:8d:3f:49:75:cb:b4:c6:50:18:c9:88:11:
1c:c6:be:43:bb:af:6c:e3:4c:c6:de:9a:8e:6d:85:
0e:40:31:28:f3:eb:d1:b5:16:96:e6:6c:56:c1:b0:
8f:b6:75:9e:37:e7:7c:00:de:44:8e:17:4b:1b:b8:
85:b1:fc:87:ee:6e:d6:16:f4:b3:3b:ce:f0:0f:b6:
ba:ab:7d:48:67:d0:58:b9:13:38:ca:a7:aa:bf:4c:
7f:6f:15:30:9c:97:32:bd:24:7e:51:b6:fc:32:27:
5e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:38:E5:01:25:E4:51:C4:5D:9E:BE:BE:55:D0:85:D8:C8:1C:9B:8D
X509v3 Authority Key Identifier:
keyid:4B:D1:F5:0D:F2:63:FE:50:9F:C5:DE:9C:5A:47:3A:28:E3:81:26:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S9H1DfJj_lCfxd6cWkc6KOOBJjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/7d20a2-b881-461c-bbf5-2b6809339702/1/ejjlASXkUcRdnr6-VdCF2Mgcm40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/7d20a2-b881-461c-bbf5-2b6809339702/1/S9H1DfJj_lCfxd6cWkc6KOOBJjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
98.158.238.0/24
Signature Algorithm: sha256WithRSAEncryption
88:34:5f:29:a4:85:37:0f:0e:06:5a:bc:17:7d:d3:1d:b2:78:
e0:a1:e0:82:c7:ec:2c:c2:f4:9f:e8:d3:ed:73:9d:8b:c5:5b:
84:3b:d2:94:fc:ed:f8:e7:ef:7e:2e:2b:1a:ae:43:f5:d4:b4:
09:84:b5:22:4f:46:8e:c8:dd:71:6d:f3:c2:51:82:7e:26:ea:
da:f2:ac:ae:28:e5:d2:7c:60:b3:f8:41:61:a2:8f:5c:9f:a0:
05:b9:15:0b:8d:18:17:7a:cc:5a:be:d2:5f:05:03:31:45:bc:
91:96:1a:fa:71:9c:6d:48:f8:f1:70:3d:62:7c:4d:7c:c1:d8:
76:9b:0c:de:93:7f:1f:d6:5b:1d:6e:4b:e1:19:29:30:00:a8:
cb:da:d6:47:66:c5:f5:f0:13:79:fd:0e:36:50:3d:33:cb:83:
72:44:2b:42:cd:4f:cd:08:7f:21:e9:55:17:16:56:b8:56:e3:
9f:85:c5:d1:46:56:ec:3e:af:d8:d1:96:98:5f:1c:b0:a1:ef:
29:16:fb:9f:da:0e:70:2a:e1:71:a1:97:bf:6b:2b:63:79:db:
be:9a:1e:e7:1a:f4:2f:99:59:ba:04:c5:a8:2a:b5:d9:3f:2a:
6c:0b:85:5f:4d:a8:44:1b:c4:cb:35:46:86:f8:ff:e2:d0:b4:
45:22:6e:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:38:31 2025 by rpki-client