Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/nrt4NwluIHqcF8i0xif7s575Ils.roa
File: nrt4NwluIHqcF8i0xif7s575Ils.roa (raw, json)
Hash identifier: fIb51H+Kel65nXdoZOd+th2kqjeR4k2Xu8rwxdYueto=
Subject key identifier: 9E:BB:78:37:09:6E:20:7A:9C:17:C8:B4:C6:27:FB:B3:9E:F9:22:5B
Certificate issuer: /CN=764f8daadf1d775d59d1502b573901b875513b56
Certificate serial: 0184ADA3E8C247D4E3E870971A4267287074
Authority key identifier: 76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/nrt4NwluIHqcF8i0xif7s575Ils.roa
Signing time: Fri 25 Nov 2022 07:15:11 +0000
ROA not before: Fri 25 Nov 2022 07:15:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 89.23.88.0/24 maxlen: 24
89.23.91.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:ad:a3:e8:c2:47:d4:e3:e8:70:97:1a:42:67:28:70:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=764f8daadf1d775d59d1502b573901b875513b56
Validity
Not Before: Nov 25 07:15:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9ebb7837096e207a9c17c8b4c627fbb39ef9225b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:b4:50:40:84:9b:cb:b6:a8:cc:d1:61:1e:64:
29:5f:34:60:1e:30:2a:d5:d5:d4:37:0a:b8:c6:22:
28:02:fc:cd:13:1b:71:a0:60:d4:26:f0:e2:a9:25:
12:53:ea:48:c0:e0:7d:31:66:5b:ba:59:84:09:c6:
8c:a5:1a:c5:7d:b6:7a:2f:fe:c8:3d:ba:8e:03:47:
65:b8:e1:60:9a:60:22:74:8d:c5:e8:be:3c:56:a2:
ef:50:60:7b:91:4b:44:b4:73:81:f9:2a:82:a9:3a:
0a:7c:b1:53:a6:e7:31:d2:c1:37:16:29:55:02:c4:
d8:d7:a4:74:b2:e2:84:d3:a7:d3:87:48:c8:38:34:
f7:72:9b:41:1b:5e:59:b4:81:1a:f5:44:34:d3:0f:
c8:a6:b9:7c:90:dd:b4:cc:ef:76:17:c8:f3:8d:3e:
12:76:f5:ec:20:61:ef:d0:56:b7:27:57:f7:ba:a0:
41:ca:db:be:1c:35:07:5b:84:7c:86:48:d1:d5:d1:
b9:ba:0b:06:c6:90:17:16:ad:4a:b4:02:2c:06:da:
a3:c1:6f:c0:4e:2e:1e:19:60:8f:f2:ca:2b:0a:41:
db:bf:a2:a4:aa:af:4b:cb:66:77:c8:65:2a:e6:f5:
0c:87:98:0b:08:66:2c:8b:0e:33:cc:b6:21:57:c5:
37:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:BB:78:37:09:6E:20:7A:9C:17:C8:B4:C6:27:FB:B3:9E:F9:22:5B
X509v3 Authority Key Identifier:
keyid:76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/nrt4NwluIHqcF8i0xif7s575Ils.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.88.0/24
89.23.91.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:15:02:23:ae:2b:49:e7:2a:a7:c3:be:f6:f2:7f:42:fd:49:
8f:df:1f:f7:59:41:f2:ae:48:44:35:ac:56:b9:6c:47:20:e0:
7b:22:ff:64:04:78:e6:9e:6e:b7:2f:c2:80:63:07:6b:25:a2:
