Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/070CgOPVBOqpn4OdD2Hgbyt8Ckw.roa
File: 070CgOPVBOqpn4OdD2Hgbyt8Ckw.roa (raw, json)
Hash identifier: g5nvrOBga5vmTVFG1aQU+VmFdkY0DmwfQgzdV/vEsRk=
Subject key identifier: D3:BD:02:80:E3:D5:04:EA:A9:9F:83:9D:0F:61:E0:6F:2B:7C:0A:4C
Certificate issuer: /CN=764f8daadf1d775d59d1502b573901b875513b56
Certificate serial: 01840F6C64F087B9A19470E8D38FB865EF9F
Authority key identifier: 76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/070CgOPVBOqpn4OdD2Hgbyt8Ckw.roa
Signing time: Tue 25 Oct 2022 13:54:32 +0000
ROA not before: Tue 25 Oct 2022 13:54:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 89.23.91.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:0f:6c:64:f0:87:b9:a1:94:70:e8:d3:8f:b8:65:ef:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=764f8daadf1d775d59d1502b573901b875513b56
Validity
Not Before: Oct 25 13:54:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d3bd0280e3d504eaa99f839d0f61e06f2b7c0a4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b4:ac:89:03:e9:80:67:d1:4c:a8:8d:5f:b2:
0d:19:53:c6:7d:4b:2c:96:ca:1a:14:1d:8f:3b:ec:
91:a0:7f:a3:f6:c4:e9:3f:b0:f1:e0:3c:15:eb:c0:
02:cf:d2:c5:e6:b0:9a:e5:32:e7:a8:d3:93:a3:8d:
f2:db:af:8b:68:34:8c:de:92:bf:3d:b5:8e:30:6f:
e1:da:c0:d9:b9:cd:34:3c:a6:ec:cb:49:ff:ea:3e:
5f:41:69:34:42:26:a1:ff:42:0d:d9:88:89:7d:2d:
c6:13:62:f2:ef:94:f4:cb:53:59:9f:e8:bc:a6:8a:
58:db:f9:88:af:72:6a:d3:e5:86:f3:98:49:33:d4:
78:a9:db:e5:2a:2f:0b:26:f8:21:7f:45:e0:45:ce:
76:8e:c6:e1:ed:44:ae:f2:2d:2d:d0:7c:95:d3:f1:
a1:7d:2f:bf:7e:68:21:36:1d:6b:b6:b7:06:a4:1a:
5f:67:4c:a5:4a:e0:45:d5:5f:be:db:57:0e:cb:6e:
be:e4:ad:65:03:dc:2b:f9:a5:ae:55:d7:5c:0e:10:
e3:0a:9a:a5:4e:05:36:03:6c:06:69:a4:6c:71:78:
c2:da:91:f8:38:78:b9:12:43:3c:9c:9c:f7:8f:3b:
0b:59:6d:df:d6:03:da:01:fc:f5:40:3e:6d:82:8c:
df:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:BD:02:80:E3:D5:04:EA:A9:9F:83:9D:0F:61:E0:6F:2B:7C:0A:4C
X509v3 Authority Key Identifier:
keyid:76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/070CgOPVBOqpn4OdD2Hgbyt8Ckw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.91.0/24
Signature Algorithm: sha256WithRSAEncryption
83:c1:8d:a0:66:06:f5:28:5f:e5:d7:45:83:77:94:8b:83:29:
5e:ef:65:4a:2a:58:ab:d1:df:1f:5e:f4:7f:75:03:cf:a6:97:
3f:90:6f:77:76:94:7d:c1:a0:aa:22:3b:94:7b:d8:2a:49:64:
