Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/1-_xtnJrolRG_0BF4XKP0z7yFqZ4.roa
File: 1-_xtnJrolRG_0BF4XKP0z7yFqZ4.roa (raw, json)
Hash identifier: uc5qC2Uj7W73LYLv84r5aN4BZkogT2XzWfudCD6Ifko=
Subject key identifier: FB:FC:6D:9C:9A:E8:95:11:BF:D0:11:78:5C:A3:F4:CF:BC:85:A9:9E
Certificate issuer: /CN=764f8daadf1d775d59d1502b573901b875513b56
Certificate serial: 0182B7DA97FD7DD1A606F1EA22C771D4A770
Authority key identifier: 76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/1-_xtnJrolRG_0BF4XKP0z7yFqZ4.roa
Signing time: Fri 19 Aug 2022 20:45:32 +0000
ROA not before: Fri 19 Aug 2022 20:45:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 30823
IP address blocks: 89.23.77.0/24 maxlen: 24
89.23.84.0/24 maxlen: 24
89.23.80.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:b7:da:97:fd:7d:d1:a6:06:f1:ea:22:c7:71:d4:a7:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=764f8daadf1d775d59d1502b573901b875513b56
Validity
Not Before: Aug 19 20:45:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fbfc6d9c9ae89511bfd011785ca3f4cfbc85a99e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:86:a1:e8:1e:d0:4b:0c:24:6e:60:d2:a2:50:
59:98:e1:73:92:dd:a2:15:40:da:76:d9:41:fa:51:
ab:1d:15:12:43:76:1f:4b:f2:18:bd:39:e4:c0:0a:
f1:c4:d4:ab:22:17:59:d5:33:b0:1d:27:df:d1:b9:
5e:8c:9d:2a:6f:38:ac:b5:ef:ee:e5:3a:69:3a:99:
a7:b5:db:4a:f9:a8:11:bf:8a:88:a2:c6:1f:3a:d0:
39:d3:9d:f0:54:04:47:17:89:8d:a7:95:f6:a6:96:
8e:0c:67:22:4e:1a:10:be:a0:03:4f:10:ed:a5:d9:
f0:9c:84:d4:ea:18:98:c8:98:9f:5d:1f:c9:f2:95:
ed:24:7d:f7:f4:f7:39:94:b5:99:39:bb:70:79:2c:
d4:24:fe:f8:d7:19:40:6e:95:d2:0b:99:21:7a:41:
81:11:e7:7a:61:ac:6d:dc:b9:56:d0:1b:f2:8a:5b:
b1:f7:62:38:9c:cb:7f:72:9f:9a:b9:e9:2e:98:87:
2e:0f:71:38:b1:d0:e6:4b:29:7f:4b:1b:e5:47:68:
08:37:2c:65:fa:48:bf:ca:92:fd:94:e9:f5:26:ab:
dc:96:c5:d4:cb:08:2e:15:55:ed:25:a5:3b:c8:d1:
b8:be:f6:7a:b4:33:ee:8b:9a:2a:7a:a8:03:5e:16:
99:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:FC:6D:9C:9A:E8:95:11:BF:D0:11:78:5C:A3:F4:CF:BC:85:A9:9E
X509v3 Authority Key Identifier:
keyid:76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/1-_xtnJrolRG_0BF4XKP0z7yFqZ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.77.0/24
89.23.80.0/24
89.23.84.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:77:95:5e:76:10:b3:cb:89:dd:36:13:f9:ec:10:18:e2:71:
c6:45:3d:5e:0b:1e:a4:3b:73:80:92:2c:84:fe:28:d4:6c:26:
82:37:84:67:3e:13:20:d6:35:15:65:56:22:eb:50:00:3c:2f:
10:1f:86:48:d4:20:89:42:a1:0c:0f:cd:89:c0:b4:bd:e7:6b:
ce:37:7b:6a:49:ad:ca:7a:e0:0d:8b:f2:80:74:4d:08:30:5d:
dd:3e:98:38:e1:7b:b9:6c:52:40:72:53:98:a3:e2:b4:d1:da:
cd:56:83:37:83:dd:4d:ae:e5:eb:85:72:0b:7c:2a:51:d2:a1:
43:0d:cd:60:54:a6:ed:c1:66:b6:f8:71:42:ad:46:53:c6:65:
fc:4a:9e:15:99:d2:33:f2:b0:44:71:4f:e0:2b:16:86:29:64:
ec:81:91:b0:e4:03:72:38:dd:6b:17:c8:23:83:ac:f7:89:8a:
46:17:f8:aa:dd:73:18:08:1e:89:7b:ac:e1:2b:0c:b2:be:79:
5e:ea:c0:4b:e5:aa:53:8c:f6:91:40:ca:66:27:13:07:b8:44:
8a:8b:4c:1b:59:f6:3c:de:fd:f3:d1:f4:f0:31:14:5f:60:e1:
64:f4:70:8e:70:4c:91:fa:56:d0:28:3c:e5:97:51:bb:9b:79:
41:d1:5f:79
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 19 05:49:07 2025 by rpki-client