Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/T2D7QnIk0Sphql-SH2kKVazMti8.roa
File: T2D7QnIk0Sphql-SH2kKVazMti8.roa (raw, json)
Hash identifier: +GoHyJCp+XQEiwZlSAkpB2mpQXaekHR4kN8JYpEXfSw=
Subject key identifier: 4F:60:FB:42:72:24:D1:2A:61:AA:5F:92:1F:69:0A:55:AC:CC:B6:2F
Certificate issuer: /CN=764f8daadf1d775d59d1502b573901b875513b56
Certificate serial: 018514BB3C6C2185839643E1B8139A843001
Authority key identifier: 76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/T2D7QnIk0Sphql-SH2kKVazMti8.roa
Signing time: Thu 15 Dec 2022 07:41:32 +0000
ROA not before: Thu 15 Dec 2022 07:41:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 89.23.92.0/24 maxlen: 24
178.254.150.0/24 maxlen: 24
89.23.77.0/24 maxlen: 24
89.23.84.0/24 maxlen: 24
89.23.85.0/24 maxlen: 24
89.23.79.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:14:bb:3c:6c:21:85:83:96:43:e1:b8:13:9a:84:30:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=764f8daadf1d775d59d1502b573901b875513b56
Validity
Not Before: Dec 15 07:41:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4f60fb427224d12a61aa5f921f690a55acccb62f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c9:e4:a5:18:a6:4d:c9:7e:cf:69:09:85:c9:
ed:61:a5:d1:65:71:e8:11:99:d8:a2:9d:95:f8:e8:
f6:d4:2c:14:e0:2e:6d:69:ad:34:ea:59:3a:f5:f9:
2d:32:43:c7:55:ba:d2:53:a6:8b:02:3e:27:4c:60:
72:b5:ed:36:1b:24:df:72:be:e3:bc:f8:42:73:67:
d1:63:23:f5:0c:bf:45:c6:21:5d:a5:f4:7f:d4:dd:
b3:56:14:9f:ac:18:47:aa:3c:0f:5e:ab:04:3f:c3:
f5:b7:6b:d7:61:39:09:01:29:0f:b4:e4:d5:39:95:
61:de:63:d0:0c:78:96:50:f0:a2:3f:38:a5:7c:82:
22:e2:41:03:f5:66:17:14:11:67:d9:bc:e8:50:16:
42:70:69:30:96:4c:5b:eb:a7:4f:c1:e3:c2:67:d3:
c3:e4:ee:03:6c:68:89:f3:14:9b:d4:02:8a:6d:5e:
31:c4:98:98:f1:67:37:fd:9d:4f:f8:0c:25:c0:ac:
59:3c:79:70:2c:78:ab:38:d1:4f:b5:e1:76:36:f2:
ff:92:8a:34:62:e3:99:e2:4e:c7:82:ce:ed:ab:23:
0e:61:88:9e:ed:30:83:d8:02:f7:0c:a7:f1:91:98:
02:bf:57:bd:80:9c:12:bd:04:86:d8:20:b1:ef:93:
0f:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:60:FB:42:72:24:D1:2A:61:AA:5F:92:1F:69:0A:55:AC:CC:B6:2F
X509v3 Authority Key Identifier:
keyid:76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/T2D7QnIk0Sphql-SH2kKVazMti8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.77.0/24
89.23.79.0/24
89.23.84.0/23
89.23.92.0/24
178.254.150.0/24
Signature Algorithm: sha256WithRSAEncryption
95:b7:c9:10:18:de:f5:82:a5:0b:a6:b0:f9:a0:07:fd:f0:b7:
5a:98:b2:9f:50:86:48:d2:4f:05:68:c8:5b:e4:4b:05:fc:5c:
3b:ab:c6:eb:87:6d:7a:12:23:20:b6:48:22:41:ec:e4:19:6e:
f4:02:63:2c:52:56:75:fa:33:87:61:c8:e8:2a:c2:f6:81:6e:
f2:7f:76:41:3f:2b:96:b7:94:2d:b3:26:b4:51:11:78:85:3d:
5e:63:c1:cc:9e:95:19:b7:67:eb:7d:67:4c:b1:bb:78:28:c6:
ae:8b:87:cf:b4:59:7a:60:10:77:84:d9:e6:10:ba:ba:3c:ad:
5b:eb:7f:39:ee:80:35:36:c0:17:cb:c7:78:96:f4:6f:de:06:
1c:ac:58:c8:57:b1:f6:c8:9f:5a:3f:16:81:de:bd:08:3f:b7:
e9:24:76:8a:f6:04:ac:03:f6:fd:9f:9c:d3:bb:f7:f7:fd:12:
44:cf:f8:72:21:9b:9c:9f:29:1b:46:fc:c5:19:1b:e2:a4:4b:
f2:39:e6:a5:9f:9e:25:a0:b9:5a:99:7f:ee:fd:ba:24:fb:1a:
c7:74:95:7b:e6:63:d7:05:e2:23:b9:f0:11:83:ae:cc:1e:9f:
82:3f:0f:37:6c:fb:54:a4:6b:a8:29:e3:31:1d:c6:7c:18:0c:
fe:db:8d:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:35 2023 by rpki-client on console.sobornost.net