Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/AzwWhSh4cCbBDcOtjTffiiX10Xw.roa
File: AzwWhSh4cCbBDcOtjTffiiX10Xw.roa (raw, json)
Hash identifier: 8UcFyPuS0slrM4vkkp8z/HkWrQpuFYlG/wjE7dyAviU=
Subject key identifier: 03:3C:16:85:28:78:70:26:C1:0D:C3:AD:8D:37:DF:8A:25:F5:D1:7C
Certificate issuer: /CN=764f8daadf1d775d59d1502b573901b875513b56
Certificate serial: 018794596DB688F835DC4B10DD4D7B9893A0
Authority key identifier: 76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/AzwWhSh4cCbBDcOtjTffiiX10Xw.roa
Signing time: Tue 18 Apr 2023 12:31:41 +0000
ROA not before: Tue 18 Apr 2023 12:31:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205570
IP address blocks: 178.254.168.0/24 maxlen: 24
89.23.90.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:94:59:6d:b6:88:f8:35:dc:4b:10:dd:4d:7b:98:93:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=764f8daadf1d775d59d1502b573901b875513b56
Validity
Not Before: Apr 18 12:31:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=033c168528787026c10dc3ad8d37df8a25f5d17c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:06:17:0d:03:d4:2c:af:af:af:88:5c:e3:b6:
f5:e4:a8:a3:66:f4:7d:ad:b6:d0:20:3b:1b:4f:d9:
d8:6f:96:af:43:70:94:4c:d1:d5:84:6f:76:43:19:
d5:55:fe:9e:f3:04:f8:fc:53:09:0b:f9:f7:98:9e:
0f:69:55:03:c1:9e:53:37:9c:56:23:20:3e:87:98:
96:af:fe:a6:a5:c8:e0:98:fd:0c:41:e1:5e:90:07:
6b:83:80:f5:cc:13:83:dd:8f:05:57:90:96:fa:98:
1e:cc:72:a4:73:ca:a3:54:38:61:01:ca:0c:e3:6f:
be:e4:02:a0:f2:3f:e9:b2:47:bf:60:df:cb:16:af:
35:b6:ab:8d:fc:39:0d:b2:43:c5:84:a6:b4:0e:d3:
e0:e6:bf:d7:77:44:41:2b:94:e3:fb:d3:ba:97:5d:
32:f1:39:65:a8:eb:dd:74:d8:5f:3b:c8:0c:a4:36:
7a:cd:b0:f1:48:ee:2f:23:ec:41:22:f0:4a:6b:76:
fa:83:ba:e6:59:34:8e:b6:1b:4a:45:09:bf:47:f2:
0f:0b:f4:29:d4:98:d0:57:0f:d2:ed:3d:c0:a8:fd:
56:49:19:81:b7:81:e4:cc:f7:58:db:83:d7:89:ec:
34:06:50:9b:2d:88:7d:1b:11:3e:e0:c5:d4:37:d2:
ac:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:3C:16:85:28:78:70:26:C1:0D:C3:AD:8D:37:DF:8A:25:F5:D1:7C
X509v3 Authority Key Identifier:
keyid:76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/AzwWhSh4cCbBDcOtjTffiiX10Xw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.90.0/24
178.254.168.0/24
Signature Algorithm: sha256WithRSAEncryption
84:e7:ae:22:a4:44:96:f5:66:2c:d6:b4:62:56:20:5f:f9:ef:
ae:76:5f:1b:66:06:e0:09:1c:65:fc:b9:fb:5e:1a:ae:26:a3:
89:50:a3:ab:66:4e:ef:2d:a8:c6:90:e6:2b:fc:5a:58:69:e1:
d4:07:88:69:3d:11:e8:dd:b4:a1:c5:9c:6f:df:95:fa:2e:05:
a2:57:aa:07:a3:be:97:1b:e8:eb:05:1c:0f:75:27:67:63:80:
05:ff:34:66:9f:3a:48:13:f8:d3:78:d9:1c:86:08:a9:f6:02:
87:db:90:39:c9:11:ce:01:7e:f0:ac:7d:f4:5a:a8:43:7d:8d:
58:1e:a4:58:8b:d5:22:36:52:58:05:28:31:8b:b5:20:54:5e:
c8:19:3c:cc:90:a0:fe:c1:56:b9:e8:d3:ed:5f:d8:a6:19:0d:
68:aa:9b:0c:53:c2:93:3a:69:f5:34:d5:34:94:87:57:c9:98:
68:f8:5d:7d:b9:70:f1:cf:08:70:8d:b3:07:23:d1:c3:90:65:
2d:a6:8f:16:54:ee:f6:f1:f6:2b:20:8a:ad:5e:eb:5f:2a:77:
e2:3f:a4:5a:48:cd:67:c6:9a:d6:46:18:9d:5f:1a:02:70:69:
2e:56:ef:f1:19:7b:95:6c:5c:6b:56:36:7b:0c:50:f1:e4:7a:
f9:82:ea:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:35 2023 by rpki-client on console.sobornost.net