Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/cW8KmZNrPKK7QL--NSYnUdts_6I.roa
File: cW8KmZNrPKK7QL--NSYnUdts_6I.roa (raw, json)
Hash identifier: 2sTRIxIKPxp75edmdm6bjuQb1kw09mdB5KpnFl/nmc8=
Subject key identifier: 71:6F:0A:99:93:6B:3C:A2:BB:40:BF:BE:35:26:27:51:DB:6C:FF:A2
Certificate issuer: /CN=764f8daadf1d775d59d1502b573901b875513b56
Certificate serial: 0187DDCCDC58DA3419FCEE6D0281AE051D80
Authority key identifier: 76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/cW8KmZNrPKK7QL--NSYnUdts_6I.roa
Signing time: Tue 02 May 2023 18:50:03 +0000
ROA not before: Tue 02 May 2023 18:50:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 89.23.78.0/24 maxlen: 24
89.23.86.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:dd:cc:dc:58:da:34:19:fc:ee:6d:02:81:ae:05:1d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=764f8daadf1d775d59d1502b573901b875513b56
Validity
Not Before: May 2 18:50:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=716f0a99936b3ca2bb40bfbe35262751db6cffa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d3:6d:6c:0a:8f:69:aa:51:04:5f:1b:70:fb:
29:c0:59:28:c1:a4:1f:90:70:c0:ea:6f:f2:dd:c6:
d3:c3:2d:47:c8:5b:8d:85:a2:f2:d0:e5:1a:34:d3:
ba:0b:c9:3a:be:fa:47:a7:65:d1:db:1f:9e:0a:d0:
52:19:eb:26:6e:db:98:dd:df:7f:71:e7:14:a7:50:
06:cd:a4:af:60:66:a7:f3:4f:8c:43:4b:e7:c8:e6:
5f:97:8d:6d:34:2a:7d:67:07:7e:72:45:0b:b9:19:
64:8f:96:cc:3f:40:7b:60:50:f6:74:77:94:04:eb:
67:e5:87:17:52:54:61:a3:dd:57:80:55:ba:1b:23:
c6:b5:32:8f:26:45:db:05:2a:e3:af:6a:96:2a:ae:
dd:5c:e9:69:a9:c4:a0:83:6d:d0:8b:8d:63:66:11:
07:12:a4:da:ce:58:37:91:50:81:33:a8:42:02:22:
e9:52:56:da:32:81:96:c2:9c:fc:3f:47:e9:3e:87:
0b:db:8d:b7:b3:39:eb:1d:72:21:51:0e:bc:60:f9:
e5:13:40:dd:f3:a3:cb:82:93:c9:74:aa:10:d3:f5:
6f:93:f2:a1:f2:71:6e:8a:cc:db:05:ea:90:44:a1:
01:6f:0e:6a:2f:a5:8b:e7:f9:4a:2b:c4:15:b3:23:
6b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:6F:0A:99:93:6B:3C:A2:BB:40:BF:BE:35:26:27:51:DB:6C:FF:A2
X509v3 Authority Key Identifier:
keyid:76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/cW8KmZNrPKK7QL--NSYnUdts_6I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.78.0/24
89.23.86.0/24
Signature Algorithm: sha256WithRSAEncryption
83:6a:6c:bb:98:db:bf:be:32:31:d3:1f:5d:2a:a5:fa:0e:ec:
96:7c:f2:6c:13:7d:79:38:67:c7:ac:a1:dd:cc:3f:88:f8:d7:
77:13:49:64:98:de:e8:d2:c1:01:26:b9:cc:4b:b6:ff:18:26:
77:be:1f:65:ad:87:83:ce:63:8a:5d:4b:db:5a:38:ab:c6:de:
4b:ca:ea:fc:0f:16:84:ee:7d:09:69:5b:e1:a5:39:f3:fb:3c:
7b:5a:0b:94:25:17:42:2b:94:30:0e:f7:4d:e3:64:b6:0a:44:
a6:34:3c:e1:80:17:96:a7:44:b5:09:b1:40:18:3c:c6:3b:c5:
c2:9f:98:73:69:03:fa:fc:cd:94:30:22:ed:83:bf:3a:7c:01:
68:8b:b4:36:37:53:bb:54:ed:f6:4d:47:f3:14:25:7a:42:46:
af:bc:9a:77:e7:91:6d:12:14:be:42:58:e6:a6:81:fe:a3:b2:
19:59:54:03:e9:72:39:44:0b:4c:a6:6d:6b:76:cf:28:13:0d:
bb:b9:29:cb:bd:24:40:ea:07:e0:28:7f:02:e0:a6:d6:fd:44:
ba:17:13:aa:d3:a7:4f:84:b2:39:98:76:f2:e1:14:22:ef:11:
5b:bd:a8:d0:18:0a:2e:5e:85:cb:90:18:73:21:2d:17:a8:b9:
c9:41:df:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 22:43:07 2025 by rpki-client