Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/CR7qeu8-4TNKKLJBeKarYI76U2Y.roa
File: CR7qeu8-4TNKKLJBeKarYI76U2Y.roa (raw, json)
Hash identifier: SylAbccEDISaSlG2uEIoPUkqHBR52rMUTtNoCXdd6e0=
Subject key identifier: 09:1E:EA:7A:EF:3E:E1:33:4A:28:B2:41:78:A6:AB:60:8E:FA:53:66
Certificate issuer: /CN=764f8daadf1d775d59d1502b573901b875513b56
Certificate serial: 018211A1745557052B3A478978A07DA6D3DA
Authority key identifier: 76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/CR7qeu8-4TNKKLJBeKarYI76U2Y.roa
Signing time: Mon 18 Jul 2022 14:06:09 +0000
ROA not before: Mon 18 Jul 2022 14:06:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 33387
IP address blocks: 89.23.83.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:11:a1:74:55:57:05:2b:3a:47:89:78:a0:7d:a6:d3:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=764f8daadf1d775d59d1502b573901b875513b56
Validity
Not Before: Jul 18 14:06:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=091eea7aef3ee1334a28b24178a6ab608efa5366
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:b4:a1:67:e3:1d:d4:63:c0:8d:82:86:16:7f:
26:7d:26:82:54:74:d3:fa:6e:91:20:ad:48:9b:b5:
54:10:19:90:c4:2a:47:db:e7:47:6d:3d:7d:63:06:
bd:6d:86:d2:de:83:92:4a:a7:8d:0d:fd:b5:c4:ab:
1a:a2:46:c6:cc:d2:ca:8c:0b:08:83:d3:f2:75:50:
ca:af:05:eb:87:5d:b7:a6:97:57:aa:f7:05:1b:36:
5d:4a:06:e3:87:30:1e:55:a6:55:25:d2:ae:9d:a7:
a4:a8:9b:84:d7:83:32:39:6c:1e:51:46:d1:99:0c:
bc:49:9d:cb:ff:ef:b2:f6:12:88:a4:d5:b6:a4:94:
e0:b2:e8:17:ef:42:65:6e:3e:11:f5:13:e5:43:68:
3e:a4:c0:d4:06:6a:48:73:e8:52:1e:f7:61:cc:87:
e9:31:e6:b1:ec:0f:f7:57:a1:64:06:2e:b4:52:50:
46:2f:0a:e5:ef:09:ab:e9:91:ca:7b:f3:a0:3c:01:
81:ba:8b:ab:99:84:b0:5c:9d:0d:32:47:aa:d9:a6:
ae:2b:bb:25:5e:1f:7b:8c:c3:8b:41:bd:06:09:af:
44:24:4b:37:30:0f:ff:46:7c:0a:c1:98:eb:d8:95:
61:65:0c:34:ab:ff:27:d5:07:4f:49:79:eb:33:ac:
03:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:1E:EA:7A:EF:3E:E1:33:4A:28:B2:41:78:A6:AB:60:8E:FA:53:66
X509v3 Authority Key Identifier:
keyid:76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/CR7qeu8-4TNKKLJBeKarYI76U2Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.83.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:d5:06:9c:4b:70:8a:4a:fb:e3:18:d0:5b:46:f8:aa:64:ef:
60:be:70:7b:59:b2:df:7d:c9:1d:8e:96:f4:03:a6:e7:e7:98:
eb:a4:5a:e8:8d:fa:5d:ab:68:5f:72:28:8f:59:11:47:5d:a8:
b7:97:61:bc:05:e3:8c:b6:fc:56:35:b7:bd:3e:bb:72:cb:e7:
f0:75:8c:8e:99:1c:ef:b9:d1:d0:35:37:d5:6a:1a:21:94:e8:
58:5a:01:e4:ae:48:25:49:50:6d:1d:36:a5:a7:ad:16:1a:68:
b7:09:0e:b7:e5:e0:52:3f:a5:37:9e:aa:12:09:47:70:26:e7:
28:bb:e1:a8:6d:ac:fe:af:76:18:d9:a4:5b:3a:67:89:b8:4f:
f9:67:c2:c0:ea:43:b4:e9:a7:e4:94:b9:93:4a:02:18:0b:6b:
6d:51:2d:d2:62:48:8d:d3:1e:05:73:6f:11:9b:48:30:52:8a:
7c:bd:aa:5f:ca:5c:13:d5:46:04:56:c8:9b:df:34:ae:db:ef:
c3:5a:43:07:af:78:27:71:2c:b2:dc:d7:66:3d:b2:69:aa:f6:
52:1f:ab:8f:e5:08:65:a3:b5:bf:84:e6:2b:54:57:f1:17:e2:
cf:b4:c9:5d:e2:9c:44:34:4c:46:fc:a7:e7:17:7e:3a:59:f8:
85:03:5d:d7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYIRoXRVVwUrOkeJeKB9ptPaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2NGY4ZGFhZGYxZDc3NWQ1OWQxNTAyYjU3MzkwMWI4NzU1
MTNiNTYwHhcNMjIwNzE4MTQwNjA5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwOTFlZWE3YWVmM2VlMTMzNGEyOGIyNDE3OGE2YWI2MDhlZmE1MzY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlbShZ+Md1GPAjYKGFn8mfSaCVHTT
+m6RIK1Im7VUEBmQxCpH2+dHbT19Ywa9bYbS3oOSSqeNDf21xKsaokbGzNLKjAsI
g9PydVDKrwXrh123ppdXqvcFGzZdSgbjhzAeVaZVJdKunaekqJuE14MyOWweUUbR
mQy8SZ3L/++y9hKIpNW2pJTgsugX70Jlbj4R9RPlQ2g+pMDUBmpIc+hSHvdhzIfp
Meax7A/3V6FkBi60UlBGLwrl7wmr6ZHKe/OgPAGBuourmYSwXJ0NMkeq2aauK7sl
Xh97jMOLQb0GCa9EJEs3MA//RnwKwZjr2JVhZQw0q/8n1QdPSXnrM6wDOQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAke6nrvPuEzSiiyQXimq2CO+lNmMB8GA1UdIwQY
MBaAFHZPjarfHXddWdFQK1c5Abh1UTtWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGstTnF0OGRkMTFaMFZBclZ6a0J1SFZSTzFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC83YjkyYmYtMDExYi00NGE3LTgzODIt
YmZiMmI4ODE1ZTQ5LzEvQ1I3cWV1OC00VE5LS0xKQmVLYXJZSTc2VTJZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC83YjkyYmYtMDExYi00NGE3LTgzODItYmZiMmI4ODE1ZTQ5
LzEvZGstTnF0OGRkMTFaMFZBclZ6a0J1SFZSTzFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWRdTMA0G
CSqGSIb3DQEBCwUAA4IBAQBa1QacS3CKSvvjGNBbRviqZO9gvnB7WbLffckdjpb0
A6bn55jrpFrojfpdq2hfciiPWRFHXai3l2G8BeOMtvxWNbe9Prtyy+fwdYyOmRzv
udHQNTfVahohlOhYWgHkrkglSVBtHTalp60WGmi3CQ635eBSP6U3nqoSCUdwJuco
u+Gobaz+r3YY2aRbOmeJuE/5Z8LA6kO06afklLmTSgIYC2ttUS3SYkiN0x4Fc28R
m0gwUop8vapfylwT1UYEVsib3zSu2+/DWkMHr3gncSyy3NdmPbJpqvZSH6uP5Qhl
o7W/hOYrVFfxF+LPtMld4pxENExG/KfnF346WfiFA13X
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:35 2023 by rpki-client on console.sobornost.net