Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/gPrSN_iRTH8xGtsRc1WmUVUiRp4.roa
File: gPrSN_iRTH8xGtsRc1WmUVUiRp4.roa (raw, json)
Hash identifier: Gs86pZgjv3jJNnhb0G0l9DteU/l+UVez6ca3zgqJDvs=
Subject key identifier: 80:FA:D2:37:F8:91:4C:7F:31:1A:DB:11:73:55:A6:51:55:22:46:9E
Certificate issuer: /CN=764f8daadf1d775d59d1502b573901b875513b56
Certificate serial: 01875B01E0AD19A9D31A03B613B8E229D625
Authority key identifier: 76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/gPrSN_iRTH8xGtsRc1WmUVUiRp4.roa
Signing time: Fri 07 Apr 2023 09:17:42 +0000
ROA not before: Fri 07 Apr 2023 09:17:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 89.23.92.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:5b:01:e0:ad:19:a9:d3:1a:03:b6:13:b8:e2:29:d6:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=764f8daadf1d775d59d1502b573901b875513b56
Validity
Not Before: Apr 7 09:17:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=80fad237f8914c7f311adb117355a6515522469e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:cd:94:5e:d6:83:5b:4d:50:a0:99:18:5d:ec:
0f:5e:9a:92:04:83:23:88:d2:93:5a:a5:d8:fc:0e:
d3:64:3a:af:09:c1:57:f2:ac:04:55:73:78:e4:d4:
dc:d7:71:9b:55:0e:d1:a7:f4:72:e5:82:f9:a3:bb:
4c:65:5d:28:7c:a3:77:1a:30:a6:32:1f:15:09:45:
ea:e8:d5:36:97:b5:c9:56:47:df:94:cc:47:74:c2:
30:0d:84:77:ff:c1:f5:40:1a:0f:bd:23:a8:2b:3c:
d2:03:c5:c7:e4:28:bb:88:34:70:16:ed:ae:f7:f2:
26:77:6d:d5:ec:72:1a:e4:41:da:e3:df:8a:15:94:
92:70:14:fc:2d:d7:78:73:a7:84:e8:ec:7c:aa:9f:
0a:b1:94:e5:71:fa:23:04:87:70:d6:5c:40:56:f0:
40:6a:fb:57:db:9d:63:76:49:7e:c4:63:ca:d2:fe:
f9:72:33:cc:96:31:a7:29:1d:6f:89:85:95:73:64:
65:9b:cc:e0:91:d5:c3:5e:79:79:a5:1b:6f:10:dd:
af:65:00:43:88:b4:7d:81:44:1a:f2:3c:8a:2e:87:
c6:20:7d:8f:36:30:85:7e:01:30:f1:dc:e0:ee:58:
18:5a:47:e7:77:64:41:b5:b5:1c:94:08:a6:9d:90:
6d:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:FA:D2:37:F8:91:4C:7F:31:1A:DB:11:73:55:A6:51:55:22:46:9E
X509v3 Authority Key Identifier:
keyid:76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/gPrSN_iRTH8xGtsRc1WmUVUiRp4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.92.0/24
Signature Algorithm: sha256WithRSAEncryption
68:7f:26:83:9f:83:1e:14:6d:47:e5:30:d4:4e:e9:8a:19:37:
51:af:1e:7f:8d:f4:6b:ec:17:5e:73:54:01:f6:1b:f4:f5:cc:
ee:0d:cb:f0:91:b7:20:04:6c:da:13:94:3c:31:aa:99:34:51:
20:d2:65:a4:59:b6:77:51:a3:e7:28:04:6f:57:f9:f1:22:50:
43:8f:bb:25:8c:48:cf:f8:85:fe:5b:0f:48:c8:b5:99:09:5b:
23:dd:36:a7:39:0d:7a:ef:87:b6:f6:98:e8:16:c8:ee:23:27:
a9:b0:47:7a:8f:8c:7a:00:b4:44:ba:b7:2c:c2:38:46:c3:4e:
6c:1f:90:dc:f3:01:5d:16:c4:b2:2b:3a:78:20:98:3f:33:00:
3f:3c:65:bb:20:e0:a5:95:b2:83:27:36:bb:2d:92:32:7f:ae:
79:e1:cd:2a:99:dd:1c:ba:99:44:a2:75:98:ac:e6:d0:9a:6c:
d3:a5:22:54:8d:75:f4:d7:d4:bb:39:51:18:a6:e1:24:49:df:
a8:a7:82:e9:fb:35:f7:ef:69:1c:dc:10:70:59:ef:58:66:b0:
f7:a7:7d:90:15:89:7a:e8:f6:e9:3c:9a:a3:c5:d1:ec:dc:f6:
16:27:ae:3c:b8:d8:17:ae:35:b8:40:2e:53:a3:1c:55:1a:c3:
08:1e:d8:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 08:37:19 2025 by rpki-client