Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/qJTllVNtLxLpu0LHcJyMflmXm2M.roa
File: qJTllVNtLxLpu0LHcJyMflmXm2M.roa (raw, json)
Hash identifier: uPiiyzOS4Rfc4IYbAWvLHR/f0ry01g/cSorp7Ou+lw8=
Subject key identifier: A8:94:E5:95:53:6D:2F:12:E9:BB:42:C7:70:9C:8C:7E:59:97:9B:63
Certificate issuer: /CN=764f8daadf1d775d59d1502b573901b875513b56
Certificate serial: 01854DEAA6822E8400180D9E009E79DC5258
Authority key identifier: 76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/qJTllVNtLxLpu0LHcJyMflmXm2M.roa
Signing time: Mon 26 Dec 2022 10:11:41 +0000
ROA not before: Mon 26 Dec 2022 10:11:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 178.254.150.0/24 maxlen: 24
89.23.77.0/24 maxlen: 24
89.23.84.0/24 maxlen: 24
89.23.85.0/24 maxlen: 24
89.23.79.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:4d:ea:a6:82:2e:84:00:18:0d:9e:00:9e:79:dc:52:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=764f8daadf1d775d59d1502b573901b875513b56
Validity
Not Before: Dec 26 10:11:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a894e595536d2f12e9bb42c7709c8c7e59979b63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ce:86:0b:8d:40:96:48:f4:27:86:24:f2:6c:
aa:e9:92:3c:96:ff:c5:b4:d7:b9:3a:b1:f8:c8:a3:
e5:e8:23:bd:c9:4c:a4:a3:ae:83:9f:5e:bc:f8:3c:
5a:7a:11:24:e1:04:99:70:5b:8c:72:26:3e:75:e7:
fe:68:d7:22:24:05:22:a2:2d:81:40:68:09:ae:49:
71:19:9a:70:5a:c3:72:5c:90:6c:64:7a:0c:75:21:
5b:12:17:51:b4:39:56:c5:0d:11:c1:9b:1c:e0:56:
41:a9:b4:a8:f7:1e:93:bd:f4:6b:a8:a3:1b:e9:e5:
b6:d0:7e:61:72:f7:da:48:d7:ad:7f:1a:65:6f:b6:
ee:44:af:63:42:5e:6c:a3:7e:6c:a0:2c:d4:f9:7f:
35:0b:a5:9d:ae:b4:ef:20:2a:11:8d:c1:ae:84:8c:
70:da:46:85:3d:2b:b9:ed:5c:aa:ea:95:b5:76:aa:
a1:3c:7d:c4:20:1c:f6:43:c5:c3:fd:e0:84:84:22:
b0:fd:55:28:f7:19:d2:57:39:5a:b0:3a:50:a1:90:
a5:a3:9b:2c:c5:b3:29:aa:54:86:7f:47:97:d5:47:
74:2b:07:63:29:55:94:26:e5:34:74:f4:c7:65:73:
0b:6e:1c:03:5c:d7:4e:dd:6f:c9:ca:82:81:14:75:
7b:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:94:E5:95:53:6D:2F:12:E9:BB:42:C7:70:9C:8C:7E:59:97:9B:63
X509v3 Authority Key Identifier:
keyid:76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/qJTllVNtLxLpu0LHcJyMflmXm2M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.77.0/24
89.23.79.0/24
89.23.84.0/23
178.254.150.0/24
Signature Algorithm: sha256WithRSAEncryption
39:05:11:af:6e:a0:b9:2b:09:51:fc:ea:ec:69:12:29:de:0a:
1d:2e:a3:53:b2:45:fe:01:0f:b8:19:2c:55:a0:32:47:b1:0a:
cf:94:4a:27:fe:c8:f4:44:5c:cf:03:a1:5e:64:44:ef:d3:ec:
e6:88:4e:81:56:17:d8:de:9c:97:5c:df:62:8e:72:a7:e8:ad:
fb:57:ae:4e:ce:b0:b1:72:b2:35:ac:b2:98:6f:c1:c7:8f:60:
2e:47:74:4c:7c:d6:e8:8d:a6:a6:76:93:ce:ae:7c:48:ec:c7:
00:71:f6:59:f4:6a:ad:34:5c:fe:66:75:69:a2:f6:df:c2:0c:
99:2e:ff:9d:2c:51:c7:84:44:d6:6f:af:0e:97:0a:b6:99:f0:
1a:df:c4:12:44:a0:41:18:b8:42:6f:2f:23:f2:6b:58:6c:9f:
f8:63:87:55:be:af:4f:31:70:13:f7:21:94:85:f6:93:68:d6:
2d:f9:34:75:64:4b:a5:29:2f:07:49:bd:00:17:bf:e5:48:60:
52:0d:33:f2:61:07:8e:78:17:58:a4:fc:0d:b6:b1:af:79:99:
50:29:a3:15:9e:cb:1c:8c:87:c1:7c:d3:0a:26:20:e7:06:21:
54:0e:0f:47:57:03:09:35:9a:d4:a7:fc:c5:46:3f:c2:84:d8:
f3:ed:6b:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 05:12:02 2025 by rpki-client