70:84:0b:9a:38:43:97:eb:07:31:69:1f:6b:27:9f:40:1a:60:
71:05:ec:eb:80:89:3d:d7:5d:a6:99:d2:60:5b:ff:fe:59:f6:
28:6a:6c:c7:18:38:5c:c7:e6:b3:16:9f:24:1a:56:db:13:45:
10:45:ae:c8:05:74:6c:eb:27:48:da:79:a8:5f:58:a3:c0:56:
7a:50:06:f3:d4:c1:3f:03:96:e5:fe:9c:a8:a3:17:de:ee:88:
c9:00:95:0a:45:2a:c1:4b:7e:72:4d:93:72:cb:55:dc:02:78:
cc:22:70:05:f1:b8:d6:5f:1b:4a:69:75:19:60:4b:58:42:f8:
11:6f:ca:22:a9:c8:e2:fb:40:de:4b:c2:15:86:7f:7b:74:75:
b3:a8:46:ba:2a:84:e4:44:7f:77:78:85:1a:89:31:cd:f4:20:
82:51:4c:e1:94:0c:e7:61:65:10:0a:f4:b4:c3:71:4d:4e:0d:
35:65:ce:b3:ec:d9:3d:f4:d8:d4:cd:3c:d4:7c:e3:16:79:c2:
f4:6e:e0:77
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYSto+jCR9Tj6HCXGkJnKHB0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2NGY4ZGFhZGYxZDc3NWQ1OWQxNTAyYjU3MzkwMWI4NzU1
MTNiNTYwHhcNMjIxMTI1MDcxNTExWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZWJiNzgzNzA5NmUyMDdhOWMxN2M4YjRjNjI3ZmJiMzllZjkyMjViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5bRQQISby7aozNFhHmQpXzRgHjAq
1dXUNwq4xiIoAvzNExtxoGDUJvDiqSUSU+pIwOB9MWZbulmECcaMpRrFfbZ6L/7I
PbqOA0dluOFgmmAidI3F6L48VqLvUGB7kUtEtHOB+SqCqToKfLFTpucx0sE3FilV
AsTY16R0suKE06fTh0jIODT3cptBG15ZtIEa9UQ00w/Iprl8kN20zO92F8jzjT4S
dvXsIGHv0Fa3J1f3uqBBytu+HDUHW4R8hkjR1dG5ugsGxpAXFq1KtAIsBtqjwW/A
Ti4eGWCP8sorCkHbv6Kkqq9Ly2Z3yGUq5vUMh5gLCGYsiw4zzLYhV8U3pwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFJ67eDcJbiB6nBfItMYn+7Oe+SJbMB8GA1UdIwQY
MBaAFHZPjarfHXddWdFQK1c5Abh1UTtWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGstTnF0OGRkMTFaMFZBclZ6a0J1SFZSTzFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC83YjkyYmYtMDExYi00NGE3LTgzODIt
YmZiMmI4ODE1ZTQ5LzEvbnJ0NE53bHVJSHFjRjhpMHhpZjdzNTc1SWxzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC83YjkyYmYtMDExYi00NGE3LTgzODItYmZiMmI4ODE1ZTQ5
LzEvZGstTnF0OGRkMTFaMFZBclZ6a0J1SFZSTzFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAWRdYAwQA
WRdbMA0GCSqGSIb3DQEBCwUAA4IBAQBOFQIjritJ5yqnw7728n9C/UmP3x/3WUHy
rkhENaxWuWxHIOB7Iv9kBHjmnm63L8KAYwdrJaJwhAuaOEOX6wcxaR9rJ59AGmBx
BezrgIk9112mmdJgW//+WfYoamzHGDhcx+azFp8kGlbbE0UQRa7IBXRs6ydI2nmo
X1ijwFZ6UAbz1ME/A5bl/pyooxfe7ojJAJUKRSrBS35yTZNyy1XcAnjMInAF8bjW
XxtKaXUZYEtYQvgRb8oiqcji+0DeS8IVhn97dHWzqEa6KoTkRH93eIUaiTHN9CCC
UUzhlAznYWUQCvS0w3FNTg01Zc6z7Nk99NjUzTzUfOMWecL0buB3
-----END CERTIFICATE-----
Generated at Tue Apr 22 02:13:14 2025 by rpki-client