Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/6Sjk2oiGGd2JdHgyQPSBc1tmkrc.roa
File: 6Sjk2oiGGd2JdHgyQPSBc1tmkrc.roa (raw, json)
Hash identifier: 1CnC0ItRS6fg3ZlhY12qVdbW9KXyJhRSs8kSPLHbWT0=
Subject key identifier: E9:28:E4:DA:88:86:19:DD:89:74:78:32:40:F4:81:73:5B:66:92:B7
Certificate issuer: /CN=764f8daadf1d775d59d1502b573901b875513b56
Certificate serial: 01884800B082DA50544F4063472D768B1317
Authority key identifier: 76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/6Sjk2oiGGd2JdHgyQPSBc1tmkrc.roa
Signing time: Tue 23 May 2023 09:46:24 +0000
ROA not before: Tue 23 May 2023 09:46:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 89.23.92.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:48:00:b0:82:da:50:54:4f:40:63:47:2d:76:8b:13:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=764f8daadf1d775d59d1502b573901b875513b56
Validity
Not Before: May 23 09:46:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e928e4da888619dd8974783240f481735b6692b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f5:69:66:90:8a:bd:35:5a:97:ee:2c:96:50:
6b:64:58:58:ce:d3:9b:12:16:d1:7e:3d:24:d5:c3:
bc:4c:9f:70:cb:80:ba:15:c8:f6:6b:12:8f:a3:cc:
b3:cb:59:34:8c:0e:e7:bf:3b:36:a2:9e:1c:21:f2:
12:9b:5f:f4:c3:61:1b:2a:c3:40:d0:2a:45:ee:05:
fe:f0:08:bb:88:a0:ee:b6:c0:43:66:40:74:3d:34:
69:9f:fe:51:66:1f:c6:c6:cb:e4:77:40:e0:a6:c7:
14:da:70:94:e8:76:31:cc:cc:2f:63:24:f9:25:08:
53:93:02:49:a0:2a:d5:ac:18:b6:72:8a:50:76:b1:
b7:ba:84:bc:5f:7d:c6:91:ff:c1:95:a7:0f:88:21:
a2:9d:c2:b4:75:16:3e:0a:80:02:52:5d:33:86:94:
93:32:ac:2d:49:83:6d:71:cf:8e:4f:ce:2d:cb:3f:
c7:b6:76:32:f0:3b:80:53:28:c0:65:2f:51:93:92:
91:db:17:28:bc:9d:82:5a:c9:6f:10:99:b0:97:1a:
ac:2c:62:79:22:59:52:38:7f:17:c9:3d:d6:bf:29:
c3:7d:d2:dc:bb:2d:01:e6:9f:06:5a:a2:fd:5a:d1:
3d:4f:a5:01:3a:45:33:9a:3e:b7:c5:47:ed:93:8e:
37:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:28:E4:DA:88:86:19:DD:89:74:78:32:40:F4:81:73:5B:66:92:B7
X509v3 Authority Key Identifier:
keyid:76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/6Sjk2oiGGd2JdHgyQPSBc1tmkrc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.92.0/24
Signature Algorithm: sha256WithRSAEncryption
52:f5:26:89:7e:1f:c5:de:55:1b:e9:12:28:96:13:19:e7:e9:
7f:a4:7b:d5:77:58:ce:a8:cf:ae:46:f9:3a:7a:d0:bd:dc:1d:
74:5c:ae:a0:e3:e7:98:8d:93:2e:93:5f:0d:e2:a2:9d:c1:c0:
c3:cc:c1:b4:76:8e:ca:21:7d:47:83:5a:5d:6f:47:82:63:b0:
a6:b4:e4:2a:73:13:9f:2a:ac:71:7b:b9:b4:f9:11:b1:9f:4b:
8c:fc:ca:0a:95:0f:1b:7b:cf:1a:37:ae:b6:38:23:21:e5:b4:
2a:91:c3:6a:c7:7e:e9:58:a5:2f:c7:32:bf:f5:ab:cb:96:0a:
bb:bf:31:e2:54:3e:8a:fb:ed:d1:96:12:14:8a:64:cd:41:96:
f7:95:8f:c9:c4:92:7c:10:c5:68:55:23:b9:69:98:2c:66:57:
4c:b9:e6:7c:16:d9:77:cd:9a:29:53:8b:a7:a8:23:9b:15:50:
ca:f4:2f:c6:2c:76:9c:ef:24:57:3a:5d:75:97:df:29:7c:25:
81:93:e2:44:fe:56:9f:8e:c4:23:84:6f:b9:ab:27:5b:96:49:
0f:9f:15:65:80:a4:a1:5e:71:ba:2a:d1:b9:45:8b:8a:a6:d7:
24:1c:43:aa:36:a0:26:88:36:e9:d9:00:f1:65:bd:b6:f3:23:
ec:b8:2e:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 14:24:55 2025 by rpki-client