Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/98vaNEm95pt-uwkA18ziAJaWi38.roa
File: 98vaNEm95pt-uwkA18ziAJaWi38.roa (raw, json)
Hash identifier: iAHScneGNquN5STpcXMFp/ADnva4h2JPLkaQ+DHaQxg=
Subject key identifier: F7:CB:DA:34:49:BD:E6:9B:7E:BB:09:00:D7:CC:E2:00:96:96:8B:7F
Certificate issuer: /CN=b39ecd24f321988deb7c19dca052a4e3c49b60ea
Certificate serial: 019421B24DBE649C943EB61C7A33EAD64766
Authority key identifier: B3:9E:CD:24:F3:21:98:8D:EB:7C:19:DC:A0:52:A4:E3:C4:9B:60:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s57NJPMhmI3rfBncoFKk48SbYOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/98vaNEm95pt-uwkA18ziAJaWi38.roa
Signing time: Wed 01 Jan 2025 11:48:40 +0000
ROA not before: Wed 01 Jan 2025 11:48:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 135392
IP address blocks: 178.248.79.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:4d:be:64:9c:94:3e:b6:1c:7a:33:ea:d6:47:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b39ecd24f321988deb7c19dca052a4e3c49b60ea
Validity
Not Before: Jan 1 11:48:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f7cbda3449bde69b7ebb0900d7cce20096968b7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:4a:27:4d:28:fe:85:9e:43:98:cf:81:00:6a:
5e:f3:54:4c:ff:90:79:d1:a9:0b:7c:8d:61:08:ae:
77:41:dd:7d:e1:c2:52:7f:3c:fc:09:b1:01:27:7d:
3a:b4:e3:ce:cd:39:bf:86:52:8e:d9:17:b1:4f:36:
3a:cc:f9:4e:63:cd:b1:bf:8a:db:74:e5:c7:cc:0c:
17:ac:48:4a:17:2e:2c:b7:1f:ed:a3:cb:b9:c1:07:
e9:5e:15:96:1f:cd:10:f4:00:8a:ce:5d:53:0c:23:
a3:bf:61:fb:e6:cd:11:98:aa:d2:c3:f7:67:e1:12:
4d:cb:31:32:dd:d1:43:c6:d9:89:9d:fc:24:ce:19:
9c:11:18:1a:95:55:9f:b1:85:55:93:40:e7:9b:f4:
b0:26:75:e4:d1:42:f7:b1:d0:77:bb:51:c5:39:9f:
3a:59:58:5b:7a:e2:95:eb:37:f9:b5:95:4b:e6:87:
fe:f0:6b:e3:34:20:d5:6b:11:e9:72:ff:4c:11:9e:
8f:53:cf:a5:10:34:fb:d7:3d:82:30:84:ca:02:88:
85:bd:ea:0b:04:74:6e:e4:c5:53:18:14:c2:1d:a9:
b9:66:96:d8:61:96:d7:99:72:14:06:51:74:67:32:
7c:82:09:57:79:66:f3:60:20:a0:b6:29:d0:ed:45:
d3:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:CB:DA:34:49:BD:E6:9B:7E:BB:09:00:D7:CC:E2:00:96:96:8B:7F
X509v3 Authority Key Identifier:
keyid:B3:9E:CD:24:F3:21:98:8D:EB:7C:19:DC:A0:52:A4:E3:C4:9B:60:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s57NJPMhmI3rfBncoFKk48SbYOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/98vaNEm95pt-uwkA18ziAJaWi38.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/s57NJPMhmI3rfBncoFKk48SbYOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.248.79.0/24
Signature Algorithm: sha256WithRSAEncryption
06:ab:4e:83:bf:0f:0c:d6:81:73:17:da:25:82:6a:d7:cb:22:
d4:dc:69:9d:83:b2:b9:a3:ef:4b:8e:3e:13:e4:57:79:61:87:
ee:83:67:66:ee:b4:48:e0:03:ef:58:aa:4d:0a:a5:44:f4:9f:
ce:14:5b:75:80:a9:82:74:2e:d4:bc:88:d5:d8:9e:69:a9:22:
dd:2a:0c:e2:10:28:68:06:8e:55:f6:63:6a:8a:69:87:59:f0:
84:a4:f9:0b:64:67:d7:85:74:ce:db:ce:bd:05:55:39:76:be:
9d:e5:e6:b7:00:4c:7d:f4:f1:df:9e:04:59:b2:95:6b:1f:ee:
3b:a4:e4:a7:96:05:1c:c4:6e:45:9e:51:07:96:fb:49:c2:fd:
e7:62:89:aa:e3:90:bc:a6:23:6d:d6:a0:12:61:f0:19:98:36:
7f:c8:54:4d:e0:38:87:80:4a:8f:eb:82:7f:a8:6a:87:a6:4f:
80:2c:07:c9:a9:79:30:a7:df:93:08:63:c5:96:53:f8:60:3f:
af:7a:52:b3:eb:2c:00:db:1c:04:a7:0f:da:88:2c:f6:c4:99:
39:cb:5b:a7:69:1e:60:d3:6b:15:8f:13:dc:2e:31:3d:c7:6b:
81:4e:a5:67:5d:4f:9d:20:aa:e6:6b:5b:97:b4:6d:fa:86:90:
95:2c:85:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:49:49 2025 by rpki-client