Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/alRbyNyoILgrnSgKgK19np4nJ6Q.roa
File: alRbyNyoILgrnSgKgK19np4nJ6Q.roa (raw, json)
Hash identifier: D+dP64TcXYgcqdDn3TmURzhNK54LGWBX1UTPV/bQADU=
Subject key identifier: 6A:54:5B:C8:DC:A8:20:B8:2B:9D:28:0A:80:AD:7D:9E:9E:27:27:A4
Certificate issuer: /CN=764f8daadf1d775d59d1502b573901b875513b56
Certificate serial: 018200B3596D5D5613793D5A56265395CCF7
Authority key identifier: 76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/alRbyNyoILgrnSgKgK19np4nJ6Q.roa
Signing time: Fri 15 Jul 2022 07:12:09 +0000
ROA not before: Fri 15 Jul 2022 07:12:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 30823
IP address blocks: 89.23.77.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:00:b3:59:6d:5d:56:13:79:3d:5a:56:26:53:95:cc:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=764f8daadf1d775d59d1502b573901b875513b56
Validity
Not Before: Jul 15 07:12:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6a545bc8dca820b82b9d280a80ad7d9e9e2727a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:63:95:e0:13:97:8c:9f:13:1e:68:cb:c4:ce:
da:98:42:59:cd:27:3b:ee:e0:53:90:8c:c2:4f:36:
76:d2:13:bf:94:9f:0b:63:91:3e:80:79:34:31:89:
ce:66:55:1c:6a:ff:fd:be:31:80:17:44:5e:6b:1c:
d3:4d:a0:51:92:04:ef:d5:95:21:2d:8c:7c:b2:71:
f8:35:43:8f:b5:52:bd:e9:91:4b:0c:38:75:01:52:
8c:83:5e:a1:2c:2a:29:34:8d:09:91:13:54:f2:01:
48:af:54:dc:1a:3d:f4:95:db:f7:f0:4c:7a:3e:6e:
ce:f7:dd:3e:31:92:13:00:c5:28:bd:d2:2b:4a:dc:
b8:b7:9b:5f:82:7f:5c:11:95:37:3c:8e:14:29:7c:
b7:89:8e:1b:dc:2c:a9:02:68:44:a1:cb:a1:0c:e2:
c1:7e:ba:17:03:8a:b9:44:2c:e0:b5:e4:a0:a9:89:
a7:ba:27:bd:3d:fc:7f:bd:38:eb:3b:1e:39:d6:97:
a0:b2:5d:14:10:25:7e:68:65:4d:c6:7d:65:b6:02:
68:5f:66:16:8c:49:3d:ed:72:2b:38:a2:58:6d:15:
d7:12:a7:83:e0:84:79:b6:52:a4:49:44:bd:ec:94:
8c:1a:08:f6:c2:16:9a:55:3a:2c:58:21:5a:00:5c:
e5:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:54:5B:C8:DC:A8:20:B8:2B:9D:28:0A:80:AD:7D:9E:9E:27:27:A4
X509v3 Authority Key Identifier:
keyid:76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/alRbyNyoILgrnSgKgK19np4nJ6Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.77.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:c9:a3:c1:da:fb:bc:30:3a:a6:63:8b:4a:f6:66:d4:b0:5c:
c9:4c:d5:d0:65:c9:8a:dc:d1:d6:22:97:de:48:c2:f1:93:bf:
2b:95:65:a9:f3:04:17:ee:11:bd:10:f5:44:b4:50:3a:6e:7e:
