Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/pYmdgO1QTSi05irOv_yV3sAW_YQ.roa
File: pYmdgO1QTSi05irOv_yV3sAW_YQ.roa (raw, json)
Hash identifier: BgiDutagNv0tQBtG3O+AK+s2Al4yOdBuvcJa+1Mtq0U=
Subject key identifier: A5:89:9D:80:ED:50:4D:28:B4:E6:2A:CE:BF:FC:95:DE:C0:16:FD:84
Certificate issuer: /CN=764f8daadf1d775d59d1502b573901b875513b56
Certificate serial: 0187704177456A107C5FBAD3D0E618554BEA
Authority key identifier: 76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/pYmdgO1QTSi05irOv_yV3sAW_YQ.roa
Signing time: Tue 11 Apr 2023 12:19:11 +0000
ROA not before: Tue 11 Apr 2023 12:19:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 89.23.92.0/24 maxlen: 24
89.23.90.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:70:41:77:45:6a:10:7c:5f:ba:d3:d0:e6:18:55:4b:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=764f8daadf1d775d59d1502b573901b875513b56
Validity
Not Before: Apr 11 12:19:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a5899d80ed504d28b4e62acebffc95dec016fd84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:71:6d:83:e4:2a:05:cf:8f:cf:e3:5c:1b:f2:
a0:a0:dd:4d:08:29:31:d1:ba:82:06:02:94:95:f6:
51:5e:8c:2c:38:6f:18:13:b8:2d:52:8a:79:96:3c:
39:bb:61:4b:06:c8:b3:d9:8c:f0:25:95:30:16:20:
06:73:39:10:47:e3:94:ee:fd:7e:26:bc:8e:b0:b1:
8d:4a:c9:56:c5:ab:11:1e:4e:83:e7:c2:1c:e2:13:
a5:36:e8:c7:6a:0a:1e:9e:df:8a:a5:ac:ac:e9:3f:
9e:cb:32:b4:46:08:a5:c2:d7:69:aa:ef:56:26:9e:
11:8b:42:9d:d4:69:e7:4d:25:0a:32:fa:38:94:80:
d2:74:20:4e:b1:d0:9e:b9:b2:fb:c1:e7:95:75:d0:
76:40:c1:77:ac:96:06:b4:60:d2:02:ad:3a:69:64:
80:17:db:3b:16:68:68:34:b3:de:4c:3a:e4:d0:6d:
86:17:06:9f:35:44:43:67:a4:20:32:d8:5d:81:a9:
b5:d4:87:ea:b7:bd:4b:67:b0:7a:11:9e:af:26:a7:
06:3a:c3:c4:14:22:30:a4:ee:2c:4b:56:30:e4:25:
c3:37:67:ed:6b:e3:e0:df:7a:e9:e2:67:2c:f4:89:
c0:86:17:7d:63:39:82:72:46:fb:13:44:5f:f3:8d:
b5:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:89:9D:80:ED:50:4D:28:B4:E6:2A:CE:BF:FC:95:DE:C0:16:FD:84
X509v3 Authority Key Identifier:
keyid:76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/pYmdgO1QTSi05irOv_yV3sAW_YQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.90.0/24
89.23.92.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:f2:bb:6e:c1:bb:39:1b:b9:c1:97:19:e9:45:3d:bb:30:cb:
08:fc:e1:40:ac:f2:4c:b3:e1:c9:89:c7:f1:70:ca:0c:c6:c9:
da:1d:d6:87:3a:15:e9:4a:f3:d2:4c:04:51:ab:b3:ef:75:b9:
