Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/YFQGFwITMBJ7fnHF2tLEUsG_64I.roa
File: YFQGFwITMBJ7fnHF2tLEUsG_64I.roa (raw, json)
Hash identifier: 2GdoW/2ND/Q+lLUNo+J8Vom3S6adverhKtJ2x/Eoxj4=
Subject key identifier: 60:54:06:17:02:13:30:12:7B:7E:71:C5:DA:D2:C4:52:C1:BF:EB:82
Certificate issuer: /CN=764f8daadf1d775d59d1502b573901b875513b56
Certificate serial: 01856D11D8243486B938CF381BBE4D87D072
Authority key identifier: 76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/YFQGFwITMBJ7fnHF2tLEUsG_64I.roa
Signing time: Sun 01 Jan 2023 11:22:44 +0000
ROA not before: Sun 01 Jan 2023 11:22:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 89.23.92.0/24 maxlen: 24
89.23.86.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:11:d8:24:34:86:b9:38:cf:38:1b:be:4d:87:d0:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=764f8daadf1d775d59d1502b573901b875513b56
Validity
Not Before: Jan 1 11:22:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=60540617021330127b7e71c5dad2c452c1bfeb82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:bd:be:2e:cf:fa:de:4e:d5:e4:87:80:17:39:
07:57:2e:cd:81:4c:56:d8:8e:68:84:1d:75:72:bd:
8c:5b:1a:b1:45:7e:f4:c9:6b:d6:17:a5:e2:7f:68:
13:95:13:53:56:bc:9f:6c:60:8c:b5:b0:cc:2a:47:
ac:36:91:9c:55:be:69:34:e2:00:59:9f:d6:f1:4d:
b2:8f:cf:d7:18:d0:bf:87:de:fe:4c:ab:97:d5:2b:
4a:39:35:9d:da:0e:0e:4e:1e:ff:48:c2:04:e7:4d:
f7:0d:1c:fa:55:77:d0:04:8c:a3:24:f9:36:fe:8c:
f9:38:18:06:f6:81:12:08:22:05:95:ec:66:46:13:
83:dd:a5:48:9d:3e:0f:1f:d6:fe:c7:cf:fd:22:98:
7b:f7:ca:e4:2a:a8:b1:b5:aa:d8:d6:9d:36:c0:17:
52:a2:50:d4:25:28:3c:02:e6:bd:76:38:b4:94:6c:
ec:4d:74:16:0b:f0:40:81:89:d9:bb:00:13:82:a8:
4d:09:fe:a9:2f:a0:49:a3:07:c8:31:8a:90:cc:96:
39:f1:04:6e:e3:27:08:a1:0d:68:f5:ee:2d:38:1f:
19:66:ab:d0:93:a4:67:15:fc:c7:52:d7:02:da:a8:
ee:30:97:b5:29:87:19:b9:a7:83:5c:52:ab:01:fd:
9d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:54:06:17:02:13:30:12:7B:7E:71:C5:DA:D2:C4:52:C1:BF:EB:82
X509v3 Authority Key Identifier:
keyid:76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/YFQGFwITMBJ7fnHF2tLEUsG_64I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.86.0/24
89.23.92.0/24
Signature Algorithm: sha256WithRSAEncryption
12:ab:05:ae:3e:41:28:7d:d5:fd:4f:39:23:b3:12:87:52:c3:
92:cb:84:01:44:8a:0f:d9:e6:58:6b:de:8c:f6:dd:df:a9:1a:
f0:d6:28:0c:00:63:06:4c:5c:16:b3:54:37:0f:82:81:1a:7f:
