Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/d2pGNYtFGR-kiy6ttou7g6sprAc.roa
File: d2pGNYtFGR-kiy6ttou7g6sprAc.roa (raw, json)
Hash identifier: c/VALUwb8jGHQ1eW+/2kNzo/oKxDm5hnSPPSQ7axBt4=
Subject key identifier: 77:6A:46:35:8B:45:19:1F:A4:8B:2E:AD:B6:8B:BB:83:AB:29:AC:07
Certificate issuer: /CN=764f8daadf1d775d59d1502b573901b875513b56
Certificate serial: 08466398
Authority key identifier: 76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/d2pGNYtFGR-kiy6ttou7g6sprAc.roa
Signing time: Wed 30 Mar 2022 11:03:54 +0000
ROA not before: Wed 30 Mar 2022 11:03:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 52116
IP address blocks: 89.23.93.0/24 maxlen: 24
178.254.145.0/24 maxlen: 24
178.254.150.0/24 maxlen: 24
178.254.165.0/24 maxlen: 24
178.254.170.0/24 maxlen: 24
178.254.172.0/24 maxlen: 24
178.254.180.0/24 maxlen: 24
178.254.181.0/24 maxlen: 24
178.254.183.0/24 maxlen: 24
89.23.71.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 138830744 (0x8466398)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=764f8daadf1d775d59d1502b573901b875513b56
Validity
Not Before: Mar 30 11:03:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=776a46358b45191fa48b2eadb68bbb83ab29ac07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:9c:4c:1c:90:73:d4:99:9d:63:46:c4:99:be:
15:c2:d6:59:b0:5c:30:f7:23:ee:90:da:8a:69:bb:
6d:77:e4:b1:66:dc:df:68:86:5b:cb:18:06:72:67:
b9:6b:84:46:ee:f8:f9:a5:d9:d4:d5:93:64:35:25:
de:c2:d4:e5:53:94:8f:e1:e4:c7:6f:89:66:6e:6d:
10:30:c0:16:73:12:eb:ea:9f:fd:93:09:00:9b:90:
6c:35:1a:2f:45:88:35:ce:e3:f4:fe:51:a6:07:92:
74:f2:20:1c:31:fa:91:5c:84:cb:04:1e:7c:7c:2d:
70:6e:ee:2d:b7:dc:59:d7:1c:2d:f9:b1:9c:ae:21:
86:c5:98:8d:33:07:8d:68:55:20:b2:d3:ce:1c:71:
b7:53:7e:e5:32:11:07:cb:e1:84:ff:f0:2f:fb:a3:
1a:41:6e:e7:d5:c3:7d:c2:78:03:ac:33:95:f7:96:
f8:cf:41:d2:de:84:b0:65:2f:ce:18:f9:4a:45:c7:
53:21:78:3e:f5:f5:04:eb:83:06:e4:0a:98:2a:58:
cd:60:82:8e:f1:0a:4c:5f:7b:97:64:d5:e7:d9:02:
f8:1f:84:fa:c4:9f:30:6c:a8:b1:c7:9e:99:4a:d4:
1f:2a:07:35:ef:e0:c8:61:67:2f:8a:29:63:4b:13:
f7:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:6A:46:35:8B:45:19:1F:A4:8B:2E:AD:B6:8B:BB:83:AB:29:AC:07
X509v3 Authority Key Identifier:
keyid:76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/d2pGNYtFGR-kiy6ttou7g6sprAc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.71.0/24
89.23.93.0/24
178.254.145.0/24
178.254.150.0/24
178.254.165.0/24
178.254.170.0/24
178.254.172.0/24
178.254.180.0/23
178.254.183.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:c5:20:36:8d:8b:3b:3c:c2:45:b6:99:d5:da:34:27:9b:dc:
af:11:1f:f1:66:db:1e:aa:a4:1b:dc:df:6e:57:c3:b5:52:9d:
9b:cf:26:3f:68:c5:da:72:fd:54:09:23:a8:7b:ff:b0:b2:90:
71:f5:f9:e7:97:15:4c:87:ea:09:20:c9:e4:ec:6d:3e:84:48:
c9:4c:d4:9f:73:56:07:3d:80:eb:1e:66:dd:5b:d9:f6:0f:89:
20:a1:15:ad:7b:82:8f:ba:57:04:35:67:18:65:32:80:6f:a4:
f9:f7:7d:11:83:0e:20:0d:bb:f9:e4:e9:0b:38:33:52:39:2a:
3b:f5:6e:b9:c1:30:7d:70:15:8f:87:43:25:9e:86:fb:b5:eb:
6e:83:50:80:9a:c1:00:ab:c4:27:47:a1:d1:3b:c4:a2:29:ea:
6f:74:bc:55:60:9a:50:43:41:5e:63:a5:1e:6d:97:2e:d9:69:
c3:23:00:e7:a1:e3:2e:5a:18:05:f7:1f:ab:a2:dc:c2:03:6a:
75:8b:6a:e7:a5:2e:1f:15:e3:1f:94:0e:ed:24:cc:70:a9:aa:
22:61:93:ef:fd:b8:9e:b9:95:ea:e7:de:0b:7d:0c:98:79:a8:
da:b5:21:ca:fd:66:94:40:c8:63:d3:09:a2:d0:01:5e:d8:98:
e5:25:9d:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 17:12:50 2025 by rpki-client