Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/Cd8k5Rk_5pd_YsK4Euabr-5VCA8.roa
File: Cd8k5Rk_5pd_YsK4Euabr-5VCA8.roa (raw, json)
Hash identifier: 3poctKTwkgo1OaXxosgbQl801rM6IVVp2AjGDoexwNE=
Subject key identifier: 09:DF:24:E5:19:3F:E6:97:7F:62:C2:B8:12:E6:9B:AF:EE:55:08:0F
Certificate issuer: /CN=764f8daadf1d775d59d1502b573901b875513b56
Certificate serial: 01850FA55B7516DEAEBD4621A68A412DDB5D
Authority key identifier: 76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/Cd8k5Rk_5pd_YsK4Euabr-5VCA8.roa
Signing time: Wed 14 Dec 2022 07:59:33 +0000
ROA not before: Wed 14 Dec 2022 07:59:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 30823
IP address blocks: 89.23.80.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:0f:a5:5b:75:16:de:ae:bd:46:21:a6:8a:41:2d:db:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=764f8daadf1d775d59d1502b573901b875513b56
Validity
Not Before: Dec 14 07:59:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=09df24e5193fe6977f62c2b812e69bafee55080f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:92:06:9f:9d:83:f9:38:b3:20:b2:6e:af:53:
5a:52:00:17:97:0f:5e:2d:11:f2:42:92:6b:2d:bd:
b8:81:2d:51:e9:4a:30:45:a9:35:7d:8c:51:d2:2b:
32:a6:54:40:51:7e:fd:2c:26:5e:fc:28:fd:6c:39:
2d:a7:dd:63:c2:46:5d:ad:43:da:d1:ac:2d:47:56:
98:46:5f:e3:ac:1b:c1:c9:aa:e5:4c:a3:45:35:57:
fe:2d:58:3b:35:6a:31:46:e5:16:d0:cd:6e:f0:3a:
4b:a6:b8:b8:3d:e1:73:c5:c4:76:ab:3b:39:8b:85:
70:64:58:ce:fc:94:60:a3:c9:1d:f5:02:d9:21:d9:
a2:47:a3:af:49:fa:49:9c:3d:b1:4d:6e:dd:8d:26:
03:06:c6:b5:82:a6:ce:6d:4d:ed:15:20:64:7c:d2:
53:be:d6:ee:37:0f:04:04:86:38:3d:22:2f:0f:2c:
1e:75:9e:94:88:9d:95:30:db:82:6d:79:5f:28:8e:
d3:4f:1d:3f:90:e9:c8:3d:83:cc:b6:72:ad:19:a5:
f5:30:b3:c1:29:72:38:6a:2e:ad:74:b1:62:40:28:
b8:ad:90:ed:af:82:a7:16:d5:5b:71:8b:23:9e:37:
26:5d:28:66:f6:c5:12:e9:ce:97:9a:2b:85:23:25:
2f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:DF:24:E5:19:3F:E6:97:7F:62:C2:B8:12:E6:9B:AF:EE:55:08:0F
X509v3 Authority Key Identifier:
keyid:76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/Cd8k5Rk_5pd_YsK4Euabr-5VCA8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.80.0/24
Signature Algorithm: sha256WithRSAEncryption
52:bb:2b:27:2e:7e:aa:2e:43:3c:22:0d:af:b4:c1:25:52:0c:
28:1e:66:ed:a2:aa:46:d1:b0:75:0c:ca:99:c6:ad:09:30:4d:
96:01:bf:02:00:36:b9:bc:fc:b6:6a:8e:99:59:83:c0:5c:d2:
c8:fb:2c:7c:61:fc:89:49:c6:99:7f:38:0b:86:89:00:9a:7f:
a9:45:00:ba:5d:a1:26:c0:5f:b8:13:0c:15:05:b9:e9:2c:97:
27:7f:61:76:cb:16:2f:0b:fc:19:ae:b9:48:7a:02:c3:94:53:
8f:4a:e7:b6:77:9d:81:3c:92:d9:48:81:76:af:40:70:33:2a:
b4:da:62:2b:dc:37:72:f7:03:3a:18:fd:6a:3f:f8:a2:43:c1:
0c:1f:c2:66:9a:5e:81:c7:a5:d9:4f:d7:0d:19:da:d2:28:23:
5f:88:b0:f9:07:38:95:c3:81:85:9e:fd:1b:c2:32:02:0a:30:
21:fc:ef:7a:58:06:ee:29:4c:47:d7:ee:d6:e7:ad:bf:c8:44:
12:74:c1:a2:8e:a5:79:d5:5d:50:59:3b:4a:06:64:bc:44:be:
97:07:3c:c5:7e:0b:a8:f3:1b:f0:aa:c1:e3:6d:a4:e9:91:c4:
2b:74:57:d8:fa:d5:80:40:9d:5e:78:0e:cb:d2:0a:a7:30:92:
2e:14:f5:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:35 2023 by rpki-client on console.sobornost.net