Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/TeKaU1-HjSp_Y3u8d4KZgSijHt4.roa
File: TeKaU1-HjSp_Y3u8d4KZgSijHt4.roa (raw, json)
Hash identifier: 6LJ//ONGcJc7zLP1RuPvP5ohENcKXdFkiuZeW3Zt8b4=
Subject key identifier: 4D:E2:9A:53:5F:87:8D:2A:7F:63:7B:BC:77:82:99:81:28:A3:1E:DE
Certificate issuer: /CN=764f8daadf1d775d59d1502b573901b875513b56
Certificate serial: 018234EBDBB0F6C150F0960EA82563F23828
Authority key identifier: 76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/TeKaU1-HjSp_Y3u8d4KZgSijHt4.roa
Signing time: Mon 25 Jul 2022 10:34:08 +0000
ROA not before: Mon 25 Jul 2022 10:34:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 10753
IP address blocks: 89.23.92.0/24 maxlen: 24
89.23.85.0/24 maxlen: 24
89.23.79.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:34:eb:db:b0:f6:c1:50:f0:96:0e:a8:25:63:f2:38:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=764f8daadf1d775d59d1502b573901b875513b56
Validity
Not Before: Jul 25 10:34:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4de29a535f878d2a7f637bbc7782998128a31ede
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:73:eb:0f:44:37:ff:66:e0:1d:98:0e:09:cc:
fa:2e:f2:c7:0b:48:49:05:12:9b:dc:18:30:ec:5e:
a5:c4:d5:d0:c4:dd:82:eb:fa:81:9a:09:27:51:59:
14:ed:fe:02:24:7b:a6:95:83:e0:75:f7:e2:a4:6e:
0d:22:4b:92:d2:61:96:28:c1:61:a1:cc:13:99:de:
1a:95:42:25:b8:ac:b4:9b:c5:74:cd:3b:07:4c:3a:
5b:1b:5f:cb:7c:2c:7a:1a:01:ad:94:5d:9d:d8:79:
ff:32:2b:c5:ba:af:95:99:ef:46:7e:7e:9a:f9:82:
dc:5b:ea:a0:61:37:4e:ba:b3:9e:0a:11:fc:1d:97:
20:23:23:01:ff:e9:cf:d3:2b:7e:26:a3:21:e1:14:
4e:ec:03:82:91:ee:5e:58:06:48:a2:09:c3:93:a1:
5b:8e:90:aa:0e:de:fd:32:4c:de:1e:e7:ec:a0:c8:
27:ff:c9:d5:34:fc:2f:7f:a9:51:b4:1b:4c:bb:16:
bb:c4:34:96:10:18:42:a3:f7:13:d3:d8:2a:0c:87:
56:13:a6:ba:f5:c5:8d:05:d8:2a:f2:64:0a:9f:9b:
0c:b0:7f:1d:9a:fa:f4:c2:a1:0f:1b:20:15:29:91:
ec:f6:b8:c1:7a:6a:61:6e:e8:48:66:7d:5e:80:08:
26:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:E2:9A:53:5F:87:8D:2A:7F:63:7B:BC:77:82:99:81:28:A3:1E:DE
X509v3 Authority Key Identifier:
keyid:76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/TeKaU1-HjSp_Y3u8d4KZgSijHt4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.79.0/24
89.23.85.0/24
89.23.92.0/24
Signature Algorithm: sha256WithRSAEncryption
40:d4:46:85:fd:68:be:f1:3f:54:89:f5:c8:ca:fe:3a:fb:63:
d7:56:3d:1f:17:86:95:c2:98:38:7b:70:e6:a8:75:b3:23:a4:
53:83:9d:98:b7:70:91:39:4a:bb:15:20:60:c7:bf:cc:eb:a8:
07:56:b5:f9:24:a3:e7:fa:82:e6:72:37:e8:30:49:ce:c8:f4:
f8:86:4c:fa:7b:8e:87:3f:ee:24:67:ad:bc:67:b6:a3:20:42:
20:2e:e7:53:8f:98:23:0f:99:45:7d:5c:0a:18:76:13:69:e9:
98:fd:81:84:eb:99:d4:e4:7f:77:ca:75:6c:2a:29:44:ae:57:
fe:9a:60:de:06:97:3e:71:84:7f:a8:21:38:1d:b6:0f:25:97:
2d:2d:b9:ec:b9:54:30:60:51:1a:13:f5:97:3b:8e:41:60:1d:
01:55:07:ea:0e:ae:94:58:34:b3:8f:66:e5:63:95:97:7f:81:
8c:08:1d:fd:3d:55:45:c6:9c:97:4a:5c:97:7b:9b:99:7e:e4:
3d:dd:04:07:79:f9:95:eb:b7:65:ca:53:81:ee:42:54:db:7b:
d7:1d:4f:20:cd:36:e8:e4:1a:9b:7d:f7:17:0b:09:1e:3e:64:
1c:8f:2f:1a:d3:32:bb:03:12:76:ac:98:46:2c:8c:a7:b6:65:
94:09:ba:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 16:11:49 2025 by rpki-client