Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/3fjUANcbFZGduT-XGnTdTkssoFI.roa
File: 3fjUANcbFZGduT-XGnTdTkssoFI.roa (raw, json)
Hash identifier: LbW8yjfS54qRTT1MQwAUhya6aeSj/sUPQU3XUXXs4mA=
Subject key identifier: DD:F8:D4:00:D7:1B:15:91:9D:B9:3F:97:1A:74:DD:4E:4B:2C:A0:52
Certificate issuer: /CN=764f8daadf1d775d59d1502b573901b875513b56
Certificate serial: 077EB6DC
Authority key identifier: 76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/3fjUANcbFZGduT-XGnTdTkssoFI.roa
Signing time: Sat 01 Jan 2022 00:59:03 +0000
ROA not before: Sat 01 Jan 2022 00:59:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50781
IP address blocks: 89.23.70.0/24 maxlen: 24
89.23.65.0/24 maxlen: 24
89.23.74.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 125744860 (0x77eb6dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=764f8daadf1d775d59d1502b573901b875513b56
Validity
Not Before: Jan 1 00:59:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ddf8d400d71b15919db93f971a74dd4e4b2ca052
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:7e:b7:48:cc:08:a5:94:67:9d:2d:75:82:17:
7a:34:d1:81:e6:82:ab:13:25:b7:7e:0d:3e:8e:0b:
34:65:56:85:d9:3f:fa:10:e7:ae:9d:f5:37:0b:c5:
a1:80:01:a2:83:06:f1:69:a6:21:c0:48:8b:8d:49:
5f:39:34:68:d0:00:62:f1:99:7a:4a:22:9c:f3:25:
32:25:7a:a1:f0:65:27:0d:49:a7:c4:a4:ac:cc:d8:
62:14:31:93:e0:c3:7d:74:ab:1a:cf:e9:ce:65:62:
17:df:bf:16:25:1b:21:07:3d:09:5e:f0:e6:a3:38:
65:36:9f:f2:7e:8a:ae:d0:61:15:dd:f1:20:52:4e:
5a:01:66:d1:52:b7:f6:94:db:c7:c9:d5:d4:27:69:
6c:3e:89:66:01:5c:6b:e5:68:14:a5:19:ee:9e:aa:
51:1e:0d:be:57:17:53:74:60:d6:d4:e5:1a:bd:f7:
32:eb:e2:4d:dc:f0:09:57:e2:fc:92:57:f7:b2:0a:
62:a1:6e:89:5f:da:2d:f0:1a:47:fa:f1:9f:dd:49:
b0:42:7f:21:7b:6a:e6:6a:63:2d:7f:2d:13:b8:09:
f0:23:9d:ec:47:c5:a8:8c:6f:e9:cc:be:86:15:fe:
e0:3b:91:36:2c:37:4c:f2:96:87:33:12:44:7c:e8:
66:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:F8:D4:00:D7:1B:15:91:9D:B9:3F:97:1A:74:DD:4E:4B:2C:A0:52
X509v3 Authority Key Identifier:
keyid:76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/3fjUANcbFZGduT-XGnTdTkssoFI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.65.0/24
89.23.70.0/24
89.23.74.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:ce:28:fb:9a:ef:21:ed:ac:17:c6:49:ca:60:a8:8b:9a:4d:
bb:41:fb:25:9e:95:f2:67:ad:1e:b1:65:af:0c:36:80:3a:d8:
60:bd:a2:f2:24:4f:40:db:02:04:38:ad:df:0c:3c:16:df:4c:
