Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/uxzJze6rsSJdJWD8-b-2d7NUUfY.roa
File: uxzJze6rsSJdJWD8-b-2d7NUUfY.roa (raw, json)
Hash identifier: 07/Tk1UNVNiySfpScIwEKuiYNDLw7uKSpJBcosdB888=
Subject key identifier: BB:1C:C9:CD:EE:AB:B1:22:5D:25:60:FC:F9:BF:B6:77:B3:54:51:F6
Certificate issuer: /CN=764f8daadf1d775d59d1502b573901b875513b56
Certificate serial: 018775DE63F3FF97997E790E48551BBC2984
Authority key identifier: 76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/uxzJze6rsSJdJWD8-b-2d7NUUfY.roa
Signing time: Wed 12 Apr 2023 14:28:41 +0000
ROA not before: Wed 12 Apr 2023 14:28:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 89.23.92.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:75:de:63:f3:ff:97:99:7e:79:0e:48:55:1b:bc:29:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=764f8daadf1d775d59d1502b573901b875513b56
Validity
Not Before: Apr 12 14:28:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bb1cc9cdeeabb1225d2560fcf9bfb677b35451f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:48:95:df:57:41:50:2d:b3:a4:4a:76:b5:ac:
3f:b7:d2:7c:78:c7:36:bc:78:0e:ee:63:59:76:5e:
24:48:50:0c:6f:ed:47:99:ab:85:19:b9:f0:40:91:
f5:1a:ab:8a:e3:d9:a7:38:02:1c:df:80:93:78:c4:
1b:07:da:11:6b:94:01:9f:aa:31:aa:53:db:0e:ae:
1f:32:f4:41:bf:82:a4:29:42:91:86:cd:9f:86:eb:
25:0d:05:d7:a6:c3:8a:6f:a4:b9:de:39:f1:99:48:
d9:83:d8:73:71:00:59:27:42:d5:f2:93:07:d7:70:
5d:74:23:ff:f1:ab:58:73:db:4f:85:bf:67:4d:14:
47:9a:a4:6b:13:5f:c6:df:5c:a0:be:9e:9b:59:0e:
6e:6a:7f:72:31:16:6f:0e:3d:00:18:e8:a8:3b:e9:
ed:01:2a:c8:27:05:f8:a5:77:f7:b6:3e:04:91:b0:
a2:f2:c6:ac:a9:91:90:7d:5c:4e:af:58:b7:0f:a0:
85:97:7f:0e:7c:54:74:0f:c9:8a:84:6d:59:81:e1:
a2:59:6e:90:7c:51:06:0a:b5:ed:4a:1d:6b:f8:96:
26:3a:c5:da:58:33:32:2f:45:a6:5a:47:d9:83:fb:
f4:8e:8c:50:44:ab:81:b6:f2:d0:5e:30:aa:df:1b:
1f:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:1C:C9:CD:EE:AB:B1:22:5D:25:60:FC:F9:BF:B6:77:B3:54:51:F6
X509v3 Authority Key Identifier:
keyid:76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/uxzJze6rsSJdJWD8-b-2d7NUUfY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.92.0/24
Signature Algorithm: sha256WithRSAEncryption
45:86:61:d0:b8:85:53:11:b4:a7:79:9c:c1:59:03:5d:93:9a:
8f:5d:ee:6a:f4:0a:b2:ef:78:4f:8b:c9:01:b4:29:dc:35:10:
f3:31:56:89:69:86:0e:d0:8d:ce:3d:9a:d4:89:ec:63:b4:a9:
ac:fb:e4:aa:26:5e:7a:e0:71:f7:87:08:dc:ee:1d:1e:8f:d7:
54:17:f2:3d:d9:ad:d5:89:9d:c4:4d:40:bc:0d:5e:59:42:47:
b6:d7:e0:65:a2:fc:4f:5f:df:47:a8:8a:2b:bd:72:18:ba:9f:
5f:5d:3e:d7:4d:59:74:4b:37:57:a2:9d:7e:a3:9f:58:65:80:
b7:fd:7b:bc:70:e8:93:56:5a:6e:3f:af:56:21:7d:1a:28:e3:
86:57:de:5a:6e:d4:e1:e3:d0:d0:d0:8a:fb:60:c8:25:4e:6c:
f9:d9:3b:f4:31:14:05:52:f3:c4:1b:fd:71:3c:cc:9d:89:1a:
5a:d0:f5:ea:66:97:4a:fe:c1:1d:78:31:11:a2:25:7f:92:66:
17:4b:ca:4f:cd:01:4f:3e:f7:3f:6b:27:63:3f:da:33:47:d4:
80:f3:9e:47:e0:ce:6e:a0:97:0b:8f:7a:17:10:97:5d:b0:a7:
ea:47:f0:b9:17:b3:c0:27:61:88:15:60:32:d1:1a:41:d7:05:
84:1f:50:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 10:39:55 2025 by rpki-client