Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/X_f8A06fyFq-IJq8XUIB-ubOhNw.roa
File: X_f8A06fyFq-IJq8XUIB-ubOhNw.roa (raw, json)
Hash identifier: 2gGai4V6GojDf2esG5E2RfqkcNVunozJOhsHFgs6Gl4=
Subject key identifier: 5F:F7:FC:03:4E:9F:C8:5A:BE:20:9A:BC:5D:42:01:FA:E6:CE:84:DC
Certificate issuer: /CN=764f8daadf1d775d59d1502b573901b875513b56
Certificate serial: 0184BE37FB63BB335CCD926E49E3D1D85622
Authority key identifier: 76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/X_f8A06fyFq-IJq8XUIB-ubOhNw.roa
Signing time: Mon 28 Nov 2022 12:30:50 +0000
ROA not before: Mon 28 Nov 2022 12:30:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 89.23.92.0/24 maxlen: 24
178.254.150.0/24 maxlen: 24
89.23.84.0/24 maxlen: 24
89.23.85.0/24 maxlen: 24
89.23.79.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:be:37:fb:63:bb:33:5c:cd:92:6e:49:e3:d1:d8:56:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=764f8daadf1d775d59d1502b573901b875513b56
Validity
Not Before: Nov 28 12:30:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5ff7fc034e9fc85abe209abc5d4201fae6ce84dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:66:6d:2b:b4:03:59:68:ff:46:54:65:28:1e:
3a:62:e3:68:8b:60:19:47:02:82:9a:6b:13:cb:b5:
00:d9:b9:d8:a3:eb:b0:94:c5:2e:3d:d8:21:73:99:
70:20:35:ba:1c:11:e9:ae:1d:8f:d5:bf:2c:a9:9d:
80:44:62:eb:52:38:46:74:fb:88:cb:32:80:5c:00:
c2:8e:0a:09:25:2f:49:d0:11:44:23:55:20:b1:df:
40:2c:a7:96:2b:d1:64:24:e6:bc:37:5c:5c:e9:fb:
32:aa:e9:98:a0:8a:b4:80:36:30:01:83:25:b6:ec:
c8:72:7e:20:82:00:54:54:c5:38:b2:06:c5:47:ff:
b5:b2:2a:0c:00:c9:58:ad:fc:c2:a0:e4:c9:d2:7b:
3e:4f:30:aa:ad:23:89:27:54:37:ee:d6:12:c1:d2:
30:7b:3d:5e:28:46:57:41:52:8a:e4:e7:72:9a:1f:
9a:52:1a:c2:30:f0:1c:f8:35:0b:31:42:6f:b3:3a:
0e:f9:87:2b:0b:d5:7a:f2:11:75:02:3d:4e:91:8c:
1b:5f:75:a3:ae:68:38:9e:26:f8:b4:71:9e:0a:97:
1e:ed:d7:72:a5:42:a6:13:bc:2a:09:cc:10:6e:6d:
ee:38:e9:97:4c:31:21:47:38:b7:af:1f:4e:4f:2e:
7d:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:F7:FC:03:4E:9F:C8:5A:BE:20:9A:BC:5D:42:01:FA:E6:CE:84:DC
X509v3 Authority Key Identifier:
keyid:76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/X_f8A06fyFq-IJq8XUIB-ubOhNw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.79.0/24
89.23.84.0/23
89.23.92.0/24
178.254.150.0/24
Signature Algorithm: sha256WithRSAEncryption
97:2b:a4:bc:d2:56:ba:ef:d1:89:b6:67:4a:25:bf:99:88:ea:
82:4c:3d:1b:b2:54:1c:5d:29:01:a8:60:37:a7:88:14:55:4d:
bf:82:8c:19:3f:c6:10:69:b2:5e:9c:02:81:e1:84:0f:fb:0e:
2e:62:50:02:00:af:c4:c9:79:6b:dd:0a:c2:22:03:af:71:17:
1a:71:d9:fb:a4:55:59:bd:75:30:9b:86:e8:c1:5a:cc:77:8f:
53:e9:85:f5:c2:44:41:31:d3:f0:c4:bd:38:be:9c:94:5a:92:
c5:09:23:09:1c:24:03:71:9d:2f:f3:cb:b4:ce:cb:4e:74:be:
ba:df:7a:c3:9a:49:a6:8e:f5:19:ad:c7:1a:bd:f6:4a:b2:31:
6d:9e:17:42:a6:4b:09:0f:50:51:0f:a8:c9:d2:ca:a0:0f:09:
57:01:4c:32:74:f3:ab:00:c2:8f:0a:c5:7b:6c:e6:cf:f8:47:
45:df:1b:bb:a9:a3:0c:cc:50:fa:49:6c:a4:ba:ea:f4:65:06:
b7:2f:20:ca:a0:7f:f2:52:1a:d8:3b:a7:b1:31:da:fe:63:c5:
4c:24:f6:38:a5:5e:f1:6d:14:66:b3:d0:b2:5b:67:49:c1:e3:
4e:81:32:c5:9b:73:09:36:47:b8:7c:62:04:46:31:e1:25:50:
a6:02:99:46
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYS+N/tjuzNczZJuSePR2FYiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2NGY4ZGFhZGYxZDc3NWQ1OWQxNTAyYjU3MzkwMWI4NzU1
MTNiNTYwHhcNMjIxMTI4MTIzMDUwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZmY3ZmMwMzRlOWZjODVhYmUyMDlhYmM1ZDQyMDFmYWU2Y2U4NGRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh2ZtK7QDWWj/RlRlKB46YuNoi2AZ
RwKCmmsTy7UA2bnYo+uwlMUuPdghc5lwIDW6HBHprh2P1b8sqZ2ARGLrUjhGdPuI
yzKAXADCjgoJJS9J0BFEI1Ugsd9ALKeWK9FkJOa8N1xc6fsyqumYoIq0gDYwAYMl
tuzIcn4gggBUVMU4sgbFR/+1sioMAMlYrfzCoOTJ0ns+TzCqrSOJJ1Q37tYSwdIw
ez1eKEZXQVKK5Odymh+aUhrCMPAc+DULMUJvszoO+YcrC9V68hF1Aj1OkYwbX3Wj
rmg4nib4tHGeCpce7ddypUKmE7wqCcwQbm3uOOmXTDEhRzi3rx9OTy591wIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFF/3/ANOn8haviCavF1CAfrmzoTcMB8GA1UdIwQY
MBaAFHZPjarfHXddWdFQK1c5Abh1UTtWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGstTnF0OGRkMTFaMFZBclZ6a0J1SFZSTzFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC83YjkyYmYtMDExYi00NGE3LTgzODIt
YmZiMmI4ODE1ZTQ5LzEvWF9mOEEwNmZ5RnEtSUpxOFhVSUItdWJPaE53LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC83YjkyYmYtMDExYi00NGE3LTgzODItYmZiMmI4ODE1ZTQ5
LzEvZGstTnF0OGRkMTFaMFZBclZ6a0J1SFZSTzFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAWRdPAwQB
WRdUAwQAWRdcAwQAsv6WMA0GCSqGSIb3DQEBCwUAA4IBAQCXK6S80la679GJtmdK
Jb+ZiOqCTD0bslQcXSkBqGA3p4gUVU2/gowZP8YQabJenAKB4YQP+w4uYlACAK/E
yXlr3QrCIgOvcRcacdn7pFVZvXUwm4bowVrMd49T6YX1wkRBMdPwxL04vpyUWpLF
CSMJHCQDcZ0v88u0zstOdL6633rDmkmmjvUZrccavfZKsjFtnhdCpksJD1BRD6jJ
0sqgDwlXAUwydPOrAMKPCsV7bObP+EdF3xu7qaMMzFD6SWykuur0ZQa3LyDKoH/y
UhrYO6exMdr+Y8VMJPY4pV7xbRRms9CyW2dJweNOgTLFm3MJNke4fGIERjHhJVCm
AplG
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:35 2023 by rpki-client on console.sobornost.net