Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/P54JtntlsKm3zb4rwJoasXODcI8.roa
File: P54JtntlsKm3zb4rwJoasXODcI8.roa (raw, json)
Hash identifier: JHGXXBht8OX/kx4tJAby1yjokT3Ccd3UwjkD0Eo2v3I=
Subject key identifier: 3F:9E:09:B6:7B:65:B0:A9:B7:CD:BE:2B:C0:9A:1A:B1:73:83:70:8F
Certificate issuer: /CN=764f8daadf1d775d59d1502b573901b875513b56
Certificate serial: 018775DE64ABC138C97A6EBCCB9F8ADAC7E4
Authority key identifier: 76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/P54JtntlsKm3zb4rwJoasXODcI8.roa
Signing time: Wed 12 Apr 2023 14:28:41 +0000
ROA not before: Wed 12 Apr 2023 14:28:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205570
IP address blocks: 178.254.168.0/24 maxlen: 24
89.23.90.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:75:de:64:ab:c1:38:c9:7a:6e:bc:cb:9f:8a:da:c7:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=764f8daadf1d775d59d1502b573901b875513b56
Validity
Not Before: Apr 12 14:28:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3f9e09b67b65b0a9b7cdbe2bc09a1ab17383708f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:5c:1c:ed:76:ef:06:e4:fb:14:28:6a:87:a6:
38:7a:6f:b9:fd:c4:93:e9:d5:54:36:36:71:b9:47:
22:31:5c:b0:3f:f0:33:51:ec:12:32:cb:72:0a:22:
e1:5c:59:de:e4:0d:6e:f0:78:07:77:88:79:91:d5:
5b:ef:88:26:e8:69:90:09:b9:1d:17:e7:f9:f1:0b:
45:47:95:ca:b2:f2:5c:d9:e7:c3:3d:6f:ec:87:72:
2c:a7:b7:cf:a6:c9:bc:2e:94:a4:66:f9:7b:67:fb:
27:99:d3:51:ce:cd:18:a6:5a:cb:22:f9:8f:9e:a5:
3e:ee:50:88:1c:ff:67:d8:46:fa:43:40:1a:c1:98:
05:1f:1e:c6:3a:aa:fc:f7:ad:c8:6b:14:bc:d2:6f:
5e:43:58:1c:4a:c2:0f:e9:83:48:eb:02:c5:ec:a4:
76:3d:e5:0a:4f:18:8f:cc:12:6d:72:ab:56:dc:f9:
ef:c7:31:83:76:fd:0e:87:4e:af:3c:5f:c3:b7:cf:
18:fb:3c:ea:d0:eb:f7:8b:84:80:1b:c4:45:79:e7:
39:fb:25:90:f0:ba:c0:e1:b0:ca:e2:bd:45:ca:00:
0c:ff:a6:e1:4b:1d:73:0f:b6:46:15:1d:00:a7:36:
77:15:96:70:57:ed:b4:3b:aa:85:07:d9:07:1d:20:
fa:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:9E:09:B6:7B:65:B0:A9:B7:CD:BE:2B:C0:9A:1A:B1:73:83:70:8F
X509v3 Authority Key Identifier:
keyid:76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/P54JtntlsKm3zb4rwJoasXODcI8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.90.0/24
178.254.168.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:60:62:f3:26:7e:b5:0d:b7:e3:37:1b:dd:4b:dd:f5:45:fc:
43:82:23:36:91:d7:e4:6d:e5:5d:ed:82:3b:ec:90:58:df:44:
8c:ee:73:a8:06:00:5b:e9:f7:bb:3b:20:cf:08:2d:96:9c:c2:
