Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/bhKHVjQrTd-VybRtmJn1jmDITOg.roa
File: bhKHVjQrTd-VybRtmJn1jmDITOg.roa (raw, json)
Hash identifier: QmGsINklc4jyy6gGHlHO9OUu6O68qVR9Fgj05JAEAGo=
Subject key identifier: 6E:12:87:56:34:2B:4D:DF:95:C9:B4:6D:98:99:F5:8E:60:C8:4C:E8
Certificate issuer: /CN=764f8daadf1d775d59d1502b573901b875513b56
Certificate serial: 0187C29F6F46351E531E04111DEE3F140961
Authority key identifier: 76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/bhKHVjQrTd-VybRtmJn1jmDITOg.roa
Signing time: Thu 27 Apr 2023 12:10:41 +0000
ROA not before: Thu 27 Apr 2023 12:10:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 89.23.78.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:c2:9f:6f:46:35:1e:53:1e:04:11:1d:ee:3f:14:09:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=764f8daadf1d775d59d1502b573901b875513b56
Validity
Not Before: Apr 27 12:10:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6e128756342b4ddf95c9b46d9899f58e60c84ce8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:03:22:a7:55:67:62:59:70:da:63:c0:15:1b:
56:f9:a8:fb:99:59:c8:39:a3:92:b7:a5:67:3a:8a:
88:29:a4:6d:9e:de:26:e2:1f:03:38:eb:69:9f:67:
27:53:db:97:91:18:63:e0:6b:7a:f9:16:9f:91:e4:
e3:a5:5c:5a:ff:ec:df:a2:55:00:30:9d:be:ac:cb:
6c:b6:01:36:f5:1d:88:eb:84:78:f7:f2:83:37:c7:
bd:86:11:5d:18:42:c9:80:06:dc:a5:1b:b3:1d:c3:
6c:9d:be:10:f8:5a:70:c1:4f:b7:ff:c8:7b:fc:6a:
d0:6f:71:ce:d8:ef:bc:2f:3b:02:44:0b:d7:26:5a:
67:e6:d3:fa:84:93:e8:89:5a:56:d7:a1:dc:f2:7c:
f5:c1:17:ab:50:50:59:5c:88:82:6a:b6:e7:5e:af:
49:f2:58:5b:7c:a3:78:23:9c:4b:ca:e1:f1:fe:35:
88:aa:78:c2:87:09:71:89:42:e7:62:47:fd:ea:e0:
a2:09:f8:df:f3:6b:89:5d:32:03:15:6c:82:21:33:
7d:18:1b:bf:23:4b:64:20:78:54:fd:16:4e:5a:6c:
54:f0:7f:e6:41:6c:b6:5b:8e:0e:f8:74:1e:82:48:
df:a2:f0:9d:0e:c7:75:62:3c:a6:26:36:80:fc:cd:
2a:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:12:87:56:34:2B:4D:DF:95:C9:B4:6D:98:99:F5:8E:60:C8:4C:E8
X509v3 Authority Key Identifier:
keyid:76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/bhKHVjQrTd-VybRtmJn1jmDITOg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.78.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:55:3f:e5:22:35:cd:43:09:64:1b:28:2a:06:da:40:40:46:
7d:3f:37:d5:77:9e:46:28:0d:fe:1f:d0:fb:0d:4c:40:8f:06:
56:c4:b1:b9:b2:6b:13:14:b9:07:d6:d3:ab:53:e5:7b:20:9f:
20:b7:71:da:ab:f8:cf:4f:6c:ff:9a:e8:1a:5a:27:72:32:60:
63:ba:f6:e7:54:ab:3a:9e:ee:a7:e3:ad:a5:66:11:ec:e1:ea:
b5:5a:60:84:45:02:d7:f1:9e:49:3e:36:a0:ba:7d:2c:21:b8:
f7:13:ea:f0:34:56:7b:c6:ad:a3:4c:08:f7:01:90:23:e3:f4:
37:bd:34:8a:90:0b:8e:ae:0f:18:c3:24:d2:e8:1d:01:a1:86:
18:7b:49:b2:64:2b:56:f4:44:ae:b1:94:8b:94:8f:2d:ce:03:
bc:82:ae:e5:81:ed:10:4f:a9:f1:3e:f9:67:31:2b:53:be:b0:
8f:a2:ee:f4:d4:8f:4f:7d:c9:48:25:c5:d6:9c:07:ef:6f:27:
81:e4:d6:db:61:7a:23:3a:74:02:95:c3:e4:73:e7:18:3d:bf:
db:97:47:31:b4:ea:42:3c:2a:52:25:f1:78:d3:fb:9c:64:af:
85:d1:0c:e0:f9:59:4e:e3:d3:77:b1:90:b3:05:19:9b:e3:db:
05:42:2c:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:35 2023 by rpki-client on console.sobornost.net