Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/DYiuD3qCdy8IpuKl4qwi9Ko5hb8.roa
File: DYiuD3qCdy8IpuKl4qwi9Ko5hb8.roa (raw, json)
Hash identifier: mhBzKxOPS+C7MD7B9pEWXdOVLyE4hvgjwmQ1Uld1Oz4=
Subject key identifier: 0D:88:AE:0F:7A:82:77:2F:08:A6:E2:A5:E2:AC:22:F4:AA:39:85:BF
Certificate issuer: /CN=764f8daadf1d775d59d1502b573901b875513b56
Certificate serial: 0182261EB9C1E10BAB42E542BEA1695151E1
Authority key identifier: 76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/DYiuD3qCdy8IpuKl4qwi9Ko5hb8.roa
Signing time: Fri 22 Jul 2022 13:35:23 +0000
ROA not before: Fri 22 Jul 2022 13:35:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207459
IP address blocks: 89.23.78.0/24 maxlen: 24
89.23.84.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:26:1e:b9:c1:e1:0b:ab:42:e5:42:be:a1:69:51:51:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=764f8daadf1d775d59d1502b573901b875513b56
Validity
Not Before: Jul 22 13:35:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0d88ae0f7a82772f08a6e2a5e2ac22f4aa3985bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:dc:be:88:8f:f5:58:ac:b7:aa:c1:02:d5:8e:
c7:ed:95:a6:0d:cf:e6:f7:1c:85:0f:99:58:68:fc:
84:b9:2f:71:29:58:3f:6a:97:a2:94:b4:21:61:3d:
51:11:46:40:c6:17:08:83:2d:7a:63:01:03:34:94:
83:88:5d:a1:4a:f7:04:b3:51:06:ba:55:95:39:53:
a1:3e:a7:57:c0:10:24:d0:09:ef:ef:35:37:38:88:
e0:00:8c:d5:9a:74:e4:5c:92:07:d4:8a:88:b4:87:
b0:d8:4f:67:86:08:0e:4c:ee:c0:27:0a:22:f3:aa:
48:fb:c2:1b:fd:cc:7e:d9:4d:23:92:47:cc:e8:f5:
99:a7:e4:6a:94:6d:12:2b:27:d7:84:2b:63:a8:6d:
33:00:3e:0b:80:ba:0e:f4:75:90:5a:b5:9f:8b:f6:
78:4f:90:9f:b8:50:7e:a9:ed:04:e0:0f:7d:0c:6b:
78:c6:e2:89:37:e6:2f:64:35:f9:ba:5b:e2:4f:37:
e4:0b:db:f4:6f:0f:6b:1f:df:14:86:b8:c6:61:07:
88:3b:da:18:b3:28:2b:6b:5a:dc:ef:e4:a3:57:94:
36:59:a5:c6:82:68:f1:c3:e4:ab:ee:aa:c4:de:4f:
92:da:bb:7a:ec:8f:47:34:da:86:af:57:dc:45:e4:
d6:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:88:AE:0F:7A:82:77:2F:08:A6:E2:A5:E2:AC:22:F4:AA:39:85:BF
X509v3 Authority Key Identifier:
keyid:76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/DYiuD3qCdy8IpuKl4qwi9Ko5hb8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.78.0/24
89.23.84.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:44:6c:f5:6b:ed:fa:87:82:75:17:c5:30:b5:ed:06:f1:e7:
f8:b8:69:db:57:26:9c:5c:51:25:06:0a:38:fa:30:c3:43:ad:
5d:d2:8d:7a:9c:88:21:e4:e3:05:73:0d:80:0a:70:74:de:30:
cc:86:dd:90:fa:ee:9e:86:6e:eb:90:6d:8e:fd:6b:fb:5c:fe:
97:6d:c6:ba:8a:66:5c:00:c8:92:08:8e:ac:f9:bb:6d:e3:cc:
93:ee:c8:ab:2a:1e:42:30:8d:fd:e3:91:3f:08:f4:73:3b:73:
38:40:97:09:22:8b:af:ea:17:e7:f9:c3:f6:82:e8:6b:e1:12:
07:c5:cd:99:a2:fd:83:71:6b:25:8a:80:f8:23:c5:d9:e4:5d:
d3:22:00:cc:13:4b:8f:ab:69:c6:d9:5b:c7:0a:be:92:3f:3a:
ed:72:34:b8:86:46:17:6a:49:88:84:08:be:ec:a5:59:53:c8:
dd:c8:4c:02:c3:99:13:c2:85:f7:73:f4:1b:a9:62:46:af:2b:
48:36:1f:dc:8c:f9:83:20:db:51:9e:aa:40:5f:e9:c2:ee:6d:
5a:f2:df:7f:04:73:f6:f5:85:08:e7:4e:96:b2:1e:70:a8:01:
52:b1:2e:4f:50:99:28:ab:8b:f0:96:ef:b0:a8:5b:c4:cb:91:
50:46:a8:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 19:55:56 2025 by rpki-client