72:3f:98:f0:86:9b:db:80:55:9f:15:35:ad:85:9d:93:08:3a:
ee:fa:00:56:00:3c:aa:1c:a8:6c:dd:56:b4:01:c4:6f:b7:d1:
34:7d:59:08:9c:0e:03:72:64:e5:b2:9e:ed:3e:9c:d6:bf:54:
2b:c3:b9:34:19:c4:99:06:d5:e8:14:d3:b1:42:07:15:7c:87:
6d:a4:8c:8a:91:a2:b0:66:78:2a:17:2b:03:1b:c8:c6:f3:72:
62:f5:16:2b:ed:44:67:34:30:76:94:f5:02:02:1d:49:19:3a:
3d:74:9b:a1:e0:16:a1:9c:56:74:34:e4:d4:ff:59:63:43:9d:
56:e6:6f:18:09:2f:10:93:75:75:58:3f:da:6d:27:bb:9c:78:
8e:60:e9:14:47:d5:78:e9:a8:6e:73:1b:77:50:da:e6:83:09:
a1:3e:2e:96:f0:9b:e6:94:38:b4:00:f0:43:24:52:7d:97:e1:
1f:d2:57:dd:23:a0:d9:e0:2c:2a:89:53:54:29:b2:91:cf:4e:
f9:d0:98:65
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYQPbGTwh7mhlHDo04+4Ze+fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2NGY4ZGFhZGYxZDc3NWQ1OWQxNTAyYjU3MzkwMWI4NzU1
MTNiNTYwHhcNMjIxMDI1MTM1NDMyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkM2JkMDI4MGUzZDUwNGVhYTk5ZjgzOWQwZjYxZTA2ZjJiN2MwYTRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxLSsiQPpgGfRTKiNX7INGVPGfUss
lsoaFB2PO+yRoH+j9sTpP7Dx4DwV68ACz9LF5rCa5TLnqNOTo43y26+LaDSM3pK/
PbWOMG/h2sDZuc00PKbsy0n/6j5fQWk0Qiah/0IN2YiJfS3GE2Ly75T0y1NZn+i8
popY2/mIr3Jq0+WG85hJM9R4qdvlKi8LJvghf0XgRc52jsbh7USu8i0t0HyV0/Gh
fS+/fmghNh1rtrcGpBpfZ0ylSuBF1V++21cOy26+5K1lA9wr+aWuVddcDhDjCpql
TgU2A2wGaaRscXjC2pH4OHi5EkM8nJz3jzsLWW3f1gPaAfz1QD5tgozftwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNO9AoDj1QTqqZ+DnQ9h4G8rfApMMB8GA1UdIwQY
MBaAFHZPjarfHXddWdFQK1c5Abh1UTtWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGstTnF0OGRkMTFaMFZBclZ6a0J1SFZSTzFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC83YjkyYmYtMDExYi00NGE3LTgzODIt
YmZiMmI4ODE1ZTQ5LzEvMDcwQ2dPUFZCT3FwbjRPZEQySGdieXQ4Q2t3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC83YjkyYmYtMDExYi00NGE3LTgzODItYmZiMmI4ODE1ZTQ5
LzEvZGstTnF0OGRkMTFaMFZBclZ6a0J1SFZSTzFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWRdbMA0G
CSqGSIb3DQEBCwUAA4IBAQCDwY2gZgb1KF/l10WDd5SLgyle72VKKlir0d8fXvR/
dQPPppc/kG93dpR9waCqIjuUe9gqSWRyP5jwhpvbgFWfFTWthZ2TCDru+gBWADyq
HKhs3Va0AcRvt9E0fVkInA4DcmTlsp7tPpzWv1Qrw7k0GcSZBtXoFNOxQgcVfIdt
pIyKkaKwZngqFysDG8jG83Ji9RYr7URnNDB2lPUCAh1JGTo9dJuh4BahnFZ0NOTU
/1ljQ51W5m8YCS8Qk3V1WD/abSe7nHiOYOkUR9V46ahucxt3UNrmgwmhPi6W8Jvm
lDi0APBDJFJ9l+Ef0lfdI6DZ4CwqiVNUKbKRz0750Jhl
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:35 2023 by rpki-client on console.sobornost.net