Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/4QfEgVIYNvLJk9bU1HP9odprE6g.roa
File: 4QfEgVIYNvLJk9bU1HP9odprE6g.roa (raw, json)
Hash identifier: 5XpQfGYFcthD1XslS419DCrcXuQSMKqEF4n5VB6/Lp4=
Subject key identifier: E1:07:C4:81:52:18:36:F2:C9:93:D6:D4:D4:73:FD:A1:DA:6B:13:A8
Certificate issuer: /CN=764f8daadf1d775d59d1502b573901b875513b56
Certificate serial: 0182396D61812DD14AF2BE5A396DAE26D176
Authority key identifier: 76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/4QfEgVIYNvLJk9bU1HP9odprE6g.roa
Signing time: Tue 26 Jul 2022 07:34:05 +0000
ROA not before: Tue 26 Jul 2022 07:34:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 178.254.150.0/24 maxlen: 24
89.23.91.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:39:6d:61:81:2d:d1:4a:f2:be:5a:39:6d:ae:26:d1:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=764f8daadf1d775d59d1502b573901b875513b56
Validity
Not Before: Jul 26 07:34:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e107c481521836f2c993d6d4d473fda1da6b13a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:98:eb:15:09:3a:8a:3b:8e:b5:0e:d1:d8:91:
02:a9:eb:5c:7c:02:d1:d0:98:f8:f6:ab:6e:d1:81:
ff:61:a4:25:1d:5e:ec:fd:1d:fb:aa:41:d4:d4:8e:
ff:81:9d:95:4c:9d:5b:47:54:d5:41:d0:cf:cb:5f:
05:66:5a:b0:37:3f:59:83:e6:32:cb:4c:4a:86:9b:
d9:19:c8:ed:dc:d0:df:51:5b:19:b8:c1:9b:90:64:
4b:f0:1e:4e:78:1e:db:ab:6f:d3:90:3e:f5:4b:78:
fb:d5:16:fd:07:4d:be:8a:31:8a:ee:6f:2f:b7:f8:
c6:a1:ca:70:04:48:7d:4d:ca:ca:36:5c:c2:89:48:
e6:0a:7f:14:7f:5e:c3:28:48:d2:8a:26:ee:d0:4a:
ff:e5:d1:9a:1b:db:dc:93:f3:f8:5e:4c:e8:03:a6:
9f:c7:22:8c:fe:ba:b9:86:10:2f:d4:72:42:b5:bb:
10:fe:11:6d:1a:db:0b:f0:d9:4b:62:21:09:d8:ad:
50:81:d1:d6:4e:33:9a:13:92:21:fa:0d:ce:7b:9d:
0f:c6:ac:38:07:f6:36:11:47:b5:7a:94:07:bd:8d:
44:a0:cd:81:88:85:e1:e3:94:24:0b:92:84:5c:dd:
c8:b4:8c:61:8a:f4:36:41:bf:0c:cc:a0:40:7e:49:
02:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:07:C4:81:52:18:36:F2:C9:93:D6:D4:D4:73:FD:A1:DA:6B:13:A8
X509v3 Authority Key Identifier:
keyid:76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/4QfEgVIYNvLJk9bU1HP9odprE6g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.91.0/24
178.254.150.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:b8:4c:2e:f1:05:d7:2b:e2:f6:f8:29:1d:3f:7b:fe:2d:3a:
42:76:14:b6:07:a8:2b:1e:57:6a:54:fd:a9:fd:7b:cf:08:a9:
a2:dd:b8:7b:65:47:6b:cb:cb:50:f5:b0:5f:8e:56:92:15:c0:
5c:68:49:62:c3:2e:44:58:64:f5:83:9a:61:79:d9:b8:df:58:
1a:c7:20:22:f8:87:7d:00:f3:f4:17:d3:e1:35:26:1e:0c:37:
e7:08:df:29:00:e4:e4:8a:56:71:be:26:55:af:cf:bd:39:b2:
1f:27:ab:1c:f2:21:64:f1:2c:35:4c:a5:01:aa:7c:b7:08:34:
13:6d:5a:5b:82:98:10:ee:73:04:47:46:56:be:b1:48:13:33:
da:cb:6b:f5:4c:71:4e:62:70:9e:a7:96:c4:a6:db:3d:f6:7b:
be:b7:cd:28:a2:be:38:52:4d:0c:e3:a6:4b:2c:64:9d:80:f6:
8d:04:43:9b:22:2c:31:c4:b3:cd:ab:d1:11:4b:ac:0c:69:5e:
13:4f:de:54:24:91:6f:b4:b4:5d:52:71:1a:ef:b8:94:05:91:
3a:cb:f1:cd:6e:0e:2d:af:c4:59:d9:f6:08:84:81:10:44:5e:
74:c1:a8:c8:d5:46:92:71:99:0b:1d:e4:da:23:24:f9:7a:42:
68:e0:fc:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:07:53 2025 by rpki-client