Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/OY9BpeuZTk_i4jvnftSEkRqPg_w.roa
File: OY9BpeuZTk_i4jvnftSEkRqPg_w.roa (raw, json)
Hash identifier: HHbIng5uAXxAOe+nXUaxKYWLqLiW0nMnDaIvQjA8lRk=
Subject key identifier: 39:8F:41:A5:EB:99:4E:4F:E2:E2:3B:E7:7E:D4:84:91:1A:8F:83:FC
Certificate issuer: /CN=764f8daadf1d775d59d1502b573901b875513b56
Certificate serial: 01856D11D0C5D7EEF8FDC4AD8A6C15AF1A89
Authority key identifier: 76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/OY9BpeuZTk_i4jvnftSEkRqPg_w.roa
Signing time: Sun 01 Jan 2023 11:22:42 +0000
ROA not before: Sun 01 Jan 2023 11:22:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 178.254.150.0/24 maxlen: 24
89.23.77.0/24 maxlen: 24
89.23.84.0/24 maxlen: 24
89.23.85.0/24 maxlen: 24
89.23.79.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:11:d0:c5:d7:ee:f8:fd:c4:ad:8a:6c:15:af:1a:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=764f8daadf1d775d59d1502b573901b875513b56
Validity
Not Before: Jan 1 11:22:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=398f41a5eb994e4fe2e23be77ed484911a8f83fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:f3:3f:ca:8f:ed:1f:08:e6:a6:1d:5a:85:9b:
23:5f:12:51:ba:3b:71:c7:72:5f:9e:e8:f7:81:40:
a1:77:bb:b9:c8:a6:64:73:cc:fd:df:b3:63:7d:4e:
6b:c3:ec:f0:0b:ec:95:cd:58:c7:d8:83:d4:b2:be:
79:e8:75:da:41:33:ab:c3:c0:9d:84:3c:cf:ec:5b:
83:08:ac:54:3e:cd:b0:75:fe:d7:f8:3e:84:d4:27:
10:4f:4d:98:b1:9f:d0:27:cc:39:50:57:ac:2c:83:
58:00:74:e3:47:86:59:d6:b3:0a:a4:b4:95:4f:34:
a5:fc:58:39:3e:ae:74:05:c0:d2:e4:d6:9a:05:e8:
59:f0:c8:fc:89:39:8d:20:45:79:17:30:e3:f1:4d:
52:31:58:2d:fc:d1:a4:95:95:fa:ff:8e:92:43:81:
6a:a6:1d:5a:46:1c:0a:1a:bd:6d:e6:c6:69:84:9f:
dc:2f:55:b5:66:28:cd:b5:83:f8:36:4b:60:71:2c:
0f:05:bb:03:b4:32:2c:02:9c:2a:27:d7:fb:ee:3e:
bb:6a:df:8f:f7:5a:51:6f:a7:eb:e5:81:7d:8d:a1:
26:cd:6f:83:6c:6b:a7:82:0e:4f:6b:30:6f:4b:fa:
13:11:0e:e5:01:76:a1:0c:4c:76:0a:6f:0b:c2:45:
67:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:8F:41:A5:EB:99:4E:4F:E2:E2:3B:E7:7E:D4:84:91:1A:8F:83:FC
X509v3 Authority Key Identifier:
keyid:76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/OY9BpeuZTk_i4jvnftSEkRqPg_w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.77.0/24
89.23.79.0/24
89.23.84.0/23
178.254.150.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:7f:be:40:ed:80:34:3a:09:0c:ca:a1:d1:22:d2:51:e8:6d:
b4:be:a2:13:5e:cf:06:85:3c:c9:26:56:23:1c:ce:5d:37:8e:
d2:a2:af:f2:83:1b:46:ab:e6:98:84:32:9e:25:e2:3b:f5:76:
a5:04:c3:f3:2e:46:0c:83:72:e6:02:1f:b2:39:7c:d6:37:87:
a3:a5:24:7d:82:e2:b9:49:a6:43:e4:85:fe:55:48:7a:c1:04:
a9:4e:12:5e:06:36:a4:4d:d0:28:c3:f0:9d:ab:7c:0b:00:29:
9e:1b:34:08:da:1f:a1:6d:6d:58:54:58:f5:d5:6d:55:ae:a5:
59:c7:f0:10:2b:0a:92:22:32:1e:8d:10:93:a3:07:da:bc:85:
84:06:db:a8:f8:5a:92:c0:5c:c7:dd:b5:fd:fe:8b:07:2f:db:
b2:92:4d:6c:39:7f:3e:a9:37:78:1a:31:4b:30:88:6c:f4:ee:
f6:68:8f:9f:fb:c0:ea:88:f5:7e:41:4b:e1:db:89:44:9b:97:
fe:ba:c6:7a:00:8a:bf:85:24:65:1e:3c:14:2c:cd:e8:61:b2:
47:94:07:93:0a:3f:14:b2:0d:d5:05:89:48:73:81:e5:44:22:
52:56:18:a4:4a:c3:15:cb:a0:24:40:e2:3f:a6:52:e9:32:4b:
6f:96:6e:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:35 2023 by rpki-client on console.sobornost.net