Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/xRAVlriM197nXGhYkurNPnmzsqo.roa
File: xRAVlriM197nXGhYkurNPnmzsqo.roa (raw, json)
Hash identifier: +/fIekS2/w7sib/35+H7BFVlQee61X67gi86zC7uqUo=
Subject key identifier: C5:10:15:96:B8:8C:D7:DE:E7:5C:68:58:92:EA:CD:3E:79:B3:B2:AA
Certificate issuer: /CN=764f8daadf1d775d59d1502b573901b875513b56
Certificate serial: 01856D11D6C925B2F5F6EFF2E9E60DAD27FE
Authority key identifier: 76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/xRAVlriM197nXGhYkurNPnmzsqo.roa
Signing time: Sun 01 Jan 2023 11:22:43 +0000
ROA not before: Sun 01 Jan 2023 11:22:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 52116
IP address blocks: 178.254.165.0/24 maxlen: 24
178.254.170.0/24 maxlen: 24
178.254.180.0/24 maxlen: 24
178.254.181.0/24 maxlen: 24
178.254.183.0/24 maxlen: 24
89.23.71.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:11:d6:c9:25:b2:f5:f6:ef:f2:e9:e6:0d:ad:27:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=764f8daadf1d775d59d1502b573901b875513b56
Validity
Not Before: Jan 1 11:22:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c5101596b88cd7dee75c685892eacd3e79b3b2aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ba:ac:8b:1f:3d:42:dc:54:d2:37:b1:69:af:
f0:34:fc:13:de:02:15:f3:0c:0b:ae:0c:08:2d:5a:
a7:e9:92:05:31:dc:c5:33:4b:ad:d4:ee:16:91:5a:
b2:53:af:d1:eb:2b:79:98:c2:07:02:19:e0:cc:bd:
03:39:d8:b3:76:28:f6:c9:2a:cf:8f:54:35:79:ec:
bc:11:e2:46:42:56:db:c3:81:df:7c:be:f7:9a:14:
8c:6c:ee:92:90:42:68:cf:1c:d6:d4:07:a2:6b:67:
b9:71:f5:15:b7:3f:ca:a3:85:c7:16:0d:e2:01:ed:
ba:ba:e4:9a:1c:83:8f:be:12:88:43:5b:e2:50:02:
f4:5a:7e:95:ec:6d:d3:de:85:cc:2e:c4:29:0d:51:
e0:ab:7e:72:45:cb:5e:c1:75:b9:68:7e:fa:9f:64:
a2:5a:78:2d:7d:a1:08:19:e2:45:c5:c5:d7:a5:76:
4c:c6:4c:3b:a4:05:31:f3:a3:bb:98:d9:43:cb:89:
9e:10:b3:05:c1:f9:e6:13:01:a3:aa:1f:b3:ee:96:
96:9a:e7:7c:be:8d:32:e3:ea:77:2d:96:2d:b3:c6:
3e:a5:89:86:04:2f:a0:07:87:66:cd:3c:f4:75:00:
19:2e:c2:71:83:c8:c9:03:84:b6:df:62:b1:c6:91:
3e:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:10:15:96:B8:8C:D7:DE:E7:5C:68:58:92:EA:CD:3E:79:B3:B2:AA
X509v3 Authority Key Identifier:
keyid:76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/xRAVlriM197nXGhYkurNPnmzsqo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.71.0/24
178.254.165.0/24
178.254.170.0/24
178.254.180.0/23
178.254.183.0/24
Signature Algorithm: sha256WithRSAEncryption
93:cb:02:a5:4e:97:f1:1e:d9:8c:43:9e:7b:a3:9f:c5:3b:6d:
e1:de:a7:64:4d:e7:a6:a4:cf:b4:6b:98:7c:26:57:1b:93:c8:
4c:91:22:a2:ef:fa:ac:11:e4:e1:e9:23:5d:91:0a:50:85:03:
f2:73:31:21:f9:7b:98:16:dc:6a:e7:e7:d9:a5:d1:63:79:aa:
2f:a7:e2:d7:7e:6d:93:86:dc:a5:f3:de:44:84:13:df:75:ad:
f7:f6:35:c1:59:10:6f:68:45:ed:b1:75:fe:b5:2e:e7:74:35:
73:23:a2:1c:55:41:f3:64:49:79:7b:d9:8c:4f:ca:fd:fd:43:
59:39:86:7e:eb:e5:97:ef:ae:84:56:66:93:c1:72:95:6e:a8:
04:db:01:9a:a6:ae:4e:59:7a:07:f3:6c:7a:4d:ab:bd:ff:73:
1c:87:6b:c4:7f:87:aa:35:ec:db:71:18:87:bb:cd:90:36:ee:
99:d2:85:9b:f9:9e:76:2a:11:63:86:86:7d:a3:1a:a0:82:bf:
4f:a6:7f:84:65:45:af:4e:2e:1e:51:9e:b4:c8:62:26:56:d3:
33:5b:99:9b:ae:70:f8:a9:de:86:a7:a8:65:3d:03:1e:a3:7d:
91:6f:23:1d:11:55:ea:55:2b:d6:82:f3:97:7c:12:b3:3f:6a:
8d:fb:11:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 16:15:29 2025 by rpki-client