Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/WzTSINMJCorLc-xHehV4rsJfPhg.roa
File: WzTSINMJCorLc-xHehV4rsJfPhg.roa (raw, json)
Hash identifier: LZcfzyJy2kw7Mla+pl61SVBR1B7qh4VhdWzHTfG19+g=
Subject key identifier: 5B:34:D2:20:D3:09:0A:8A:CB:73:EC:47:7A:15:78:AE:C2:5F:3E:18
Certificate issuer: /CN=764f8daadf1d775d59d1502b573901b875513b56
Certificate serial: 077ED08F
Authority key identifier: 76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/WzTSINMJCorLc-xHehV4rsJfPhg.roa
Signing time: Sat 01 Jan 2022 00:59:04 +0000
ROA not before: Sat 01 Jan 2022 00:59:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 52116
IP address blocks: 89.23.93.0/24 maxlen: 24
178.254.145.0/24 maxlen: 24
178.254.150.0/24 maxlen: 24
178.254.165.0/24 maxlen: 24
178.254.170.0/24 maxlen: 24
178.254.172.0/24 maxlen: 24
178.254.168.0/24 maxlen: 24
178.254.180.0/24 maxlen: 24
178.254.181.0/24 maxlen: 24
178.254.183.0/24 maxlen: 24
89.23.71.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 125751439 (0x77ed08f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=764f8daadf1d775d59d1502b573901b875513b56
Validity
Not Before: Jan 1 00:59:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5b34d220d3090a8acb73ec477a1578aec25f3e18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:fc:b5:f8:72:5a:9b:0c:e0:9e:87:34:62:c3:
5e:32:fd:ac:ba:29:e2:b3:cb:30:e4:d8:0f:af:c8:
cd:47:70:92:72:80:47:f9:2c:d4:f1:aa:02:f1:24:
9b:b7:2c:69:ab:32:db:0f:a9:8c:6c:fa:20:9d:10:
f0:c5:a7:33:f7:0d:40:da:e8:99:68:fc:01:8f:b9:
9e:28:8f:44:28:72:dd:ff:dd:c8:5e:13:2d:1e:63:
53:25:67:84:82:b4:bd:be:22:1c:33:4b:62:6e:33:
19:f1:e2:10:54:fd:b6:cc:27:51:70:99:03:3f:73:
68:c5:fc:43:ec:79:c0:ca:61:11:9b:7e:eb:f6:51:
53:e5:b4:b6:ee:79:01:28:60:36:3c:7a:de:a7:c5:
b2:ed:3d:80:6b:d0:5a:9b:b8:7a:ce:88:94:bb:c2:
20:51:da:48:07:8f:1b:1a:9f:34:0c:29:09:0f:e7:
16:6a:c0:0a:36:ac:1d:0c:f5:2e:a8:62:c2:b3:55:
1d:4f:8b:dd:e4:c5:ba:91:eb:98:d6:61:cd:00:d9:
ce:8e:6e:eb:45:b7:13:22:2f:26:f5:54:2a:5d:7b:
e7:2f:9c:df:43:45:be:31:92:5f:66:61:0e:57:29:
d7:08:97:7a:71:e1:cd:b6:79:0e:a3:2f:6d:d5:37:
90:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:34:D2:20:D3:09:0A:8A:CB:73:EC:47:7A:15:78:AE:C2:5F:3E:18
X509v3 Authority Key Identifier:
keyid:76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/WzTSINMJCorLc-xHehV4rsJfPhg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.71.0/24
89.23.93.0/24
178.254.145.0/24
178.254.150.0/24
178.254.165.0/24
178.254.168.0/24
178.254.170.0/24
178.254.172.0/24
178.254.180.0/23
178.254.183.0/24
Signature Algorithm: sha256WithRSAEncryption
37:46:85:4e:c0:2e:5c:e2:62:23:62:8c:6a:61:dc:f9:e6:77:
db:71:a1:7f:50:f0:ad:d7:80:18:59:a1:bf:3c:54:ec:5e:6e:
e9:2f:a8:51:92:61:20:76:b7:00:59:e1:4e:36:e5:4c:48:fb:
91:55:4b:f3:fc:8f:e0:ae:21:ff:3d:2d:87:05:4a:d9:2e:43:
80:6c:3a:94:a4:9d:84:c2:7e:4c:0a:d1:44:cc:2a:75:b7:72:
ed:19:41:d1:fa:e3:e1:72:b9:2e:f3:97:b9:89:0e:03:cf:92:
40:a1:6f:26:f7:91:26:8c:03:49:16:97:ad:b1:c2:05:e9:71:
6e:22:36:58:dd:cd:86:ac:32:48:e4:86:0a:5f:ea:20:34:6d:
ee:c5:35:bd:84:16:04:3c:f8:b1:cc:b8:71:b2:84:9e:24:fc:
bf:8a:dc:18:a3:da:ae:2b:ff:44:c3:12:28:3f:81:64:33:91:
80:01:43:d6:b1:64:df:22:95:e6:cc:89:35:50:a9:bc:75:4d:
69:ea:0e:af:a4:c2:90:7b:23:f0:a0:ad:cd:40:30:6c:5c:74:
b8:47:7e:8a:0e:b4:fa:fc:c4:5a:ee:22:9e:52:08:d6:32:ee:
03:50:01:68:10:1e:a5:67:c9:db:81:22:b0:85:69:9e:7b:e8:
62:46:65:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:35 2023 by rpki-client on console.sobornost.net