Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/Fd-wiEIaDY6hAJhwtL6vpbXO2EU.roa
File: Fd-wiEIaDY6hAJhwtL6vpbXO2EU.roa (raw, json)
Hash identifier: YoMlgPCEwHa1AdMHUR2wsUI75d5lsfXuoyPBC84hh/o=
Subject key identifier: 15:DF:B0:88:42:1A:0D:8E:A1:00:98:70:B4:BE:AF:A5:B5:CE:D8:45
Certificate issuer: /CN=764f8daadf1d775d59d1502b573901b875513b56
Certificate serial: 01856D11DBA22F69B15D04DE4B8C7CDDF3A5
Authority key identifier: 76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/Fd-wiEIaDY6hAJhwtL6vpbXO2EU.roa
Signing time: Sun 01 Jan 2023 11:22:44 +0000
ROA not before: Sun 01 Jan 2023 11:22:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207590
IP address blocks: 89.23.88.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:11:db:a2:2f:69:b1:5d:04:de:4b:8c:7c:dd:f3:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=764f8daadf1d775d59d1502b573901b875513b56
Validity
Not Before: Jan 1 11:22:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=15dfb088421a0d8ea1009870b4beafa5b5ced845
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4a:0a:3a:ab:88:fe:18:22:1d:26:51:12:37:
7a:ce:8d:df:4f:b4:3c:f9:3a:b5:3d:0b:65:3b:19:
b6:9f:40:fb:d7:85:6f:64:e8:6a:a0:1b:60:79:4e:
c0:1f:e3:9c:18:cd:5a:7b:51:ad:6a:73:b9:c7:03:
bf:1f:ed:a7:fe:18:22:1d:7c:90:a6:ac:b3:12:21:
e5:0f:e5:b4:e4:53:47:a2:c6:d2:ee:38:7f:e6:06:
9f:83:20:50:c4:57:18:f0:87:4c:f9:55:22:bf:ac:
7a:0d:ad:83:c3:75:be:38:af:5b:29:7a:b2:1b:b5:
bf:99:87:3e:d9:5b:a5:ae:89:98:85:8f:49:d5:dd:
49:f1:67:d9:8f:f7:d6:42:30:d7:16:72:ab:ff:43:
37:5f:0f:08:c2:8e:f4:2b:eb:13:59:93:c5:45:2b:
a4:0b:44:b7:27:4f:70:31:42:e2:a3:6e:5b:90:a3:
98:a3:fd:40:f1:cd:ad:e3:d9:e1:be:31:15:a9:57:
8d:25:ae:a8:2f:b3:9b:dc:3c:16:cd:f4:33:34:42:
f2:95:c1:11:b6:f1:9f:3a:6b:68:64:29:15:0f:03:
05:be:15:31:3d:70:8a:14:97:68:38:d5:bd:77:bf:
33:54:fc:76:e3:1e:dc:6a:dc:ee:8e:81:22:c8:be:
de:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:DF:B0:88:42:1A:0D:8E:A1:00:98:70:B4:BE:AF:A5:B5:CE:D8:45
X509v3 Authority Key Identifier:
keyid:76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/Fd-wiEIaDY6hAJhwtL6vpbXO2EU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.88.0/24
Signature Algorithm: sha256WithRSAEncryption
95:b0:ce:17:2f:50:00:ea:ca:be:1b:31:a4:a3:4f:a1:73:a8:
ab:ce:65:8d:ab:db:6d:68:b8:10:f0:98:7a:91:f1:32:a4:cb:
ae:76:3b:31:1f:33:a7:f9:39:21:83:3f:bb:ac:d7:1b:49:d2:
c3:d6:a3:8a:da:e9:9c:5d:92:03:24:6a:91:24:73:d9:b2:d3:
17:7c:16:46:27:1a:e7:38:78:9a:56:ae:32:25:21:aa:fb:15:
f7:42:32:fd:4a:89:f2:85:cb:da:ce:85:35:13:53:51:67:21:
49:91:7f:b0:94:12:c9:3f:09:13:fd:ef:f4:63:b3:ef:09:c0:
10:c8:2b:55:77:fe:75:2c:e5:c9:83:ac:dc:91:dd:f9:24:b6:
6e:ce:24:d9:b2:fc:06:06:a4:cd:95:26:f9:a7:00:00:47:79:
1a:dd:87:2b:2b:c3:49:97:b2:2b:52:13:92:46:74:cf:ad:60:
99:02:ff:80:9f:74:ad:41:1c:af:b9:c2:cc:62:80:55:95:e7:
e5:39:4a:1a:b8:f5:85:4b:eb:01:69:e3:ff:12:84:40:b4:7b:
ae:f3:94:8b:3d:2b:49:bf:c4:6c:30:cc:90:fc:d7:d0:ab:5d:
de:c6:01:6a:35:fd:c5:1e:70:d9:63:66:08:a3:af:b8:84:4a:
de:e5:cb:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 22:41:52 2025 by rpki-client