Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/SdLTNnXwaqVkZ0m0o6zanL2-Hhg.roa
File: SdLTNnXwaqVkZ0m0o6zanL2-Hhg.roa (raw, json)
Hash identifier: TW1c2cLQGJerwLWD/ikAl7WLNEmMX3ZDMfBOVNDK0oU=
Subject key identifier: 49:D2:D3:36:75:F0:6A:A5:64:67:49:B4:A3:AC:DA:9C:BD:BE:1E:18
Certificate issuer: /CN=764f8daadf1d775d59d1502b573901b875513b56
Certificate serial: 0182B7DA98D173DD13DB4E6041932CBAF498
Authority key identifier: 76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/SdLTNnXwaqVkZ0m0o6zanL2-Hhg.roa
Signing time: Fri 19 Aug 2022 20:45:32 +0000
ROA not before: Fri 19 Aug 2022 20:45:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207459
IP address blocks: 89.23.78.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:b7:da:98:d1:73:dd:13:db:4e:60:41:93:2c:ba:f4:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=764f8daadf1d775d59d1502b573901b875513b56
Validity
Not Before: Aug 19 20:45:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=49d2d33675f06aa5646749b4a3acda9cbdbe1e18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:75:9c:ac:42:5a:67:1a:46:30:d1:4b:16:f7:
22:aa:3e:7a:b3:87:5f:2c:e8:58:cc:ea:2e:de:60:
5d:81:b7:e5:ba:5e:b8:b1:42:59:9b:c0:2d:3f:bf:
91:29:7d:e0:68:0f:54:fc:fc:79:57:56:67:dd:5b:
85:bd:c8:e2:85:f3:72:53:57:a6:9e:eb:e9:20:21:
aa:34:02:be:36:8d:ae:63:b4:34:ac:22:66:4e:1e:
ca:46:31:3c:cb:0b:8d:ff:3e:a4:aa:3a:ea:4e:1e:
86:d1:83:65:ae:27:44:e6:ca:84:e2:b8:64:c6:51:
33:de:c9:12:cb:36:84:31:1a:a1:e6:6e:71:10:c2:
dd:6a:0a:d5:2b:d9:b1:d6:7a:f8:db:63:67:11:2f:
6d:e7:c2:1f:ba:9f:4b:e7:c5:25:40:54:5e:7c:08:
6b:d8:ff:ca:57:3c:d4:98:6d:78:23:c4:65:0f:a1:
50:b0:92:e3:97:f3:54:7b:94:24:4b:7e:56:50:21:
58:41:a3:77:c9:c7:6a:c1:e1:63:a2:09:dd:84:1b:
4c:9d:0d:a2:a6:7d:54:2b:8b:ff:c0:c8:56:e4:64:
dc:7b:6f:7b:64:fa:f1:db:a3:54:19:60:16:85:6a:
62:c3:1f:85:34:bc:12:ab:65:8f:a3:71:6c:f6:df:
3a:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:D2:D3:36:75:F0:6A:A5:64:67:49:B4:A3:AC:DA:9C:BD:BE:1E:18
X509v3 Authority Key Identifier:
keyid:76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/SdLTNnXwaqVkZ0m0o6zanL2-Hhg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.78.0/24
Signature Algorithm: sha256WithRSAEncryption
59:d2:56:f3:a7:71:a8:c5:62:2d:41:88:69:66:e3:f4:74:c0:
eb:b2:0f:01:1b:9b:5d:d3:33:db:6d:cc:87:09:0a:d3:8a:c1:
fa:46:07:dd:c1:8e:c1:d2:fc:f6:e1:0d:f9:2e:2d:89:ca:74:
67:5d:10:17:b4:6e:2b:dc:7b:3d:bf:8e:db:82:56:9f:a7:5f:
c2:43:eb:41:8b:cb:93:31:c5:2a:70:0d:4a:9a:47:a8:31:02:
df:b5:bf:fe:d4:f5:64:30:91:04:73:35:0f:92:19:de:47:53:
28:3f:57:c7:d1:6a:90:37:c3:25:63:5b:d7:20:a1:8b:b0:9e:
97:a6:d2:0c:7f:c4:a3:10:3c:d5:33:ba:1d:3a:de:2e:59:96:
67:28:34:8d:56:f1:1a:a3:03:c6:80:ea:eb:ed:1e:e8:1d:34:
40:a4:af:f0:8d:a2:81:3a:a7:27:d7:eb:a0:4e:d2:23:3c:28:
9b:e5:f1:fc:7e:e2:e4:ec:9d:67:b9:ab:88:df:04:9b:f9:1a:
40:d8:a4:c4:54:fa:fa:e9:50:32:b5:57:10:dd:cc:9f:59:f5:
9f:7e:39:38:70:b8:64:6d:ac:51:b8:59:0b:91:c6:c7:d0:61:
98:63:1b:85:68:75:52:1a:7d:f8:e1:5f:29:e5:60:bc:c4:c3:
17:59:5b:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:19:19 2025 by rpki-client