Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/x0i4B0PGPpcz1aGxA9XWF7TdiCk.roa
File: x0i4B0PGPpcz1aGxA9XWF7TdiCk.roa (raw, json)
Hash identifier: poQ8teTjF+ewBdZFgFG0ISYKbwQVXlyeuBgVlDtUwWw=
Subject key identifier: C7:48:B8:07:43:C6:3E:97:33:D5:A1:B1:03:D5:D6:17:B4:DD:88:29
Certificate issuer: /CN=764f8daadf1d775d59d1502b573901b875513b56
Certificate serial: 01880B4B619016F9EADF6CB429A306C44C99
Authority key identifier: 76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/x0i4B0PGPpcz1aGxA9XWF7TdiCk.roa
Signing time: Thu 11 May 2023 14:51:09 +0000
ROA not before: Thu 11 May 2023 14:51:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 89.23.82.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:0b:4b:61:90:16:f9:ea:df:6c:b4:29:a3:06:c4:4c:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=764f8daadf1d775d59d1502b573901b875513b56
Validity
Not Before: May 11 14:51:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c748b80743c63e9733d5a1b103d5d617b4dd8829
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:17:8b:2d:af:c7:01:07:0c:4c:dc:34:e4:69:
eb:5b:24:a6:1a:fe:bc:0c:30:73:3a:b7:51:32:83:
97:03:24:91:dc:ad:5f:14:5b:b4:0b:e1:68:f8:c4:
53:57:47:10:6c:1e:92:fb:1a:f7:7a:88:f1:66:8d:
01:c6:10:06:e9:30:44:90:4c:51:3b:23:8d:3f:f9:
d8:9b:64:f0:e8:aa:35:8c:ef:19:86:75:7d:fc:9b:
13:bb:0f:44:ee:7d:5c:c6:fa:e2:aa:b7:9b:92:69:
60:2e:b7:b7:54:28:3b:24:9d:88:55:b5:34:cf:f6:
95:0f:70:95:77:c5:ec:c8:4a:7d:27:1b:f3:ba:18:
8e:e9:94:b4:18:15:91:d9:e3:ac:84:41:ab:41:c9:
d7:d2:40:d9:3e:15:08:6b:3c:51:0c:d0:8c:a5:be:
69:31:4c:36:85:50:1b:bf:22:61:93:1d:c2:b6:b5:
7d:12:1c:df:1d:55:73:26:65:24:3b:fc:ee:08:5c:
3d:ac:c2:3c:09:13:3e:68:3b:ea:ea:2b:97:e0:ef:
27:9e:dc:c0:48:5f:f1:45:84:9b:cf:aa:07:ff:15:
04:9b:84:a9:58:a5:20:4a:0d:d1:70:3b:de:95:7d:
05:e0:ae:cc:dd:1e:e5:9f:ff:89:f5:3a:8a:df:4f:
1b:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:48:B8:07:43:C6:3E:97:33:D5:A1:B1:03:D5:D6:17:B4:DD:88:29
X509v3 Authority Key Identifier:
keyid:76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/x0i4B0PGPpcz1aGxA9XWF7TdiCk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.82.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:32:77:51:61:3a:69:0d:88:4b:46:a1:13:5c:ef:bf:4a:c8:
a8:4c:78:f4:91:0e:81:0f:1a:ef:1b:24:86:ea:93:d0:f9:1a:
7c:8d:d9:2b:57:ad:25:77:09:24:a6:cd:28:48:07:7b:7f:1b:
76:d6:91:fb:03:34:da:78:45:fa:55:b9:fc:c7:48:f2:13:bc:
00:a8:22:41:2c:c9:4f:68:61:a6:1d:47:43:91:ed:17:c0:99:
0b:b5:70:f7:4a:78:6d:e5:a8:f1:39:32:ec:7c:b5:b0:19:96:
b4:7f:ca:33:c7:d5:a6:9e:1a:95:13:9d:b0:8c:e6:7a:78:79:
07:39:74:a1:61:27:84:1f:af:9d:76:1f:ec:3f:4f:e1:54:33:
ad:9b:2f:51:1a:8b:cf:2d:2d:55:7d:a3:07:4f:ff:5c:07:64:
4f:a8:38:1a:1e:24:65:a0:67:09:98:37:29:b7:78:fa:b2:eb:
15:a4:01:ac:ed:74:3a:b8:30:b1:02:cf:de:3a:a1:26:86:a9:
4e:88:e2:08:60:1c:b0:5a:68:1f:71:6c:ac:cf:3a:0d:c5:79:
8e:a2:e7:96:06:38:06:eb:cf:7c:37:d4:54:62:2a:04:40:63:
17:9a:83:0b:3f:4e:35:3b:bd:99:4a:36:37:f7:bd:37:3a:5a:
12:ba:00:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 22:44:28 2025 by rpki-client