Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/9eed0f-3793-42fa-9536-513895468dd7/1/kmz4cGYp1FxV4vg6gfPtskXMNe4.roa
File: kmz4cGYp1FxV4vg6gfPtskXMNe4.roa (raw, json)
Hash identifier: V16AXXnNsqjAgUpO7D9zp/FfdduEcT6SDNJUpnQmCIw=
Subject key identifier: 92:6C:F8:70:66:29:D4:5C:55:E2:F8:3A:81:F3:ED:B2:45:CC:35:EE
Certificate issuer: /CN=a2451025c6339a611711effc2cf83e3d79f26ee8
Certificate serial: 0193AED34A30399CBE068D5C044A7739C8E7
Authority key identifier: A2:45:10:25:C6:33:9A:61:17:11:EF:FC:2C:F8:3E:3D:79:F2:6E:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/okUQJcYzmmEXEe_8LPg-PXnybug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/9eed0f-3793-42fa-9536-513895468dd7/1/kmz4cGYp1FxV4vg6gfPtskXMNe4.roa
Signing time: Tue 10 Dec 2024 04:28:22 +0000
ROA not before: Tue 10 Dec 2024 04:28:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48955
IP address blocks: 185.98.158.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:ae:d3:4a:30:39:9c:be:06:8d:5c:04:4a:77:39:c8:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2451025c6339a611711effc2cf83e3d79f26ee8
Validity
Not Before: Dec 10 04:28:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=926cf8706629d45c55e2f83a81f3edb245cc35ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a0:e8:a5:72:db:9b:00:2e:6a:19:a0:32:ca:
2c:4d:41:b6:eb:fc:e5:a5:0b:8a:39:5c:15:c5:68:
57:19:3f:db:7d:1f:89:f4:1d:2e:58:23:e0:34:45:
3d:2d:c0:e7:a8:ff:02:c0:59:bd:53:3d:65:a6:da:
35:19:c8:94:80:ae:97:59:ed:af:62:80:09:2f:a5:
67:03:a3:9b:aa:80:bf:b2:55:89:fe:0c:73:c7:8c:
2b:4e:14:8c:e3:d2:21:94:94:2a:7f:80:29:09:5b:
4b:e8:65:8f:a7:8b:91:e0:72:07:f2:c7:bb:da:d6:
5c:06:e1:90:94:e8:60:6f:d3:b9:cc:71:04:e0:31:
41:e5:d2:fd:9a:eb:a5:dd:90:ad:b4:a7:e3:21:03:
29:c0:87:8e:0f:28:5f:d1:e7:96:85:61:3d:8e:5a:
25:04:69:6b:50:87:4c:d0:0e:d5:c1:0e:29:50:05:
b0:1d:88:f1:04:7c:21:0f:45:cc:de:7b:8d:ea:e0:
23:2a:e3:15:b4:fc:01:ba:df:cf:62:14:07:87:4b:
b2:ea:69:8f:73:8a:2a:d7:81:a4:3c:49:22:d7:ef:
63:3f:b4:2e:38:a1:60:31:90:cc:23:97:bc:41:cc:
8d:5b:21:45:01:7d:13:e2:b0:3e:dd:2a:85:17:37:
e9:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:6C:F8:70:66:29:D4:5C:55:E2:F8:3A:81:F3:ED:B2:45:CC:35:EE
X509v3 Authority Key Identifier:
keyid:A2:45:10:25:C6:33:9A:61:17:11:EF:FC:2C:F8:3E:3D:79:F2:6E:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/okUQJcYzmmEXEe_8LPg-PXnybug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/9eed0f-3793-42fa-9536-513895468dd7/1/kmz4cGYp1FxV4vg6gfPtskXMNe4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/9eed0f-3793-42fa-9536-513895468dd7/1/okUQJcYzmmEXEe_8LPg-PXnybug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.98.158.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:82:6e:f6:46:89:66:83:70:5d:a4:79:d9:18:fe:89:ed:ce:
64:01:a9:6b:9e:a2:7d:a2:7d:4d:8e:28:2c:ed:9c:03:8a:c1:
3e:18:9b:89:1f:15:fa:bd:9b:97:73:e5:75:2d:90:48:cd:11:
c0:2a:21:3b:dc:dc:5b:5a:4c:a8:20:55:21:07:8a:55:af:8f:
34:80:ec:e5:a4:09:25:45:56:74:d8:21:91:15:8f:a2:f2:b9:
8e:fb:12:e7:f4:b2:56:42:2d:c9:e8:61:a3:3e:99:1c:0b:9a:
a9:9c:6d:37:fe:ed:39:3a:14:fe:67:32:51:b0:dd:5c:62:d8:
2c:58:b4:85:8f:3c:87:e5:22:fa:b0:4f:1c:0f:20:9e:48:86:
cb:69:b0:d6:ec:10:4d:03:88:26:c5:95:f0:12:d9:46:78:17:
9a:30:89:96:8f:a3:1d:a2:ac:7d:74:c4:14:22:73:c7:53:4e:
0e:29:f7:bb:94:31:ac:c0:12:ce:16:7e:0f:8b:d1:07:9d:3e:
da:d1:cb:09:db:0a:65:15:87:5d:16:6d:9f:5d:b9:cd:18:13:
9e:5f:18:7d:79:14:f2:34:e6:bd:12:81:fd:6b:4c:76:1e:a3:
c3:b4:1c:70:2c:ef:37:f5:1f:0d:a4:b2:31:dd:16:34:71:1f:
69:be:55:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 20:08:49 2025 by rpki-client