Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/aghBSKOh9ZNlvuHImk1LkG2xc_8.roa
File: aghBSKOh9ZNlvuHImk1LkG2xc_8.roa (raw, json)
Hash identifier: 8M1Iy6+f0jw/xCg1bcIiCdkF6gsfbw6pE3+HNFqbZJs=
Subject key identifier: 6A:08:41:48:A3:A1:F5:93:65:BE:E1:C8:9A:4D:4B:90:6D:B1:73:FF
Certificate issuer: /CN=764f8daadf1d775d59d1502b573901b875513b56
Certificate serial: 0187B2468FB94449F9613A460BB480E8298E
Authority key identifier: 76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/aghBSKOh9ZNlvuHImk1LkG2xc_8.roa
Signing time: Mon 24 Apr 2023 07:59:41 +0000
ROA not before: Mon 24 Apr 2023 07:59:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 89.23.80.0/24 maxlen: 24
89.23.87.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:b2:46:8f:b9:44:49:f9:61:3a:46:0b:b4:80:e8:29:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=764f8daadf1d775d59d1502b573901b875513b56
Validity
Not Before: Apr 24 07:59:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6a084148a3a1f59365bee1c89a4d4b906db173ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:af:01:aa:94:08:c7:37:74:e7:39:56:1c:4f:
4f:f7:21:24:e8:dd:b8:c0:96:2d:03:01:80:bf:ae:
fa:36:ec:3a:d0:f9:e4:e9:c8:5f:47:a1:0c:6f:81:
f1:40:5c:53:7a:25:18:4e:69:0e:5b:a8:2f:be:ba:
45:87:51:89:2f:bc:55:d4:b6:c5:6d:d2:41:25:b5:
6f:83:83:a2:bc:bd:9c:ac:44:7f:f1:7d:ad:72:b9:
73:ca:e9:91:ef:8d:d1:63:f5:5f:f4:ca:cf:bf:c3:
af:f1:f0:19:63:37:07:26:38:b5:aa:2f:97:0f:ed:
65:f9:25:b1:51:bc:a3:bd:1c:80:75:d1:ad:ef:64:
ab:d7:93:b3:6d:39:22:f7:d3:80:5b:f0:89:7e:6e:
11:01:e3:8e:f3:90:5b:9d:a3:99:55:50:10:91:c8:
e2:82:86:53:19:b4:37:47:3b:8d:94:7a:01:92:ba:
65:04:1b:b0:90:e8:32:04:76:d5:7c:68:2d:96:82:
92:f5:97:52:af:57:22:0c:eb:3e:b8:9c:ff:9c:6b:
7e:1c:fc:69:f2:0c:8d:49:c0:32:af:56:b5:a5:c5:
a7:8b:9a:4b:68:67:ac:73:53:26:30:75:f0:76:78:
1c:92:1e:00:d1:f4:8f:02:b0:83:72:54:12:fd:0d:
6b:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:08:41:48:A3:A1:F5:93:65:BE:E1:C8:9A:4D:4B:90:6D:B1:73:FF
X509v3 Authority Key Identifier:
keyid:76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/aghBSKOh9ZNlvuHImk1LkG2xc_8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.80.0/24
89.23.87.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:5b:ba:eb:67:fe:12:b0:42:7c:73:cb:84:c5:1a:a9:a6:d7:
d3:3f:71:6f:d4:b1:b4:a2:85:fb:ef:7c:cc:80:b2:9b:2d:75:
18:57:55:11:df:b7:75:fa:b3:f7:19:1c:3e:a3:12:f8:f1:5b:
e6:35:cf:f0:91:d3:7f:7f:22:7d:0b:bb:76:34:f5:d4:e9:ac:
75:78:39:32:50:7d:70:32:06:e6:aa:9b:d6:0b:b2:df:b8:80:
d2:17:97:07:bf:96:73:5f:99:eb:29:5c:47:06:0c:f5:fb:9c:
71:0f:48:45:5f:78:4b:1c:29:a9:8b:22:64:10:3f:fa:e9:39:
25:83:53:09:ce:48:ff:b5:c2:65:54:ad:07:9d:11:a7:4f:67:
a1:1d:11:fb:fb:76:aa:66:e4:f1:3e:38:cc:a2:61:f5:5d:16:
f8:6f:72:49:af:ba:b8:80:71:4e:7d:58:c4:8e:79:0d:87:6f:
97:7b:51:1a:e9:86:8a:ce:66:11:4d:4d:4e:35:c7:84:c5:9a:
60:2d:52:7b:86:0a:88:b2:ed:0c:c7:eb:33:4c:9a:ed:8a:b9:
b9:e8:44:88:74:ae:15:51:e7:f7:11:4e:01:c6:bc:61:f2:a3:
3d:08:93:45:74:26:ae:43:4d:95:f1:44:80:87:b0:b4:ae:c2:
11:37:62:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:35 2023 by rpki-client on console.sobornost.net