Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/CUqV4QCn1KJ_e3ImULSoc1ptak4.roa
File: CUqV4QCn1KJ_e3ImULSoc1ptak4.roa (raw, json)
Hash identifier: IEw4UTtXz1AUmStA8XNQYc9EkB0tLAdrZ73X1tceSEA=
Subject key identifier: 09:4A:95:E1:00:A7:D4:A2:7F:7B:72:26:50:B4:A8:73:5A:6D:6A:4E
Certificate issuer: /CN=764f8daadf1d775d59d1502b573901b875513b56
Certificate serial: 01840F6C6381D6E69805CDD295DA104FC89D
Authority key identifier: 76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/CUqV4QCn1KJ_e3ImULSoc1ptak4.roa
Signing time: Tue 25 Oct 2022 13:54:32 +0000
ROA not before: Tue 25 Oct 2022 13:54:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 89.23.92.0/24 maxlen: 24
178.254.150.0/24 maxlen: 24
89.23.85.0/24 maxlen: 24
89.23.79.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:0f:6c:63:81:d6:e6:98:05:cd:d2:95:da:10:4f:c8:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=764f8daadf1d775d59d1502b573901b875513b56
Validity
Not Before: Oct 25 13:54:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=094a95e100a7d4a27f7b722650b4a8735a6d6a4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:28:a3:b6:03:74:8e:c8:78:0e:97:01:1e:cc:
b3:7d:c7:b5:de:47:28:fa:94:53:9a:63:ed:e5:67:
91:f2:36:8d:d1:6f:fb:15:42:6f:3b:6e:ee:a3:df:
08:18:2c:db:c7:fa:89:d0:2a:d8:14:6a:fa:8b:a9:
d7:5d:d6:7a:b7:4a:41:6f:f3:8a:da:b9:62:8d:2c:
9c:8b:e4:c2:f5:d8:11:5e:4b:73:1d:45:35:64:52:
94:49:ad:a3:a1:90:7a:51:d8:e9:e4:12:41:ac:8d:
5e:10:b1:02:ce:30:21:53:4b:ba:22:0f:12:90:d1:
5e:57:0d:bb:b8:c5:d1:d7:f0:11:38:a9:3b:f0:5b:
8f:c4:3d:ab:f7:e5:03:5e:55:27:a5:c3:cf:d9:d5:
3a:db:c5:45:2f:da:0d:51:26:dd:9f:86:4d:e2:58:
f5:f7:e9:bc:57:ac:18:2d:23:73:09:78:9b:e7:19:
2e:8e:7a:9d:35:d0:30:c3:2b:3c:37:62:11:dc:e6:
46:51:99:f3:cf:e5:f0:59:8e:1c:ab:d5:c7:7b:76:
a6:4c:00:5a:2a:ae:8f:21:d4:39:bf:3b:fb:96:72:
92:ae:c4:f0:74:fe:cd:c4:fd:e8:34:f6:82:93:1e:
ff:76:e9:bd:14:29:64:87:53:7a:85:c8:0f:50:51:
48:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:4A:95:E1:00:A7:D4:A2:7F:7B:72:26:50:B4:A8:73:5A:6D:6A:4E
X509v3 Authority Key Identifier:
keyid:76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/CUqV4QCn1KJ_e3ImULSoc1ptak4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.79.0/24
89.23.85.0/24
89.23.92.0/24
178.254.150.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:31:76:15:28:9c:ff:b8:19:a9:f9:06:f7:d4:73:54:73:ba:
e8:0c:bd:fb:0c:c4:6b:84:72:2b:e5:ee:08:01:59:ce:00:13:
90:c3:82:16:a7:b9:7c:6a:06:2c:49:9d:c9:70:bc:19:4f:9e:
65:aa:68:e2:cd:28:49:dc:6d:ba:e3:a5:29:64:96:1b:b9:45:
2d:04:2a:84:99:bb:2a:58:0c:99:39:2f:09:70:55:f7:d5:ee:
3c:0a:3f:74:76:cf:97:02:d9:f5:a9:18:3f:90:f8:24:07:fd:
26:8d:15:3f:c2:e4:73:e4:73:43:e4:62:b0:58:a8:de:12:35:
21:d1:d8:39:a4:33:58:f0:36:20:a7:48:f0:f9:70:db:f2:8a:
7d:99:7c:38:58:6d:71:f3:6d:2c:61:67:de:61:86:37:9c:8d:
33:10:66:6a:74:56:48:c4:cd:05:91:f3:6b:0c:8d:fd:7f:24:
28:2e:a3:32:3e:d3:03:ab:65:02:fd:ff:b9:a3:0b:48:0e:9a:
29:9d:24:82:1b:c2:20:d6:3b:87:21:ca:f3:c3:43:1a:cf:5c:
af:a1:32:65:51:50:3e:cb:ef:7c:d6:a6:5a:fa:fa:21:8e:34:
f3:25:0c:22:da:5a:f0:b2:84:20:1d:99:ef:b9:2e:db:da:85:
a2:cc:64:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:35 2023 by rpki-client on console.sobornost.net