Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/Wr3VrY-a0rjS1mX3jiFnqfi4u1A.roa
File: Wr3VrY-a0rjS1mX3jiFnqfi4u1A.roa (raw, json)
Hash identifier: TpoavZjO3mV3qjtv3UQwuSjaH+4W8SbtnSqlRscjmyY=
Subject key identifier: 5A:BD:D5:AD:8F:9A:D2:B8:D2:D6:65:F7:8E:21:67:A9:F8:B8:BB:50
Certificate issuer: /CN=764f8daadf1d775d59d1502b573901b875513b56
Certificate serial: 01856D11DE9226FD4A9E40A83CF13437CF22
Authority key identifier: 76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/Wr3VrY-a0rjS1mX3jiFnqfi4u1A.roa
Signing time: Sun 01 Jan 2023 11:22:45 +0000
ROA not before: Sun 01 Jan 2023 11:22:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400377
IP address blocks: 89.23.87.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:11:de:92:26:fd:4a:9e:40:a8:3c:f1:34:37:cf:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=764f8daadf1d775d59d1502b573901b875513b56
Validity
Not Before: Jan 1 11:22:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5abdd5ad8f9ad2b8d2d665f78e2167a9f8b8bb50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:f3:8d:b6:ed:51:8c:f7:5c:b2:d3:9f:9f:8b:
49:f2:75:fd:5f:32:94:f0:dd:a0:6f:ab:92:e1:46:
27:33:b4:5c:be:95:c8:8f:0b:b8:e9:df:8b:46:17:
41:ce:e6:ec:f6:8d:62:dd:b4:7e:75:3f:35:06:02:
d0:f9:5d:40:c9:f4:0d:0a:f3:0b:0d:22:b4:5d:b8:
89:8a:2b:e5:c7:ca:78:13:8a:1a:18:79:f1:80:73:
fa:a6:13:87:ac:31:df:af:d3:e6:2d:56:db:fe:b4:
82:5e:13:32:e3:62:ac:56:75:26:23:90:fa:13:91:
a8:d7:38:1a:4e:f3:6f:95:9a:e8:2d:f1:52:34:f2:
8c:c9:da:6f:2a:ee:26:33:4a:06:91:65:ca:4a:76:
26:cc:33:ea:e9:78:a1:b0:91:17:3e:2e:04:19:c5:
4a:bd:bb:ed:6f:f6:57:8d:56:02:08:5e:ce:cb:60:
aa:8a:0e:3c:f1:e2:4c:76:be:4f:f7:b3:4e:8b:0f:
35:26:c3:96:06:20:69:ff:34:7a:71:67:04:0e:0c:
de:86:2e:fa:64:49:dc:eb:2a:d4:a5:26:64:9b:d4:
c6:1b:07:66:00:43:d2:d5:c6:b9:d4:09:49:74:21:
e7:2f:16:ed:bf:45:fb:8e:f9:31:84:c4:7a:b9:7e:
4a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:BD:D5:AD:8F:9A:D2:B8:D2:D6:65:F7:8E:21:67:A9:F8:B8:BB:50
X509v3 Authority Key Identifier:
keyid:76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/Wr3VrY-a0rjS1mX3jiFnqfi4u1A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.87.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:2f:02:93:83:d5:fa:38:f2:ba:2c:d0:fa:c1:c8:5c:9b:a4:
02:69:e4:a7:cd:b5:b8:37:d3:c5:8e:75:1e:fc:45:fa:e8:b7:
89:a0:c1:b8:a9:e4:4b:e8:97:eb:d7:e8:11:17:c5:b6:61:bc:
74:fc:11:4b:f0:10:b9:44:66:ca:63:6e:03:4d:b0:e6:fc:74:
06:94:5d:d7:a8:a5:d2:95:f3:a1:7b:6a:cd:c2:1b:f1:12:01:
dd:3b:d1:3e:98:67:8e:2e:47:ce:a0:5d:b0:d8:92:03:b3:e6:
f4:33:1c:60:80:d1:12:e6:36:79:eb:1a:b0:87:20:c1:66:cc:
75:53:1d:3e:52:a1:2f:e5:1e:f4:11:81:6b:58:7c:00:81:7d:
f5:97:17:d1:85:2b:11:3c:f3:e3:d6:cd:f0:4a:68:be:7b:a8:
f3:86:80:e8:a8:d2:f7:29:43:5f:86:65:c1:ab:a6:5d:82:90:
68:6a:4f:a9:1a:07:a0:ce:de:d2:83:1b:24:0e:a8:e6:22:cc:
f6:65:43:c1:71:b1:95:75:99:be:31:f1:f8:19:96:f9:3b:fb:
6e:66:46:87:98:d3:4d:1e:c0:94:b9:d0:55:5b:b4:b5:5b:4c:
a9:24:fd:8b:e5:f7:63:e6:55:53:19:44:53:21:79:49:18:e8:
6d:da:15:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 05:45:53 2025 by rpki-client