Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/kRdVLOXf9eTcbwBEeGz-4tZ6Jy8.roa
File: kRdVLOXf9eTcbwBEeGz-4tZ6Jy8.roa (raw, json)
Hash identifier: YXQeJxJNfOdHkpS/qeeA9YRr2PrbWaGi4KtGVs0KsiE=
Subject key identifier: 91:17:55:2C:E5:DF:F5:E4:DC:6F:00:44:78:6C:FE:E2:D6:7A:27:2F
Certificate issuer: /CN=764f8daadf1d775d59d1502b573901b875513b56
Certificate serial: 0187B92AC8BB8938E58CF4429CAB6DA78D5C
Authority key identifier: 76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/kRdVLOXf9eTcbwBEeGz-4tZ6Jy8.roa
Signing time: Tue 25 Apr 2023 16:06:41 +0000
ROA not before: Tue 25 Apr 2023 16:06:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 89.23.82.0/24 maxlen: 24
89.23.87.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:b9:2a:c8:bb:89:38:e5:8c:f4:42:9c:ab:6d:a7:8d:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=764f8daadf1d775d59d1502b573901b875513b56
Validity
Not Before: Apr 25 16:06:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9117552ce5dff5e4dc6f0044786cfee2d67a272f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e8:cf:81:29:f6:bd:66:06:c2:2e:bb:fe:e8:
00:3a:19:cb:de:e6:13:37:2d:28:9d:ca:7d:32:45:
3f:2c:ff:d3:2f:31:73:ab:40:2f:c8:06:84:c4:0a:
f8:ee:6f:40:89:3c:7f:d8:65:47:60:cd:f8:ad:2c:
c0:df:8a:99:1f:e2:e4:d8:d3:48:b2:3f:3d:bf:b2:
99:05:aa:be:03:42:a3:93:e3:e1:39:28:4c:3f:1a:
4b:16:85:d0:f5:5b:b0:5a:c8:6e:5f:28:96:8f:17:
fb:de:cf:c5:5b:9f:45:19:6d:b0:d0:75:0c:2b:9a:
49:c0:3c:d8:47:3b:34:8b:b5:11:d8:34:ec:7f:e9:
50:2e:ed:6e:b8:c6:e3:11:57:bd:ab:f0:88:8a:2d:
a7:ab:15:60:83:73:fb:6d:88:d1:53:f9:c0:d4:ef:
d1:dd:d1:11:b4:74:64:b9:11:0c:5f:df:aa:39:f5:
09:2d:b8:47:84:00:2b:f0:f0:bc:50:dc:f4:53:dc:
e2:7d:c5:74:b7:de:86:fc:ab:a0:cb:53:c1:b0:90:
2d:24:ff:9d:d9:7b:2e:d8:62:9f:58:24:32:07:10:
76:02:a2:66:c0:b6:06:82:c3:b2:e3:22:50:52:cd:
eb:7b:f1:ee:bd:ba:4f:ee:5a:c2:91:bb:23:0f:53:
0b:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:17:55:2C:E5:DF:F5:E4:DC:6F:00:44:78:6C:FE:E2:D6:7A:27:2F
X509v3 Authority Key Identifier:
keyid:76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/kRdVLOXf9eTcbwBEeGz-4tZ6Jy8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.82.0/24
89.23.87.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:9b:2e:d2:aa:df:13:92:6f:89:2f:10:b8:20:6b:ac:72:55:
74:18:1e:25:67:22:af:96:1d:b3:24:c6:d0:9d:93:97:75:fa:
58:21:ec:97:5b:e5:e3:b8:7b:d4:d1:de:af:76:cf:40:ad:b7:
9b:8f:07:7f:a3:2e:7b:d1:b2:c2:8c:41:0c:88:8f:48:f8:7a:
f0:7e:f4:c8:e4:ff:fe:5c:da:b4:45:e5:0a:eb:f6:b5:46:0a:
db:b6:63:3a:42:a2:a2:c3:ae:21:b0:50:4b:77:73:1e:fb:ed:
96:c6:69:7d:88:66:c7:d2:b9:d0:2a:21:be:d0:73:51:d2:18:
42:1b:2f:a7:cd:8b:18:3f:b2:af:4b:16:3c:14:bf:35:46:16:
43:a9:c7:6a:61:af:b1:01:7e:43:8d:ad:8e:76:d4:9f:dd:26:
33:1c:60:c4:e3:37:b7:a9:c8:b9:2e:e6:66:88:52:ab:32:ba:
5c:6e:6e:b5:47:75:a7:4b:ba:1b:c8:f8:f3:0e:1c:c9:35:39:
f4:51:9b:a3:19:a7:20:06:b9:0b:37:73:be:63:d2:f6:2d:ad:
fc:bb:58:da:64:36:e4:22:32:7d:d4:b2:e6:20:a9:4d:3d:a0:
d4:e8:a6:15:dc:6e:c9:38:34:17:29:77:ec:2a:06:2e:63:f8:
c6:6e:59:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 19:34:59 2025 by rpki-client