Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/0-QcpYGxv0ZbmmXhkBm891fGeVo.roa
File: 0-QcpYGxv0ZbmmXhkBm891fGeVo.roa (raw, json)
Hash identifier: 9v1oPzEinlw9zij2UZ88XMaDJXUtxkC+S8PR2i79QTM=
Subject key identifier: D3:E4:1C:A5:81:B1:BF:46:5B:9A:65:E1:90:19:BC:F7:57:C6:79:5A
Certificate issuer: /CN=764f8daadf1d775d59d1502b573901b875513b56
Certificate serial: 0187B929DDFD01B12149E973B07CB04FAE12
Authority key identifier: 76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/0-QcpYGxv0ZbmmXhkBm891fGeVo.roa
Signing time: Tue 25 Apr 2023 16:05:41 +0000
ROA not before: Tue 25 Apr 2023 16:05:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 89.23.80.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:b9:29:dd:fd:01:b1:21:49:e9:73:b0:7c:b0:4f:ae:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=764f8daadf1d775d59d1502b573901b875513b56
Validity
Not Before: Apr 25 16:05:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d3e41ca581b1bf465b9a65e19019bcf757c6795a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:41:77:f7:8a:b8:e2:ed:3d:ac:88:7f:b3:b6:
b4:20:63:d8:0b:97:e6:ab:a9:fa:38:89:08:31:8b:
98:fc:16:bf:1c:95:28:a4:53:ac:4b:b8:f0:fa:8f:
89:e6:0d:63:56:d2:fc:46:b0:17:eb:3d:e6:4c:c0:
6b:9e:68:70:f5:b9:67:9f:9a:c4:fa:41:ff:98:6a:
aa:2a:e5:07:e4:64:d3:df:53:6a:f8:cb:aa:85:7b:
82:ed:76:75:88:91:e7:ca:bc:9f:40:1d:73:03:d3:
d3:f4:3c:06:03:7a:f3:07:17:3c:7d:6b:d2:78:75:
03:e5:0c:59:71:c4:e6:05:18:59:fc:a3:ee:87:9b:
e3:e0:1a:9f:ae:60:31:1d:6a:74:55:6c:75:5c:cc:
8f:28:67:46:cc:af:8d:03:09:ce:d5:bf:02:57:16:
c3:63:51:d8:9a:6e:02:90:2a:bf:3e:c2:24:60:ff:
c8:15:6a:d6:5a:7e:5d:87:8e:8b:ec:1f:06:4d:db:
c7:f8:c6:d1:f9:39:48:1f:5e:79:98:53:fa:30:1f:
4f:0b:1f:a9:5d:39:25:53:42:28:ea:a9:b9:1f:19:
a9:ae:e8:35:18:7f:3c:cc:90:c2:33:9c:15:c3:91:
c4:06:3d:ee:df:c8:a4:23:09:9a:fa:1f:08:f4:55:
34:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:E4:1C:A5:81:B1:BF:46:5B:9A:65:E1:90:19:BC:F7:57:C6:79:5A
X509v3 Authority Key Identifier:
keyid:76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/0-QcpYGxv0ZbmmXhkBm891fGeVo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.80.0/24
Signature Algorithm: sha256WithRSAEncryption
26:74:55:32:52:12:c2:2f:55:18:f4:70:0e:94:f9:51:31:c9:
b8:4f:ab:d4:2e:7c:ad:6c:0f:84:46:ba:05:e9:c3:d1:ee:f9:
5d:cc:cc:30:31:c1:41:74:39:0c:2c:bf:0d:da:cc:d0:ed:7f:
b1:37:3d:76:1e:d2:a5:a1:5a:f2:5e:e3:37:1f:77:07:e0:7c:
86:5c:37:4f:e2:10:92:c9:7c:dd:31:82:d4:4b:8b:b0:5d:e1:
97:74:79:b3:59:9e:26:90:19:e8:c1:1c:5c:d9:3d:4b:1f:00:
a5:e8:23:fe:87:90:59:b9:06:b3:0f:13:87:67:c4:6b:ee:65:
f2:e7:00:46:f1:3e:05:1b:8e:ce:7f:fb:ed:4f:51:d1:e4:1f:
d7:3c:37:89:92:73:69:e1:31:02:5d:3d:86:9d:49:38:88:01:
72:ae:e3:9c:8c:07:21:93:e8:55:43:d9:b2:a0:8c:fd:37:3d:
47:01:04:27:f0:c9:47:a3:37:85:30:24:61:93:4c:74:95:40:
da:1b:94:9c:a0:a0:f1:3c:8a:86:9e:db:07:7a:a4:8f:9c:97:
45:97:30:93:bd:36:e5:07:4e:4f:76:7c:d6:5a:48:83:70:11:
81:5e:0f:ce:43:2f:72:47:d1:3f:e2:4d:f1:49:13:36:2c:06:
78:b5:d0:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 05:47:55 2025 by rpki-client