cd:52:41:04:42:e5:50:58:68:93:fa:d2:62:51:3d:e6:a5:19:
2c:c0:a2:a1:7f:71:41:5b:16:84:9b:22:9a:7e:16:e3:fe:36:
8d:58:a6:49:7c:69:a7:aa:71:26:08:65:95:a3:57:c2:5f:c8:
70:bb:d6:c8:fe:59:6f:08:f1:49:69:7c:47:dd:8f:ac:81:46:
6e:c3:b5:fe:5e:57:97:72:3e:28:7c:be:fb:d1:44:7a:be:51:
41:8e:9e:b3:75:4d:30:42:c0:8b:6b:6a:ba:a7:80:e5:80:6a:
fe:f6:ba:45:58:25:82:f9:01:3e:8a:58:53:16:27:b4:c5:eb:
a3:86:0e:1e:7e:7f:02:a4:fd:5d:62:b0:ba:bf:b9:2b:97:97:
71:2c:98:7c:0a:a7:f3:ff:73:46:8a:ca:83:03:17:82:df:53:
2e:63:fc:e8:9d:0c:c4:8e:3a:b8:d8:8a:0d:0c:3e:a1:c9:70:
00:01:97:1b:08:de:c0:24:ec:54:8e:2a:05:39:4e:99:7a:dd:
bd:4f:6b:8e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYIAs1ltXVYTeT1aViZTlcz3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2NGY4ZGFhZGYxZDc3NWQ1OWQxNTAyYjU3MzkwMWI4NzU1
MTNiNTYwHhcNMjIwNzE1MDcxMjA5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YTU0NWJjOGRjYTgyMGI4MmI5ZDI4MGE4MGFkN2Q5ZTllMjcyN2E0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArmOV4BOXjJ8THmjLxM7amEJZzSc7
7uBTkIzCTzZ20hO/lJ8LY5E+gHk0MYnOZlUcav/9vjGAF0ReaxzTTaBRkgTv1ZUh
LYx8snH4NUOPtVK96ZFLDDh1AVKMg16hLCopNI0JkRNU8gFIr1TcGj30ldv38Ex6
Pm7O990+MZITAMUovdIrSty4t5tfgn9cEZU3PI4UKXy3iY4b3CypAmhEocuhDOLB
froXA4q5RCzgteSgqYmnuie9Pfx/vTjrOx451pegsl0UECV+aGVNxn1ltgJoX2YW
jEk97XIrOKJYbRXXEqeD4IR5tlKkSUS97JSMGgj2whaaVTosWCFaAFzlRwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGpUW8jcqCC4K50oCoCtfZ6eJyekMB8GA1UdIwQY
MBaAFHZPjarfHXddWdFQK1c5Abh1UTtWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGstTnF0OGRkMTFaMFZBclZ6a0J1SFZSTzFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC83YjkyYmYtMDExYi00NGE3LTgzODIt
YmZiMmI4ODE1ZTQ5LzEvYWxSYnlOeW9JTGdyblNnS2dLMTlucDRuSjZRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC83YjkyYmYtMDExYi00NGE3LTgzODItYmZiMmI4ODE1ZTQ5
LzEvZGstTnF0OGRkMTFaMFZBclZ6a0J1SFZSTzFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWRdNMA0G
CSqGSIb3DQEBCwUAA4IBAQBOyaPB2vu8MDqmY4tK9mbUsFzJTNXQZcmK3NHWIpfe
SMLxk78rlWWp8wQX7hG9EPVEtFA6bn7NUkEEQuVQWGiT+tJiUT3mpRkswKKhf3FB
WxaEmyKafhbj/jaNWKZJfGmnqnEmCGWVo1fCX8hwu9bI/llvCPFJaXxH3Y+sgUZu
w7X+XleXcj4ofL770UR6vlFBjp6zdU0wQsCLa2q6p4DlgGr+9rpFWCWC+QE+ilhT
Fie0xeujhg4efn8CpP1dYrC6v7krl5dxLJh8Cqfz/3NGisqDAxeC31MuY/zonQzE
jjq42IoNDD6hyXAAAZcbCN7AJOxUjioFOU6Zet29T2uO
-----END CERTIFICATE-----
Generated at Tue Apr 22 11:31:33 2025 by rpki-client