Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/v69tJ4rPw9lWPuyglp3lIm3mO5k.roa
File: v69tJ4rPw9lWPuyglp3lIm3mO5k.roa (raw, json)
Hash identifier: Lgj3soW6J8k8bldY127drKepPyv4oIjzkiMYyCAllbM=
Subject key identifier: BF:AF:6D:27:8A:CF:C3:D9:56:3E:EC:A0:96:9D:E5:22:6D:E6:3B:99
Certificate issuer: /CN=764f8daadf1d775d59d1502b573901b875513b56
Certificate serial: 01880F8DC6016874D68FDDE019689DC3ECCB
Authority key identifier: 76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/v69tJ4rPw9lWPuyglp3lIm3mO5k.roa
Signing time: Fri 12 May 2023 10:42:09 +0000
ROA not before: Fri 12 May 2023 10:42:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 89.23.92.0/24 maxlen: 24
89.23.86.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:0f:8d:c6:01:68:74:d6:8f:dd:e0:19:68:9d:c3:ec:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=764f8daadf1d775d59d1502b573901b875513b56
Validity
Not Before: May 12 10:42:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bfaf6d278acfc3d9563eeca0969de5226de63b99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:70:62:36:b7:d4:10:9c:38:fd:6e:06:9f:45:
0f:ed:bb:4b:db:8c:49:24:3b:76:f6:a6:17:4a:a5:
98:90:e7:ec:dd:53:5a:53:fa:c0:73:9a:25:c5:66:
6b:a7:bb:a3:d1:48:b5:a8:3c:3c:8a:0c:4f:71:82:
87:a6:35:1e:bb:99:72:eb:cb:f2:6c:ac:6c:b8:7e:
91:16:69:a3:19:c5:4f:7e:ea:d5:e3:b5:c6:95:14:
6e:63:a3:5a:de:90:41:06:7f:40:f0:88:46:24:bf:
51:62:a0:a1:10:88:72:d7:94:0f:9f:c3:51:ec:f7:
9c:36:69:44:b9:79:35:51:40:eb:4c:1a:6c:33:e9:
b4:f4:32:22:25:e8:2f:22:c2:a5:83:20:16:94:21:
a1:4f:83:81:5a:08:69:57:af:f1:5c:b6:53:5c:1e:
ee:df:ab:83:e5:e6:9a:19:25:ab:70:99:3f:70:e2:
20:21:f6:12:d6:ef:f7:59:03:26:29:ac:58:a9:3e:
b8:d3:18:53:30:27:07:57:85:e2:4f:2e:c3:7c:af:
46:58:0f:d1:7f:d4:7d:b3:02:21:40:da:14:2e:a4:
af:11:26:c3:1b:c4:c8:99:f6:3e:35:70:78:69:26:
e7:53:63:41:5d:34:d8:ff:01:c5:d2:72:43:3d:e6:
21:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:AF:6D:27:8A:CF:C3:D9:56:3E:EC:A0:96:9D:E5:22:6D:E6:3B:99
X509v3 Authority Key Identifier:
keyid:76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/v69tJ4rPw9lWPuyglp3lIm3mO5k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.86.0/24
89.23.92.0/24
Signature Algorithm: sha256WithRSAEncryption
39:ec:17:c4:f4:d2:da:7c:6f:f5:90:cf:02:c7:3d:8f:b8:df:
a6:a8:7e:7f:5b:12:06:c2:b3:71:7e:e9:8d:93:0e:67:8b:a8:
10:0c:ad:4a:48:65:75:2a:b6:9f:b9:20:57:bd:9d:06:32:11:
e2:7c:d1:b3:f0:19:f2:54:8d:0d:d6:e2:47:2b:e9:a0:30:c9:
17:d6:74:ad:d4:52:06:2e:9c:54:19:6a:42:7d:dc:12:98:cd:
fd:ac:6d:e2:b9:18:01:30:d5:e4:5a:8f:ba:a4:72:ea:b1:32:
0f:53:36:14:f5:97:18:fa:e6:a6:41:55:69:a4:51:d4:7a:14:
59:93:0f:06:48:74:21:2f:58:00:d0:b7:f8:14:72:e0:1e:06:
80:79:49:61:17:21:cb:8a:b2:2e:28:ca:5b:4c:11:8f:34:a1:
7f:d3:c2:07:2f:b5:d0:2e:61:e5:d0:7a:7d:4d:bf:88:ce:08:
40:41:e4:9f:00:29:a0:37:c7:39:2a:3e:17:3a:1e:ef:be:b3:
cd:c2:57:9a:03:59:e6:e0:95:01:95:b5:1c:35:c8:09:13:43:
65:c6:70:8a:c7:be:aa:a3:ae:e0:f8:a9:26:e5:9e:b0:55:ca:
2c:27:6b:60:b0:18:ba:b2:c8:ab:b9:10:c8:50:fe:a3:66:45:
ea:84:44:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 22:27:47 2025 by rpki-client