Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/3GlHyyWR31BTiiW37RuuZG1L86w.roa
File: 3GlHyyWR31BTiiW37RuuZG1L86w.roa (raw, json)
Hash identifier: 0d/TdaudiSqIOeRqDi/6S/hreejngOaHfWcbvm/4zwA=
Subject key identifier: DC:69:47:CB:25:91:DF:50:53:8A:25:B7:ED:1B:AE:64:6D:4B:F3:AC
Certificate issuer: /CN=764f8daadf1d775d59d1502b573901b875513b56
Certificate serial: 018385EE44E1442D13C83AAEFE1371DBA08A
Authority key identifier: 76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/3GlHyyWR31BTiiW37RuuZG1L86w.roa
Signing time: Wed 28 Sep 2022 21:08:48 +0000
ROA not before: Wed 28 Sep 2022 21:08:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 89.23.92.0/24 maxlen: 24
89.23.85.0/24 maxlen: 24
89.23.79.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:85:ee:44:e1:44:2d:13:c8:3a:ae:fe:13:71:db:a0:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=764f8daadf1d775d59d1502b573901b875513b56
Validity
Not Before: Sep 28 21:08:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dc6947cb2591df50538a25b7ed1bae646d4bf3ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:79:a0:c7:24:4a:16:c1:9c:5f:6a:96:b9:37:
a5:c5:bb:fd:bc:e3:ee:26:e9:bf:d0:96:15:c2:68:
83:5b:67:ce:a3:91:fa:09:f8:26:27:55:2f:d6:b6:
31:30:46:d8:3a:ec:13:d2:47:95:85:0c:fc:9f:6c:
1b:23:73:0d:55:6b:b6:8d:78:13:0e:72:1a:b9:99:
ae:92:3a:74:4c:88:02:d8:1f:e0:b5:0e:b5:39:e1:
bb:12:59:3c:3f:7e:3f:78:9f:e0:4b:68:b4:6f:47:
7d:54:e2:92:86:fd:b3:ae:86:73:17:c9:45:f7:7a:
fa:d6:4a:b1:e4:03:2f:0b:64:00:68:56:ec:28:7f:
9d:2c:6a:0b:9a:f7:1c:71:90:78:21:81:70:9d:bb:
10:93:fc:0f:c4:fe:9a:59:a9:bd:dc:f4:f6:61:46:
1a:c8:78:7d:96:58:3b:1a:4d:7b:20:5a:f9:41:35:
05:3f:9a:ed:e4:13:b6:3c:77:07:01:ae:67:27:77:
07:6b:44:8c:37:55:34:7e:6c:75:a3:c7:9f:f8:d4:
37:88:60:13:ab:d1:e3:11:77:87:62:aa:7a:b2:8d:
1e:25:c1:09:15:20:da:95:2b:3b:64:44:2f:ba:bd:
eb:cc:b1:d5:65:90:49:7d:f1:03:80:7d:74:cb:80:
f7:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:69:47:CB:25:91:DF:50:53:8A:25:B7:ED:1B:AE:64:6D:4B:F3:AC
X509v3 Authority Key Identifier:
keyid:76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/3GlHyyWR31BTiiW37RuuZG1L86w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.79.0/24
89.23.85.0/24
89.23.92.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:55:97:c5:4e:d3:a5:ce:14:71:f0:cf:d8:63:8b:d9:52:9a:
24:4d:17:ea:99:a1:2a:45:7d:08:63:9b:8a:d3:fa:51:33:c7:
04:f6:d0:ad:ea:c7:77:9c:9e:ac:de:23:80:0e:06:bc:94:21:
8c:c2:84:36:1d:1f:eb:ee:b6:03:9b:82:ad:42:66:66:32:e9:
89:0c:b9:aa:d0:49:2f:56:7d:e3:8a:4f:11:c7:ca:4f:e1:33:
ba:14:86:e9:20:25:44:48:3a:a2:c1:c9:da:62:5e:fa:c7:b3:
f4:30:37:d9:08:14:3d:4d:38:5f:4d:22:79:cf:7a:65:00:b9:
7b:6f:97:b6:ad:25:3d:b9:76:12:a6:34:ad:4d:13:ec:65:45:
e3:62:af:29:9c:79:64:1d:65:06:07:91:56:68:32:5c:cb:cd:
44:ec:37:63:75:f2:0b:e7:0a:48:d9:b4:36:d8:bd:8e:78:0d:
41:6d:38:96:44:53:5c:8e:01:4b:df:d4:61:b9:cf:c4:5a:37:
3d:f4:46:4b:a0:6f:1d:bf:4e:6c:fd:e2:c4:4f:dc:3d:3c:f2:
63:33:39:ca:da:2e:0f:c0:6b:eb:63:a8:24:79:1e:e4:38:2f:
4d:ee:89:62:dd:40:d1:97:2e:e9:c0:7d:b4:d6:b5:17:74:0c:
8c:fc:12:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:38:28 2025 by rpki-client