Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/K41K6zopLQNjZnydmzthy5IwEyE.roa
File: K41K6zopLQNjZnydmzthy5IwEyE.roa (raw, json)
Hash identifier: YhClKIUFu1KNXQ2/pFepXIJVq7Q3c+1hn9Y2moRhOdY=
Subject key identifier: 2B:8D:4A:EB:3A:29:2D:03:63:66:7C:9D:9B:3B:61:CB:92:30:13:21
Certificate issuer: /CN=764f8daadf1d775d59d1502b573901b875513b56
Certificate serial: 01840BAF6E3A22442B288C6F12B67C0EDA7A
Authority key identifier: 76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/K41K6zopLQNjZnydmzthy5IwEyE.roa
Signing time: Mon 24 Oct 2022 20:29:17 +0000
ROA not before: Mon 24 Oct 2022 20:29:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212669
IP address blocks: 89.23.76.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:0b:af:6e:3a:22:44:2b:28:8c:6f:12:b6:7c:0e:da:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=764f8daadf1d775d59d1502b573901b875513b56
Validity
Not Before: Oct 24 20:29:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2b8d4aeb3a292d0363667c9d9b3b61cb92301321
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:08:2c:ac:50:75:80:f9:85:38:c3:91:91:18:
71:62:68:a6:92:14:6a:a2:3d:e8:fa:9b:33:fa:16:
1b:7a:1c:dc:d1:4e:91:9c:eb:21:f9:a5:d9:4a:3d:
a8:17:85:89:e0:fb:c5:31:26:31:c2:98:8b:b4:91:
0f:d9:46:c0:bd:ea:d8:10:5e:71:f3:4a:c8:e7:f4:
62:f2:d8:9d:9d:aa:e8:e8:96:9c:1d:d4:00:a6:ef:
a1:ab:71:87:da:8f:76:fd:b9:44:bc:15:1d:d7:e3:
e7:70:68:ab:48:75:48:9c:a0:c0:6a:65:37:1e:76:
27:03:fc:d0:5d:a3:f6:08:91:fd:95:4d:84:23:aa:
79:75:d8:b8:55:51:e6:aa:b0:8f:ae:57:c0:e4:41:
6a:8b:97:b8:eb:bc:2e:ff:31:da:92:47:dd:5d:24:
72:99:b7:a1:d4:21:49:ef:d9:8c:a0:ef:1a:51:f3:
8e:cb:b4:e4:6e:84:12:57:eb:63:05:fa:be:e3:d2:
5e:90:a1:7d:35:47:c3:61:3d:3d:66:2a:65:70:eb:
45:22:18:37:c8:cb:26:f8:cf:67:0f:e5:c4:61:3f:
ec:a0:16:71:77:44:46:d4:06:48:00:34:52:29:74:
95:91:92:1c:6f:a6:33:dd:9f:d9:7a:11:83:05:3a:
cc:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:8D:4A:EB:3A:29:2D:03:63:66:7C:9D:9B:3B:61:CB:92:30:13:21
X509v3 Authority Key Identifier:
keyid:76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/K41K6zopLQNjZnydmzthy5IwEyE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.76.0/24
Signature Algorithm: sha256WithRSAEncryption
53:ac:92:3d:74:f5:01:80:7c:e4:70:c7:c8:31:48:f0:e9:e4:
be:f0:31:18:3b:c6:ff:52:ad:e9:4c:ab:a6:27:53:38:da:4c:
0e:60:2f:dd:1b:4c:94:64:24:e7:7c:93:e4:50:1b:86:a3:02:
67:27:fa:a5:ef:35:a5:62:d3:42:e5:0d:a7:1d:ba:ae:72:d7:
14:52:bb:d3:04:8a:4a:37:cc:1a:da:58:f8:c3:a0:5e:f5:ab:
81:0f:ef:6b:a3:20:69:a2:19:e5:9e:0b:06:59:be:4c:a6:12:
77:09:7e:19:78:15:dc:ad:26:64:58:cd:92:02:b3:43:aa:1c:
2a:98:de:02:9d:de:7d:4f:fe:e1:d1:fb:96:90:22:b8:fa:b4:
0b:9e:85:7a:0e:08:ea:e5:a3:01:aa:27:7a:cf:5a:00:ce:71:
a5:8e:cc:71:d7:f3:5d:1f:28:fa:5f:00:67:72:e7:f4:cc:ca:
83:5e:0a:c1:a5:65:1a:49:ab:3a:ba:2e:ed:31:a0:ca:e4:3b:
e8:84:81:7c:97:06:32:34:ad:f1:03:02:29:7e:e2:6e:dd:4f:
bb:8b:fe:ab:e4:e5:f2:05:5f:73:11:01:4b:21:6c:fa:5c:e5:
f4:48:4d:ee:28:e1:c0:9d:9a:d7:4d:6e:e3:44:de:64:d7:e8:
60:24:0c:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:18:02 2025 by rpki-client