Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/T915nsM2tEV_9v3L_Mh64FIVxQ4.roa
File: T915nsM2tEV_9v3L_Mh64FIVxQ4.roa (raw, json)
Hash identifier: xw0tq8KPpeCEqbWNiXTq1EjS/0vXKWQCy/AANVihd1g=
Subject key identifier: 4F:DD:79:9E:C3:36:B4:45:7F:F6:FD:CB:FC:C8:7A:E0:52:15:C5:0E
Certificate issuer: /CN=764f8daadf1d775d59d1502b573901b875513b56
Certificate serial: 0186D2661E0813C5F6929C322942B20AFB76
Authority key identifier: 76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/T915nsM2tEV_9v3L_Mh64FIVxQ4.roa
Signing time: Sat 11 Mar 2023 20:39:13 +0000
ROA not before: Sat 11 Mar 2023 20:39:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205570
IP address blocks: 178.254.168.0/24 maxlen: 24
89.23.90.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:d2:66:1e:08:13:c5:f6:92:9c:32:29:42:b2:0a:fb:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=764f8daadf1d775d59d1502b573901b875513b56
Validity
Not Before: Mar 11 20:39:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4fdd799ec336b4457ff6fdcbfcc87ae05215c50e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c3:ee:ab:82:ea:c2:c6:03:b0:c8:46:a0:7f:
be:ce:b2:8d:9f:49:3c:d4:15:aa:9b:65:b9:ca:72:
73:d3:39:a4:4b:ea:bf:95:6c:4e:eb:dc:dd:bf:2d:
92:b9:64:e9:e7:c3:86:88:1d:0f:23:e9:18:bc:82:
f9:d3:f0:78:dd:90:4b:2d:cb:d9:08:56:dd:58:e8:
b5:e8:94:6a:3f:2e:0c:2c:3d:39:28:10:5a:bf:df:
fa:eb:05:88:30:92:ed:72:b6:c5:b7:4d:13:b4:e7:
0b:69:e5:c9:ab:3d:d0:3e:53:34:3b:91:5f:aa:18:
94:0e:f1:41:2a:29:95:28:4d:cd:fc:9d:1d:aa:9d:
a2:a6:ca:d4:21:99:37:d6:7a:2b:22:8b:db:7f:41:
ac:0c:e7:3c:e8:73:23:47:32:40:c3:1d:c1:a7:58:
03:2d:3a:ae:0f:44:ab:8a:ce:5c:8b:82:81:0a:dc:
6f:ed:f7:52:b1:80:99:75:23:58:41:aa:e0:0f:cf:
0e:d5:05:da:53:f9:de:e1:5f:9d:9a:53:bc:05:17:
2d:bb:d5:f6:96:53:68:45:98:b5:66:1a:93:a6:39:
97:da:81:38:17:34:a5:21:a4:83:da:10:df:7b:fc:
0c:82:8d:6c:37:f6:71:4b:07:41:64:29:90:df:01:
de:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:DD:79:9E:C3:36:B4:45:7F:F6:FD:CB:FC:C8:7A:E0:52:15:C5:0E
X509v3 Authority Key Identifier:
keyid:76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/T915nsM2tEV_9v3L_Mh64FIVxQ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.90.0/24
178.254.168.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:4e:65:63:dd:22:e7:1f:73:b3:62:62:59:9c:6f:4b:f6:15:
02:f9:ba:1f:47:87:24:ad:6f:76:0e:0e:cd:47:9a:e8:b4:b2:
90:04:49:55:c5:49:98:1d:89:7a:5a:f9:66:f4:7e:71:43:81:
4f:58:a4:45:06:0b:a7:0c:d3:29:23:44:6c:02:6a:e0:a7:c1:
72:fd:7e:6b:7a:a0:29:6d:43:f9:fb:1b:af:4d:aa:7e:d8:5c:
1f:01:ce:9b:0b:58:ac:77:d8:7f:db:72:22:e8:20:a5:ab:90:
66:12:c4:8d:c5:ad:af:84:db:26:0c:e3:0d:fd:1f:cd:bb:c0:
ac:f6:b1:7d:ab:9c:88:61:b2:f4:68:a5:b5:13:15:61:17:85:
65:56:df:ee:49:b7:66:52:8d:ba:3e:c3:25:0b:87:e5:f0:2c:
c7:ac:15:54:a3:50:31:7f:61:44:ee:41:c6:c2:b9:3a:95:ed:
b5:75:1c:bf:e4:24:0c:c4:c7:ef:45:0f:46:0a:35:bd:cf:57:
d2:ae:6e:da:62:53:c6:a2:6e:8a:b8:27:c9:5f:04:8b:e0:80:
52:30:46:e9:23:47:83:db:a4:6d:41:5d:e3:18:59:6d:07:bf:
6e:b7:98:db:82:35:be:e7:2d:85:ab:43:ad:8f:44:3e:49:fd:
ae:84:cc:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:35 2023 by rpki-client on console.sobornost.net