Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/M-c2cvS0fQMb2C70W5Jwftz8dt4.roa
File: M-c2cvS0fQMb2C70W5Jwftz8dt4.roa (raw, json)
Hash identifier: OPOBdZM8TiW85ThctRmWE5GkDOoRMsYVK+1OEe3jqts=
Subject key identifier: 33:E7:36:72:F4:B4:7D:03:1B:D8:2E:F4:5B:92:70:7E:DC:FC:76:DE
Certificate issuer: /CN=764f8daadf1d775d59d1502b573901b875513b56
Certificate serial: 01822FE96D2E530411B43F72AC907F6F0AF1
Authority key identifier: 76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/M-c2cvS0fQMb2C70W5Jwftz8dt4.roa
Signing time: Sun 24 Jul 2022 11:13:23 +0000
ROA not before: Sun 24 Jul 2022 11:13:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14618
IP address blocks: 89.23.82.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:2f:e9:6d:2e:53:04:11:b4:3f:72:ac:90:7f:6f:0a:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=764f8daadf1d775d59d1502b573901b875513b56
Validity
Not Before: Jul 24 11:13:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=33e73672f4b47d031bd82ef45b92707edcfc76de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:5d:98:36:19:3b:66:32:19:0e:6d:32:c4:52:
e6:d0:1e:83:f3:47:11:73:d2:3c:ba:2c:33:d2:18:
42:aa:ba:a6:06:6c:63:b6:e6:5f:a6:2f:a6:8a:5e:
93:18:47:85:56:a4:cb:ba:11:9c:d7:ea:45:54:35:
9c:27:43:d0:38:2b:db:19:30:b4:ec:0e:08:2b:56:
41:dc:7c:aa:24:54:5e:66:a3:7f:e5:94:77:44:bb:
85:3b:6b:dd:a3:52:24:44:5e:4b:46:36:bf:8d:df:
b3:91:3c:7b:c1:45:c0:76:e2:4c:09:72:a9:33:9d:
59:6c:dd:7d:68:fa:3a:37:db:c0:9e:e7:1c:d9:0b:
4f:e7:37:85:26:09:4f:db:1f:a0:2c:01:6d:ac:65:
09:5a:0a:32:67:98:84:53:39:db:5a:c0:77:79:50:
28:2c:db:2d:db:67:38:ae:72:7d:37:30:7a:1a:dd:
35:3f:f0:ae:b0:20:30:2f:06:34:a7:7d:4e:8d:21:
f5:73:28:09:9a:54:f5:1e:40:0a:04:87:cb:d9:96:
62:e2:de:e5:36:15:5f:e8:2b:7b:71:fb:6c:fa:cd:
58:a7:53:f5:c2:18:97:b6:fd:96:3c:6e:b9:d8:80:
49:c3:63:21:ca:f3:50:85:ff:8f:6c:d6:b0:98:75:
d4:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:E7:36:72:F4:B4:7D:03:1B:D8:2E:F4:5B:92:70:7E:DC:FC:76:DE
X509v3 Authority Key Identifier:
keyid:76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/M-c2cvS0fQMb2C70W5Jwftz8dt4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.82.0/24
Signature Algorithm: sha256WithRSAEncryption
56:45:ba:8a:ec:8d:2b:ed:42:24:c8:3d:62:dc:2a:b9:97:7e:
80:6f:3c:2f:59:d1:52:7e:4b:5d:b8:9b:ff:94:b2:3e:cc:2c:
9a:ed:93:e1:17:db:53:ba:5b:e0:cd:64:56:77:c9:f7:b4:24:
a3:8e:00:d3:42:6e:33:39:f9:42:ce:95:b8:dd:60:bf:8a:bc:
32:f9:f7:00:c3:3c:d4:e6:04:16:c7:8d:79:98:b1:7e:a0:db:
a6:9a:24:86:85:0f:61:29:1d:3f:77:4a:fb:b6:b7:a6:54:49:
b4:38:79:55:34:32:8b:ea:e7:b7:88:c0:c1:02:95:f7:28:f2:
63:e9:6c:24:35:a9:f3:da:75:18:c1:46:ad:96:4a:bc:6d:1b:
9a:1f:e8:69:0f:a4:9c:31:4f:91:d3:85:a1:68:d8:b4:39:fe:
85:53:c2:80:b4:42:3e:5a:af:99:40:a7:67:8b:b1:1f:1f:cd:
0d:03:a2:51:5b:2b:e7:29:b3:1b:69:c9:09:fe:51:0c:48:10:
d1:f0:06:55:76:a2:f2:0e:9f:76:50:51:12:6f:4c:24:88:03:
b6:08:e9:e0:9f:2b:91:35:b4:34:c5:41:3c:6d:cb:0c:c7:4c:
05:2f:ad:35:5f:0c:d0:b6:b0:4a:8b:46:9c:a3:ec:34:1d:5f:
b7:d3:3a:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 03:50:26 2025 by rpki-client