Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/RvvBHcqoTR_Rt2gaQyWoPpwRRJM.roa
File: RvvBHcqoTR_Rt2gaQyWoPpwRRJM.roa (raw, json)
Hash identifier: HotMkjteBCljZ/jZu4/jpMz/q75dkbH5UFtOQxtA6Qg=
Subject key identifier: 46:FB:C1:1D:CA:A8:4D:1F:D1:B7:68:1A:43:25:A8:3E:9C:11:44:93
Certificate issuer: /CN=764f8daadf1d775d59d1502b573901b875513b56
Certificate serial: 01856D11D68356F258B8C48A322EEFB321BB
Authority key identifier: 76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/RvvBHcqoTR_Rt2gaQyWoPpwRRJM.roa
Signing time: Sun 01 Jan 2023 11:22:43 +0000
ROA not before: Sun 01 Jan 2023 11:22:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50781
IP address blocks: 89.23.65.0/24 maxlen: 24
89.23.70.0/24 maxlen: 24
89.23.74.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:11:d6:83:56:f2:58:b8:c4:8a:32:2e:ef:b3:21:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=764f8daadf1d775d59d1502b573901b875513b56
Validity
Not Before: Jan 1 11:22:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=46fbc11dcaa84d1fd1b7681a4325a83e9c114493
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:7f:a1:62:c5:b5:41:1e:ad:aa:2c:74:a5:b5:
1d:20:55:5f:ce:41:de:55:b7:70:a5:41:51:2e:95:
8e:cf:1e:f0:f0:61:26:4c:b1:3d:41:7c:9f:ee:ec:
80:b8:29:20:fb:63:a4:cc:03:5c:4d:1f:40:82:d7:
91:17:b3:8d:16:f7:c9:27:6e:22:5a:8b:eb:28:8d:
d9:3c:89:15:fb:8d:5c:77:e6:7f:15:ac:8e:2a:41:
09:4b:d7:92:34:0c:be:ef:7e:e5:30:2f:4a:62:6b:
35:cd:e8:55:ef:51:4a:2c:66:d6:c6:92:82:c4:cd:
96:14:73:e2:77:78:31:61:83:36:7f:b5:17:78:76:
7e:aa:b1:9e:e2:0d:ba:26:b8:ef:03:ac:e3:2c:27:
ae:fa:e1:4e:02:8f:6a:45:d9:43:52:fd:fa:8d:07:
6b:6d:10:c8:64:ad:b1:f4:89:4f:94:f4:08:ad:cd:
35:32:12:13:78:2b:43:9d:50:16:37:d1:ae:55:8f:
81:f5:4b:fd:99:97:e2:2f:9a:99:63:b3:9d:a2:27:
8e:41:c6:ae:d9:8e:29:5c:5a:d1:5e:9e:1e:c0:35:
eb:d8:f0:3d:b5:b9:ec:e3:eb:ee:25:64:a1:62:21:
51:d4:9a:79:e4:f9:4d:e7:d6:15:57:a2:48:4a:55:
3c:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:FB:C1:1D:CA:A8:4D:1F:D1:B7:68:1A:43:25:A8:3E:9C:11:44:93
X509v3 Authority Key Identifier:
keyid:76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/RvvBHcqoTR_Rt2gaQyWoPpwRRJM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.65.0/24
89.23.70.0/24
89.23.74.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:e3:48:7a:9c:c1:f7:c1:9d:25:06:16:64:4a:87:bf:b4:1c:
22:5e:e1:e6:c3:a8:4c:94:0d:fb:da:6a:54:60:c7:4a:78:26:
fc:f4:48:63:ab:a1:f4:47:a6:28:90:30:e4:f3:64:2b:8f:a6:
