Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/Wy6N82Eh8HnJR-07wG9bvDEqIK8.roa
File: Wy6N82Eh8HnJR-07wG9bvDEqIK8.roa (raw, json)
Hash identifier: ZUH5W9ifVMflTKPySxGh8ty6lTq37wBKCxbDGmIV/0c=
Subject key identifier: 5B:2E:8D:F3:61:21:F0:79:C9:47:ED:3B:C0:6F:5B:BC:31:2A:20:AF
Certificate issuer: /CN=764f8daadf1d775d59d1502b573901b875513b56
Certificate serial: 0187B929DE90CB801FB865F66D16418345D6
Authority key identifier: 76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/Wy6N82Eh8HnJR-07wG9bvDEqIK8.roa
Signing time: Tue 25 Apr 2023 16:05:41 +0000
ROA not before: Tue 25 Apr 2023 16:05:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 89.23.82.0/24 maxlen: 24
89.23.87.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:b9:29:de:90:cb:80:1f:b8:65:f6:6d:16:41:83:45:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=764f8daadf1d775d59d1502b573901b875513b56
Validity
Not Before: Apr 25 16:05:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5b2e8df36121f079c947ed3bc06f5bbc312a20af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d1:d6:33:a1:2d:e2:fa:92:e0:8f:28:7d:ed:
38:f3:54:a5:64:e4:d5:4f:3a:85:0a:cb:a6:17:5d:
1d:f2:cb:36:2f:b5:e4:13:a4:2d:c2:10:54:85:1c:
62:43:00:98:f5:f5:b8:54:5d:43:22:bc:dd:c3:88:
2a:78:1d:01:05:f4:d9:12:ef:24:53:ed:b0:5b:22:
82:d5:12:f4:e3:68:30:e2:1d:af:2b:13:3b:79:d4:
96:84:f2:f7:69:d2:d5:2c:64:cb:5e:bc:7f:f5:d7:
dc:73:ed:20:39:29:10:47:fa:f1:9c:b6:4e:db:9d:
f4:cc:54:cf:8d:a4:4a:1c:41:76:67:33:26:08:ac:
d5:e4:83:a9:c0:2c:8c:d0:f3:4b:b3:cd:7a:c7:ea:
84:41:86:eb:ef:d4:08:be:41:33:7b:4d:2b:fb:df:
eb:f8:5b:8e:88:39:87:d2:97:35:93:c4:08:41:7f:
c4:41:93:e4:52:37:7a:b8:69:f2:51:5e:fe:ac:1b:
14:02:72:ca:0e:b9:df:2d:f0:cd:24:11:d4:8e:ca:
ac:09:ea:9d:ea:a8:df:2d:65:8b:8f:5e:26:d2:70:
5c:0c:3e:ba:c3:4f:e9:fc:c2:ad:29:eb:4e:bd:fb:
5c:3d:41:f0:66:d4:26:fc:b2:4e:3a:6c:48:fb:c9:
d4:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:2E:8D:F3:61:21:F0:79:C9:47:ED:3B:C0:6F:5B:BC:31:2A:20:AF
X509v3 Authority Key Identifier:
keyid:76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/Wy6N82Eh8HnJR-07wG9bvDEqIK8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.82.0/24
89.23.87.0/24
Signature Algorithm: sha256WithRSAEncryption
64:94:22:e0:3e:40:78:d6:43:8a:8b:51:0b:c5:bb:bd:c2:13:
ec:0b:40:ab:32:02:d4:1c:3b:da:27:b3:39:c5:c5:b3:d6:06:
8a:54:1f:8c:90:ca:4b:5e:02:ed:69:7e:68:f1:77:c6:12:41:
de:ce:83:59:94:b5:0b:7b:f7:a3:00:d0:41:7d:e7:97:7f:e1:
a2:b6:75:03:55:86:a4:cf:f0:69:99:df:fe:e6:31:fb:c2:4b:
ce:2b:29:be:8b:ef:ea:51:f8:5a:88:a6:a0:0d:70:4f:48:30:
3e:47:8e:de:3d:7a:b5:d0:24:a0:16:dd:b2:bf:c2:25:76:a1:
6d:d1:f8:ff:a4:f2:b5:9a:00:23:5b:44:2e:7d:b0:7b:1d:d8:
5d:d3:7c:d2:1f:4d:a8:20:e3:87:89:e0:cd:61:0a:a1:ff:1b:
85:dc:f7:79:24:23:02:38:1c:98:f6:2a:bb:b5:52:9f:e6:75:
d1:ba:38:0e:09:f8:5b:89:6e:e7:f5:c3:bc:1e:31:77:8a:e4:
b1:9a:ad:c3:e3:1c:e0:a9:c1:65:00:12:b9:9c:a9:6d:01:e3:
32:ec:9c:7b:56:fc:ff:f6:2b:51:44:c5:78:8f:31:65:78:8e:
f8:1e:1a:06:9f:13:70:db:a6:d6:75:d2:8f:d1:7f:32:65:c2:
ff:96:92:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 22:47:50 2025 by rpki-client