Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/6SiI1GBCz6rTQkCtehBh4CnZjJ4.roa
File: 6SiI1GBCz6rTQkCtehBh4CnZjJ4.roa (raw, json)
Hash identifier: zGVCZitrvCvMRMbHCJjBiN9rA3BzN1V1CpJvadiUCzc=
Subject key identifier: E9:28:88:D4:60:42:CF:AA:D3:42:40:AD:7A:10:61:E0:29:D9:8C:9E
Certificate issuer: /CN=764f8daadf1d775d59d1502b573901b875513b56
Certificate serial: 0184E69E5BDF3A9D567EEEE3A3AD5B81806C
Authority key identifier: 76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/6SiI1GBCz6rTQkCtehBh4CnZjJ4.roa
Signing time: Tue 06 Dec 2022 08:47:28 +0000
ROA not before: Tue 06 Dec 2022 08:47:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 30823
IP address blocks: 89.23.77.0/24 maxlen: 24
89.23.80.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:e6:9e:5b:df:3a:9d:56:7e:ee:e3:a3:ad:5b:81:80:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=764f8daadf1d775d59d1502b573901b875513b56
Validity
Not Before: Dec 6 08:47:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e92888d46042cfaad34240ad7a1061e029d98c9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6d:76:c6:8b:1f:b0:03:e8:9b:0a:40:5f:c9:
7a:03:be:64:30:01:39:0c:2e:3e:63:c4:a7:76:a0:
a7:c0:a0:0e:5d:2f:7e:74:ee:1e:b3:bd:70:96:55:
4d:69:a6:e2:0c:51:5e:9b:62:9d:ea:06:55:76:37:
f8:fb:81:4b:07:2e:91:37:c3:7d:c1:64:8e:e9:4c:
de:3d:52:5b:78:3f:a6:81:86:67:2d:b3:48:1f:61:
df:f4:dd:74:28:32:b7:af:b8:42:ae:4e:ed:f6:c7:
77:67:eb:8d:8a:51:14:c6:e6:fe:bd:54:46:d6:1f:
fa:a0:96:4e:64:7c:38:99:da:5d:e9:81:9d:91:1e:
66:ef:cf:1d:58:2c:d3:41:ab:33:66:25:de:73:d0:
4b:2f:af:8f:fd:de:da:fc:45:8d:4c:e5:77:2d:fb:
30:0a:b9:87:99:70:7b:fb:98:f4:e5:b8:e9:09:b2:
01:c1:c3:01:1a:be:51:c1:2a:c2:f4:53:b5:c5:7a:
18:5f:92:1e:10:f1:b1:6e:d7:48:de:a4:33:c0:e7:
83:bf:e3:d9:0f:54:25:44:07:93:1c:bc:66:18:ee:
62:dd:66:e2:ea:62:8e:cc:1d:0d:39:0e:a7:55:3e:
b3:32:80:78:7d:a3:d2:54:3e:0f:5d:8d:4d:c3:63:
db:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:28:88:D4:60:42:CF:AA:D3:42:40:AD:7A:10:61:E0:29:D9:8C:9E
X509v3 Authority Key Identifier:
keyid:76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/6SiI1GBCz6rTQkCtehBh4CnZjJ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.77.0/24
89.23.80.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:30:17:6e:fe:e3:16:dc:9b:40:17:b1:98:16:a1:0d:41:95:
5a:9c:8b:ab:64:7e:76:71:8f:3a:6e:e5:68:cf:1c:f7:82:36:
10:26:ef:7c:d3:e2:3e:de:59:71:33:67:76:11:92:65:94:ec:
23:65:1b:42:c4:e0:a6:cf:b7:36:75:bc:15:1b:cf:51:94:f8:
6a:c3:e4:a9:87:f1:d6:50:6d:be:4c:23:31:69:aa:31:73:c1:
35:ac:59:f6:4d:55:10:e0:a0:c7:39:4a:c2:c6:99:2e:65:94:
d6:a2:05:59:35:43:bc:9c:44:fe:eb:2b:cc:b8:c6:ce:52:5f:
bd:57:ce:8f:da:fb:6c:1c:5c:aa:3e:d7:30:51:aa:16:5a:e8:
c5:8c:b3:ee:dc:22:ac:6a:43:85:d3:13:a6:2c:c6:d0:c5:e3:
43:ba:d1:bb:63:c4:50:11:32:4c:98:0c:c6:33:14:4e:7f:0c:
6e:4b:74:56:56:c1:89:aa:28:03:da:69:b1:99:51:54:2a:d5:
56:36:e7:04:e0:52:62:5b:c0:93:03:43:3e:94:64:75:3b:ab:
0f:77:be:ab:b9:c3:da:10:5b:95:4e:47:60:31:d5:0d:60:93:
79:19:b9:53:a3:b2:ed:f4:53:4a:8c:a3:d3:0a:bc:f1:e9:f3:
ab:a1:d3:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 19:19:47 2025 by rpki-client