c2:69:6b:05:bf:49:36:d1:3d:ba:10:f5:53:4b:d5:31:44:bf:
e5:53:ef:82:09:80:fa:5d:a8:6f:59:fa:ab:bb:0c:fa:3b:86:
08:ad:3d:a5:b7:f5:06:76:c8:e1:05:7a:55:b1:74:4b:5f:6a:
5d:4d:d3:82:56:48:ea:2b:8f:86:f0:46:34:2c:35:d3:60:9e:
25:e1:05:84:92:11:42:2b:5f:4d:bf:8f:8e:66:82:4b:78:5b:
07:ef:5e:03:98:06:9e:fc:10:a6:29:f6:c7:a9:db:1e:63:41:
0a:64:e9:79:f6:de:2a:cc:3e:32:08:26:e8:c0:89:bd:fd:22:
90:79:a8:03:c8:95:c3:bd:03:29:53:c5:a4:3d:e1:02:86:f3:
4a:e0:ed:28:4f:9d:d2:ff:80:ab:b4:06:50:69:86:15:ab:19:
3c:37:e2:7f:56:a7:68:8c:b2:ff:11:3b:60:25:4c:c9:55:a4:
94:d2:04:50:06:26:c0:c1:3f:3f:e7:0b:41:83:74:02:14:1b:
69:d0:b4:76
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYVtEdaDVvJYuMSKMi7vsyG7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2NGY4ZGFhZGYxZDc3NWQ1OWQxNTAyYjU3MzkwMWI4NzU1
MTNiNTYwHhcNMjMwMTAxMTEyMjQzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NmZiYzExZGNhYTg0ZDFmZDFiNzY4MWE0MzI1YTgzZTljMTE0NDkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA73+hYsW1QR6tqix0pbUdIFVfzkHe
VbdwpUFRLpWOzx7w8GEmTLE9QXyf7uyAuCkg+2OkzANcTR9AgteRF7ONFvfJJ24i
WovrKI3ZPIkV+41cd+Z/FayOKkEJS9eSNAy+737lMC9KYms1zehV71FKLGbWxpKC
xM2WFHPid3gxYYM2f7UXeHZ+qrGe4g26JrjvA6zjLCeu+uFOAo9qRdlDUv36jQdr
bRDIZK2x9IlPlPQIrc01MhITeCtDnVAWN9GuVY+B9Uv9mZfiL5qZY7OdoieOQcau
2Y4pXFrRXp4ewDXr2PA9tbns4+vuJWShYiFR1Jp55PlN59YVV6JISlU84QIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFEb7wR3KqE0f0bdoGkMlqD6cEUSTMB8GA1UdIwQY
MBaAFHZPjarfHXddWdFQK1c5Abh1UTtWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGstTnF0OGRkMTFaMFZBclZ6a0J1SFZSTzFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC83YjkyYmYtMDExYi00NGE3LTgzODIt
YmZiMmI4ODE1ZTQ5LzEvUnZ2QkhjcW9UUl9SdDJnYVF5V29QcHdSUkpNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC83YjkyYmYtMDExYi00NGE3LTgzODItYmZiMmI4ODE1ZTQ5
LzEvZGstTnF0OGRkMTFaMFZBclZ6a0J1SFZSTzFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAWRdBAwQA
WRdGAwQAWRdKMA0GCSqGSIb3DQEBCwUAA4IBAQAd40h6nMH3wZ0lBhZkSoe/tBwi
XuHmw6hMlA372mpUYMdKeCb89Ehjq6H0R6YokDDk82Qrj6bCaWsFv0k20T26EPVT
S9UxRL/lU++CCYD6XahvWfqruwz6O4YIrT2lt/UGdsjhBXpVsXRLX2pdTdOCVkjq
K4+G8EY0LDXTYJ4l4QWEkhFCK19Nv4+OZoJLeFsH714DmAae/BCmKfbHqdseY0EK
ZOl59t4qzD4yCCbowIm9/SKQeagDyJXDvQMpU8WkPeEChvNK4O0oT53S/4CrtAZQ
aYYVqxk8N+J/VqdojLL/ETtgJUzJVaSU0gRQBibAwT8/5wtBg3QCFBtp0LR2
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:35 2023 by rpki-client on console.sobornost.net