Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/3A3AwKtcU4FwUVEVDRCppZMzLVc.roa
File: 3A3AwKtcU4FwUVEVDRCppZMzLVc.roa (raw, json)
Hash identifier: Vm2VAs2ZgV2srHt/NXNg2Xdgq0rfw6iPvGRH9s+8/po=
Subject key identifier: DC:0D:C0:C0:AB:5C:53:81:70:51:51:15:0D:10:A9:A5:93:33:2D:57
Certificate issuer: /CN=764f8daadf1d775d59d1502b573901b875513b56
Certificate serial: 01840AC7CE073FB65474FF3520AAD8C009B8
Authority key identifier: 76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/3A3AwKtcU4FwUVEVDRCppZMzLVc.roa
Signing time: Mon 24 Oct 2022 16:16:17 +0000
ROA not before: Mon 24 Oct 2022 16:16:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 30823
IP address blocks: 89.23.77.0/24 maxlen: 24
89.23.80.0/24 maxlen: 24
89.23.90.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:0a:c7:ce:07:3f:b6:54:74:ff:35:20:aa:d8:c0:09:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=764f8daadf1d775d59d1502b573901b875513b56
Validity
Not Before: Oct 24 16:16:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dc0dc0c0ab5c5381705151150d10a9a593332d57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:cf:4d:eb:b7:be:06:3a:e9:4a:b9:24:13:66:
60:da:54:83:cd:a9:e5:ca:3a:ab:67:57:e8:aa:25:
ac:fb:f3:aa:db:2c:18:9c:a3:e5:37:f5:4c:f2:a1:
47:9e:dd:f4:64:5d:4d:f5:5c:e7:32:4e:c3:21:cf:
56:89:82:79:0b:bc:4c:a2:36:0a:1c:c7:b9:0f:8e:
0f:74:4b:b9:8c:69:28:d2:ca:26:d0:02:f2:6f:2e:
aa:ce:38:f0:99:42:a7:fc:92:e9:0f:be:4f:65:8f:
2b:b2:b3:0b:a4:71:d3:2e:22:e1:9d:b2:7d:5f:0f:
98:78:9e:b4:95:c4:46:6c:30:10:d2:4b:77:d1:ad:
b6:81:72:69:2a:89:a1:39:ad:59:ea:f5:fd:3a:ea:
e9:3d:07:54:81:00:9d:ea:aa:b0:e4:11:69:e5:30:
62:f5:44:34:a1:9e:e1:f1:51:18:09:48:35:a5:f4:
49:50:1a:8d:87:72:d0:3f:f9:d4:39:58:06:15:8d:
28:6e:03:94:08:8d:4c:d1:27:f7:4b:01:2a:2b:48:
aa:5a:24:12:95:af:08:4b:39:a3:1f:46:2b:28:da:
70:cd:0c:88:b8:eb:47:b1:19:90:57:07:c3:d7:f5:
d6:23:59:b1:67:af:d5:aa:9a:a4:94:d2:2f:5e:35:
6e:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:0D:C0:C0:AB:5C:53:81:70:51:51:15:0D:10:A9:A5:93:33:2D:57
X509v3 Authority Key Identifier:
keyid:76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/3A3AwKtcU4FwUVEVDRCppZMzLVc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.77.0/24
89.23.80.0/24
89.23.90.0/24
Signature Algorithm: sha256WithRSAEncryption
45:56:95:e0:93:88:2c:71:1c:ea:d4:9d:d9:d1:cd:bc:dc:f8:
5f:0b:5b:c7:2f:73:37:2f:dc:3c:12:c9:b6:bb:5f:42:ae:df:
e5:f9:5d:96:05:32:62:3a:e5:87:d4:4b:a3:34:ed:3a:a6:db:
1f:a4:67:e9:c1:e1:83:9e:3a:4e:c9:03:39:ce:97:36:3f:22:
f6:a0:aa:26:12:8e:e0:35:84:c5:a1:0e:75:19:98:51:3a:e1:
23:05:a7:08:c9:11:c1:ae:59:8a:95:84:21:27:e3:bc:61:4d:
0b:50:42:4a:40:bf:46:9b:f1:88:66:50:31:55:54:2f:db:ce:
2a:93:f7:aa:93:42:f8:ef:42:52:97:04:47:52:bf:d6:b8:07:
73:72:62:15:0e:ab:bb:80:7f:a7:04:c5:df:07:5c:24:11:65:
10:35:ac:eb:97:aa:b1:28:4a:95:3f:ed:4a:0b:f7:a4:3e:da:
b9:43:d7:4b:89:c6:b5:07:6a:7e:0b:ac:d7:cd:cf:04:9e:fc:
9c:4e:12:d6:18:7b:9c:50:84:55:22:df:43:f8:a0:22:e5:f2:
e4:07:af:ad:db:26:e9:22:93:f5:81:00:27:62:6a:b5:2b:aa:
89:4b:45:3b:dd:cd:90:f7:40:79:a5:84:22:e8:5e:25:4f:13:
1f:91:b5:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:35 2023 by rpki-client on console.sobornost.net