33:67:20:0c:b6:6c:43:20:e4:68:1b:d2:7e:c3:27:90:05:46:
6e:3e:b0:c3:91:2a:b7:1d:28:62:7e:d2:4c:ee:eb:c1:71:20:
40:a7:82:ac:6f:25:ca:8a:59:0a:9e:9b:7d:8c:95:b2:b9:d4:
d6:ea:a8:f5:01:11:1c:fd:9b:fb:60:8c:88:d7:1c:28:0f:60:
f8:bf:3c:b3:1d:52:f9:bc:4b:62:3a:28:49:81:e4:18:cc:de:
33:09:9c:ae:45:ca:54:58:c2:37:3e:f5:dc:c4:71:d1:f3:38:
69:69:66:d2:42:ee:76:92:40:90:89:81:fc:a1:60:65:f1:4f:
95:a0:d1:04:da:49:aa:f4:af:79:2d:46:f3:7c:c3:ae:3c:8b:
b0:10:d7:05:1d:ab:ec:d9:c8:b4:9a:13:2b:4b:cf:5c:da:49:
0a:db:87:9f:b2:e7:42:a6:aa:32:5c:d7:29:83:8e:fc:f1:1d:
ef:5e:01:a7:e1:bf:6a:75:64:a8:dd:2d:e0:80:9f:5a:e5:37:
04:a6:cf:59
-----BEGIN CERTIFICATE-----
MIIE+zCCA+OgAwIBAgIEB3623DANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
NjRmOGRhYWRmMWQ3NzVkNTlkMTUwMmI1NzM5MDFiODc1NTEzYjU2MB4XDTIyMDEw
MTAwNTkwM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZGRmOGQ0MDBkNzFi
MTU5MTlkYjkzZjk3MWE3NGRkNGU0YjJjYTA1MjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJl+t0jMCKWUZ50tdYIXejTRgeaCqxMlt34NPo4LNGVWhdk/
+hDnrp31NwvFoYABooMG8WmmIcBIi41JXzk0aNAAYvGZekoinPMlMiV6ofBlJw1J
p8SkrMzYYhQxk+DDfXSrGs/pzmViF9+/FiUbIQc9CV7w5qM4ZTaf8n6KrtBhFd3x
IFJOWgFm0VK39pTbx8nV1CdpbD6JZgFca+VoFKUZ7p6qUR4NvlcXU3Rg1tTlGr33
MuviTdzwCVfi/JJX97IKYqFuiV/aLfAaR/rxn91JsEJ/IXtq5mpjLX8tE7gJ8COd
7EfFqIxv6cy+hhX+4DuRNiw3TPKWhzMSRHzoZu8CAwEAAaOCAhUwggIRMB0GA1Ud
DgQWBBTd+NQA1xsVkZ25P5cadN1OSyygUjAfBgNVHSMEGDAWgBR2T42q3x13XVnR
UCtXOQG4dVE7VjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2RrLU5xdDhkZDExWjBWQXJWemtCdUhWUk8xWS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZWQvN2I5MmJmLTAxMWItNDRhNy04MzgyLWJmYjJiODgxNWU0OS8x
LzNmalVBTmNiRlpHZHVULVhHblRkVGtzc29GSS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWQv
N2I5MmJmLTAxMWItNDRhNy04MzgyLWJmYjJiODgxNWU0OS8xL2RrLU5xdDhkZDEx
WjBWQXJWemtCdUhWUk8xWS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAr
BggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEAFkXQQMEAFkXRgMEAFkXSjANBgkq
hkiG9w0BAQsFAAOCAQEAoM4o+5rvIe2sF8ZJymCoi5pNu0H7JZ6V8metHrFlrww2
gDrYYL2i8iRPQNsCBDit3ww8Ft9MM2cgDLZsQyDkaBvSfsMnkAVGbj6ww5Eqtx0o
Yn7STO7rwXEgQKeCrG8lyopZCp6bfYyVsrnU1uqo9QERHP2b+2CMiNccKA9g+L88
sx1S+bxLYjooSYHkGMzeMwmcrkXKVFjCNz713MRx0fM4aWlm0kLudpJAkImB/KFg
ZfFPlaDRBNpJqvSveS1G83zDrjyLsBDXBR2r7NnItJoTK0vPXNpJCtuHn7LnQqaq
MlzXKYOO/PEd714Bp+G/anVkqN0t4ICfWuU3BKbPWQ==
-----END CERTIFICATE-----
Generated at Fri May 2 01:06:03 2025 by rpki-client