e0:8e:bd:51:27:dd:42:7c:45:2f:5e:43:9b:f5:d5:f3:31:cb:
d4:7e:91:98:b2:ae:74:1b:35:a4:ef:42:de:9f:97:28:2b:9a:
d9:fb:5b:b0:4f:32:72:f0:8b:ad:31:70:56:9f:b5:25:97:dc:
51:bd:22:9a:e5:45:38:a7:ac:35:79:44:04:07:89:ff:92:6f:
7b:a4:af:a5:cd:3c:63:20:4e:4d:4e:3d:5d:25:51:20:d3:ad:
83:db:eb:ff:21:79:ba:01:92:97:39:33:50:98:d5:b6:18:14:
97:a4:75:86:52:4e:4d:3d:0c:fb:fa:06:d7:44:7a:28:74:c6:
db:d4:65:0a:d9:07:3c:2e:08:90:91:ee:b3:65:da:f4:4c:c4:
e1:dc:ed:eb:ca:bb:50:cd:10:0d:0d:93:79:4b:69:84:54:67:
f6:d6:0c:cf:c6:b4:e6:de:36:fd:43:c1:f0:be:02:b3:97:37:
85:b1:2d:ec:7a:26:17:d4:42:39:70:12:7a:b6:66:da:ab:ce:
3f:c2:0c:75
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYd13mSrwTjJem68y5+K2sfkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2NGY4ZGFhZGYxZDc3NWQ1OWQxNTAyYjU3MzkwMWI4NzU1
MTNiNTYwHhcNMjMwNDEyMTQyODQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZjllMDliNjdiNjViMGE5YjdjZGJlMmJjMDlhMWFiMTczODM3MDhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1wc7XbvBuT7FChqh6Y4em+5/cST
6dVUNjZxuUciMVywP/AzUewSMstyCiLhXFne5A1u8HgHd4h5kdVb74gm6GmQCbkd
F+f58QtFR5XKsvJc2efDPW/sh3Isp7fPpsm8LpSkZvl7Z/snmdNRzs0YplrLIvmP
nqU+7lCIHP9n2Eb6Q0AawZgFHx7GOqr8963IaxS80m9eQ1gcSsIP6YNI6wLF7KR2
PeUKTxiPzBJtcqtW3PnvxzGDdv0Oh06vPF/Dt88Y+zzq0Ov3i4SAG8RFeec5+yWQ
8LrA4bDK4r1FygAM/6bhSx1zD7ZGFR0ApzZ3FZZwV+20O6qFB9kHHSD6iwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFD+eCbZ7ZbCpt82+K8CaGrFzg3CPMB8GA1UdIwQY
MBaAFHZPjarfHXddWdFQK1c5Abh1UTtWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGstTnF0OGRkMTFaMFZBclZ6a0J1SFZSTzFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC83YjkyYmYtMDExYi00NGE3LTgzODIt
YmZiMmI4ODE1ZTQ5LzEvUDU0SnRudGxzS20zemI0cndKb2FzWE9EY0k4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC83YjkyYmYtMDExYi00NGE3LTgzODItYmZiMmI4ODE1ZTQ5
LzEvZGstTnF0OGRkMTFaMFZBclZ6a0J1SFZSTzFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAWRdaAwQA
sv6oMA0GCSqGSIb3DQEBCwUAA4IBAQCdYGLzJn61DbfjNxvdS931RfxDgiM2kdfk
beVd7YI77JBY30SM7nOoBgBb6fe7OyDPCC2WnMLgjr1RJ91CfEUvXkOb9dXzMcvU
fpGYsq50GzWk70Len5coK5rZ+1uwTzJy8IutMXBWn7Ull9xRvSKa5UU4p6w1eUQE
B4n/km97pK+lzTxjIE5NTj1dJVEg062D2+v/IXm6AZKXOTNQmNW2GBSXpHWGUk5N
PQz7+gbXRHoodMbb1GUK2Qc8LgiQke6zZdr0TMTh3O3ryrtQzRANDZN5S2mEVGf2
1gzPxrTm3jb9Q8HwvgKzlzeFsS3seiYX1EI5cBJ6tmbaq84/wgx1
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:35 2023 by rpki-client on console.sobornost.net