11:56:52:e5:e5:4b:34:9e:c4:e1:66:f7:50:2f:16:89:f1:c3:
cb:69:1d:d7:51:6f:26:f9:77:ee:06:bb:36:71:17:6b:35:a8:
2f:1d:a2:80:74:6f:0e:3c:ca:80:6c:d4:bf:47:1f:cc:78:12:
ec:45:62:4c:7f:7f:1b:fa:7c:ca:c2:7e:5c:09:4a:e3:55:24:
98:7e:b0:e7:eb:70:ee:d8:a4:01:f0:29:6a:46:d9:3a:78:4e:
0a:66:a8:c6:fa:4d:56:d5:4a:be:dc:95:78:a3:14:ad:1a:6e:
46:dd:41:ec:8a:14:48:59:f3:af:5f:6b:d9:ab:4d:4b:42:29:
13:d0:45:cb:85:97:0e:ee:53:93:ea:12:5e:c3:09:6e:2c:fd:
7e:e7:47:10:47:6d:ee:2a:8d:d7:17:15:ec:92:8c:ef:99:ee:
64:2b:24:19:9b:c9:55:8b:a2:7c:37:7e:02:ba:06:26:26:e7:
7d:dd:6a:5d:57:07:05:01:7e:84:46:dd:c2:4d:99:db:a3:9f:
e9:56:7a:7d
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYdwQXdFahB8X7rT0OYYVUvqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2NGY4ZGFhZGYxZDc3NWQ1OWQxNTAyYjU3MzkwMWI4NzU1
MTNiNTYwHhcNMjMwNDExMTIxOTExWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNTg5OWQ4MGVkNTA0ZDI4YjRlNjJhY2ViZmZjOTVkZWMwMTZmZDg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkXFtg+QqBc+Pz+NcG/KgoN1NCCkx
0bqCBgKUlfZRXowsOG8YE7gtUop5ljw5u2FLBsiz2YzwJZUwFiAGczkQR+OU7v1+
JryOsLGNSslWxasRHk6D58Ic4hOlNujHagoent+Kpays6T+eyzK0Rgilwtdpqu9W
Jp4Ri0Kd1GnnTSUKMvo4lIDSdCBOsdCeubL7weeVddB2QMF3rJYGtGDSAq06aWSA
F9s7FmhoNLPeTDrk0G2GFwafNURDZ6QgMthdgam11Ifqt71LZ7B6EZ6vJqcGOsPE
FCIwpO4sS1Yw5CXDN2fta+Pg33rp4mcs9InAhhd9YzmCckb7E0Rf8421MQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFKWJnYDtUE0otOYqzr/8ld7AFv2EMB8GA1UdIwQY
MBaAFHZPjarfHXddWdFQK1c5Abh1UTtWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGstTnF0OGRkMTFaMFZBclZ6a0J1SFZSTzFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC83YjkyYmYtMDExYi00NGE3LTgzODIt
YmZiMmI4ODE1ZTQ5LzEvcFltZGdPMVFUU2kwNWlyT3ZfeVYzc0FXX1lRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC83YjkyYmYtMDExYi00NGE3LTgzODItYmZiMmI4ODE1ZTQ5
LzEvZGstTnF0OGRkMTFaMFZBclZ6a0J1SFZSTzFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAWRdaAwQA
WRdcMA0GCSqGSIb3DQEBCwUAA4IBAQBa8rtuwbs5G7nBlxnpRT27MMsI/OFArPJM
s+HJicfxcMoMxsnaHdaHOhXpSvPSTARRq7PvdbkRVlLl5Us0nsThZvdQLxaJ8cPL
aR3XUW8m+XfuBrs2cRdrNagvHaKAdG8OPMqAbNS/Rx/MeBLsRWJMf38b+nzKwn5c
CUrjVSSYfrDn63Du2KQB8ClqRtk6eE4KZqjG+k1W1Uq+3JV4oxStGm5G3UHsihRI
WfOvX2vZq01LQikT0EXLhZcO7lOT6hJewwluLP1+50cQR23uKo3XFxXskozvme5k
KyQZm8lVi6J8N34CugYmJud93WpdVwcFAX6ERt3CTZnbo5/pVnp9
-----END CERTIFICATE-----
Generated at Sun Apr 20 22:45:59 2025 by rpki-client