ae:72:28:88:79:20:c8:cc:1d:e9:9f:87:38:fd:7c:aa:dd:59:
4d:08:57:6f:71:d8:d3:af:5b:54:d1:1d:fa:7f:c2:d8:97:cf:
9d:7b:90:10:73:cf:b4:bf:81:88:e0:4e:d1:78:7d:c6:45:0b:
36:41:2c:62:a0:ce:ee:02:68:de:62:63:e7:c7:d9:d4:4e:e5:
6f:08:06:a9:86:1a:4e:4c:1d:75:d2:47:09:0f:a5:67:2c:76:
76:65:07:d3:65:44:4b:80:fa:49:ca:35:c1:d0:6c:78:7e:70:
b7:b7:cb:50:09:d7:f6:b9:94:1e:82:27:e4:c9:13:9d:cb:cc:
c6:c1:df:d6:84:ad:7e:4e:9a:7d:fb:25:ae:12:4c:e5:7a:2e:
dc:68:42:0f:91:80:61:84:be:c4:79:9b:9f:ab:df:14:93:0a:
b2:3b:51:cf:4e:c0:4d:ae:e6:cb:8c:0f:b2:53:e0:c5:64:32:
70:d0:71:aa:ae:29:a7:53:4b:a3:9c:26:64:e6:f3:df:39:ba:
d4:56:0e:d4
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVtEdgkNIa5OM84G75Nh9ByMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2NGY4ZGFhZGYxZDc3NWQ1OWQxNTAyYjU3MzkwMWI4NzU1
MTNiNTYwHhcNMjMwMTAxMTEyMjQ0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MDU0MDYxNzAyMTMzMDEyN2I3ZTcxYzVkYWQyYzQ1MmMxYmZlYjgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAib2+Ls/63k7V5IeAFzkHVy7NgUxW
2I5ohB11cr2MWxqxRX70yWvWF6Xif2gTlRNTVryfbGCMtbDMKkesNpGcVb5pNOIA
WZ/W8U2yj8/XGNC/h97+TKuX1StKOTWd2g4OTh7/SMIE5033DRz6VXfQBIyjJPk2
/oz5OBgG9oESCCIFlexmRhOD3aVInT4PH9b+x8/9Iph798rkKqixtarY1p02wBdS
olDUJSg8Aua9dji0lGzsTXQWC/BAgYnZuwATgqhNCf6pL6BJowfIMYqQzJY58QRu
4ycIoQ1o9e4tOB8ZZqvQk6RnFfzHUtcC2qjuMJe1KYcZuaeDXFKrAf2d4QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFGBUBhcCEzASe35xxdrSxFLBv+uCMB8GA1UdIwQY
MBaAFHZPjarfHXddWdFQK1c5Abh1UTtWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGstTnF0OGRkMTFaMFZBclZ6a0J1SFZSTzFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC83YjkyYmYtMDExYi00NGE3LTgzODIt
YmZiMmI4ODE1ZTQ5LzEvWUZRR0Z3SVRNQko3Zm5IRjJ0TEVVc0dfNjRJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC83YjkyYmYtMDExYi00NGE3LTgzODItYmZiMmI4ODE1ZTQ5
LzEvZGstTnF0OGRkMTFaMFZBclZ6a0J1SFZSTzFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAWRdWAwQA
WRdcMA0GCSqGSIb3DQEBCwUAA4IBAQASqwWuPkEofdX9TzkjsxKHUsOSy4QBRIoP
2eZYa96M9t3fqRrw1igMAGMGTFwWs1Q3D4KBGn+uciiIeSDIzB3pn4c4/Xyq3VlN
CFdvcdjTr1tU0R36f8LYl8+de5AQc8+0v4GI4E7ReH3GRQs2QSxioM7uAmjeYmPn
x9nUTuVvCAaphhpOTB110kcJD6VnLHZ2ZQfTZURLgPpJyjXB0Gx4fnC3t8tQCdf2
uZQegifkyROdy8zGwd/WhK1+Tpp9+yWuEkzlei7caEIPkYBhhL7EeZufq98Ukwqy
O1HPTsBNrubLjA+yU+DFZDJw0HGqrimnU0ujnCZk5vPfObrUVg7U
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:35 2023 by rpki-client on console.sobornost.net