Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/88cH7yQbYNC2AuA_FVlxQa-N_4I.roa
File: 88cH7yQbYNC2AuA_FVlxQa-N_4I.roa (raw, json)
Hash identifier: m9aGFd1A0qr1t25LZ/mX5rg29ASMxUrz8ZjaUg31VoE=
Subject key identifier: F3:C7:07:EF:24:1B:60:D0:B6:02:E0:3F:15:59:71:41:AF:8D:FF:82
Certificate issuer: /CN=764f8daadf1d775d59d1502b573901b875513b56
Certificate serial: 018224BF2EA11F552BD7E119B4A52679E2AB
Authority key identifier: 76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/88cH7yQbYNC2AuA_FVlxQa-N_4I.roa
Signing time: Fri 22 Jul 2022 07:11:25 +0000
ROA not before: Fri 22 Jul 2022 07:11:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 30823
IP address blocks: 89.23.77.0/24 maxlen: 24
89.23.80.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:24:bf:2e:a1:1f:55:2b:d7:e1:19:b4:a5:26:79:e2:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=764f8daadf1d775d59d1502b573901b875513b56
Validity
Not Before: Jul 22 07:11:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f3c707ef241b60d0b602e03f15597141af8dff82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:db:91:42:5d:33:f0:a0:25:88:5a:b7:80:2f:
ae:da:0c:a5:54:20:5c:25:50:83:3d:94:d1:fb:9e:
8a:ff:37:1b:d7:22:19:83:99:d2:8b:8d:48:3c:38:
b5:cb:bf:23:ea:99:93:b9:1b:ce:02:c0:10:96:16:
68:10:c3:0b:ec:63:d0:22:d7:65:bb:d3:f0:7f:36:
52:db:43:39:e3:cc:d9:c5:f3:66:55:94:c1:f7:94:
c6:b0:4f:60:b3:a6:9f:ad:50:49:2a:2c:a3:25:11:
f8:51:04:71:61:43:6d:13:25:d4:91:4e:9a:7a:4e:
c0:f0:3e:3e:39:59:da:8a:dc:2d:62:6d:30:eb:26:
43:e0:e0:45:57:1d:33:1c:bf:8a:d4:10:ae:99:eb:
9d:ac:0a:fe:2a:f6:df:51:ca:1e:fc:98:94:f8:c9:
66:ec:3a:0d:54:f5:18:4a:34:2d:32:59:d4:72:bc:
3d:79:93:8d:1d:a0:a1:88:4b:8c:c4:1d:50:3b:24:
e4:21:8a:9d:3f:d0:7e:0c:ae:9d:0f:2a:f2:c3:27:
e4:ad:6c:69:0d:79:49:cc:60:b5:82:98:09:ad:9b:
b0:9a:2e:7b:88:18:ab:7d:cf:ec:ae:66:2e:93:a1:
c9:ae:df:34:16:33:d6:b0:02:62:dc:74:e7:d9:f2:
4c:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:C7:07:EF:24:1B:60:D0:B6:02:E0:3F:15:59:71:41:AF:8D:FF:82
X509v3 Authority Key Identifier:
keyid:76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/88cH7yQbYNC2AuA_FVlxQa-N_4I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.77.0/24
89.23.80.0/24
Signature Algorithm: sha256WithRSAEncryption
81:1b:3b:3c:19:75:c8:0a:d3:f5:bf:25:0a:7f:46:49:83:75:
68:b7:43:d5:cb:61:79:ce:4b:7f:c0:f6:be:0b:55:cb:20:c1:
0b:1c:fc:3c:47:18:4b:b5:4a:4f:20:c7:a9:55:3f:b2:d9:8a:
d6:5e:25:cf:f9:2f:d9:98:2b:4d:f8:56:9a:5a:24:86:0c:3b:
94:2f:32:33:c2:cb:fd:35:b1:af:ed:87:43:bc:30:ed:c9:c3:
ff:66:f2:53:7f:cf:d3:6c:5e:21:eb:e3:67:ad:cc:82:e9:a4:
6e:c7:cf:06:8a:20:5a:ab:2b:40:40:1c:eb:b0:30:d6:67:fd:
8f:13:46:39:fa:94:08:36:44:a4:02:24:ec:45:b3:71:06:f6:
93:0d:ab:b0:8e:d9:d7:0f:d6:f9:f3:9a:f4:71:cb:19:e8:df:
1f:f2:81:03:90:8a:20:40:58:7e:c8:77:bf:57:81:b6:10:54:
1b:ff:69:74:2d:b8:a4:17:50:ff:a2:71:52:21:14:5a:f6:2e:
f5:38:cc:12:aa:b8:55:56:bb:b3:43:bb:47:6f:1b:2d:ee:6b:
70:4b:e0:0d:0d:1d:4a:6e:4b:e8:4d:d3:04:f4:95:cf:2f:5d:
9f:74:7f:96:f4:0d:0c:ed:ee:4f:da:9e:b2:f7:37:b8:88:5d:
46:18:04:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:10:08 2025 by rpki-client