Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/mPEUsuVm-QYLMHzxTk_oFE9Cpc0.roa
File: mPEUsuVm-QYLMHzxTk_oFE9Cpc0.roa (raw, json)
Hash identifier: Nou2ITYO4DXHoFtqX0hFN5zvX9KTbt5m5SteKhEC5NQ=
Subject key identifier: 98:F1:14:B2:E5:66:F9:06:0B:30:7C:F1:4E:4F:E8:14:4F:42:A5:CD
Certificate issuer: /CN=764f8daadf1d775d59d1502b573901b875513b56
Certificate serial: 0185247A5513120198C461819E32DE31C1F7
Authority key identifier: 76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/mPEUsuVm-QYLMHzxTk_oFE9Cpc0.roa
Signing time: Sun 18 Dec 2022 09:04:34 +0000
ROA not before: Sun 18 Dec 2022 09:04:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207590
IP address blocks: 89.23.88.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:24:7a:55:13:12:01:98:c4:61:81:9e:32:de:31:c1:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=764f8daadf1d775d59d1502b573901b875513b56
Validity
Not Before: Dec 18 09:04:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=98f114b2e566f9060b307cf14e4fe8144f42a5cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:92:8f:81:5c:fe:75:90:c5:73:22:af:c3:d1:
d9:bb:e7:1d:c4:1a:e9:ce:8c:b9:21:bc:bc:11:f6:
bc:78:77:dd:97:35:7c:68:3c:3b:75:f8:97:50:72:
98:1f:7d:ac:71:87:a5:da:04:f2:48:72:7f:ab:ea:
20:23:e1:52:1a:6b:b9:f2:7f:1d:fa:b4:0d:b0:d7:
3b:72:6f:16:b9:6f:e1:45:bf:cd:dc:2a:13:2f:71:
1b:2c:37:4f:aa:77:32:09:ff:a3:81:a2:60:6a:06:
f9:7a:e2:18:11:e9:4b:dd:76:a0:f5:c5:ea:2e:5e:
2b:e4:d4:79:dd:3f:3b:b7:3e:94:06:1e:84:49:7a:
ac:e1:b1:bf:0d:6f:a3:e3:9f:7f:e8:64:2d:24:0f:
83:b9:ec:42:b5:9e:b1:42:58:1c:1e:58:8d:23:3f:
ed:78:bf:99:8f:cd:f4:ee:69:40:df:2f:57:f2:d4:
c0:c7:38:11:53:f8:db:7c:31:7b:64:91:c2:d6:8a:
a7:9a:46:8f:a7:c9:15:a1:ce:e0:69:80:19:ec:58:
c9:6a:85:bd:ef:76:34:29:6f:1b:c5:db:d8:aa:25:
e5:c3:65:68:ad:f5:b0:ec:ef:29:e7:b5:a4:9b:81:
78:f8:82:97:2a:68:2d:91:61:33:f4:93:0d:b7:2b:
71:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:F1:14:B2:E5:66:F9:06:0B:30:7C:F1:4E:4F:E8:14:4F:42:A5:CD
X509v3 Authority Key Identifier:
keyid:76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/mPEUsuVm-QYLMHzxTk_oFE9Cpc0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.88.0/24
Signature Algorithm: sha256WithRSAEncryption
80:bf:72:c3:63:2b:fb:f2:cc:39:80:e2:ab:c1:8a:61:e7:7e:
24:9e:12:4a:33:8c:1a:0f:a8:86:dc:f9:74:fd:ae:67:d9:76:
ff:9c:23:86:b3:43:26:da:ca:8c:da:d1:0b:73:bf:f8:6b:97:
0b:05:88:23:98:cd:e0:7e:37:27:5e:41:23:87:d5:2d:a8:ba:
95:e3:ea:93:30:17:b2:64:d9:0b:4a:dc:29:1f:86:e3:1c:e3:
e9:65:c6:32:ad:37:28:3d:6b:5f:01:ef:af:1f:db:15:d3:d2:
aa:e0:ca:8f:72:93:c4:d0:3b:91:35:8b:a2:de:b0:d6:f4:25:
fe:e0:38:ef:f7:6f:a1:63:31:da:ce:b4:dd:b3:c0:bf:05:6d:
2c:ba:1b:b0:96:8b:de:16:e4:41:5a:b1:90:2a:79:e7:21:75:
9c:85:04:bd:75:b8:bf:4f:81:3c:d2:ac:fb:91:52:94:1e:bd:
7a:0d:d0:26:d3:b2:5f:7f:d6:f2:65:b7:e7:ae:4f:24:40:1f:
82:5b:d6:61:44:44:f1:77:74:1f:25:bc:77:4b:e2:92:66:c8:
f3:ca:63:81:dd:8a:1e:f8:22:85:dc:8a:e0:bb:bb:31:53:00:
90:2c:63:be:0c:92:ee:4d:de:32:ae:7f:6e:d8:49:89:c2:2d:
0a:1c:dc:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:01:01 2025 by rpki-client