Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/d3UHlSlqC0f2_0k3GMQkIdmdd9c.roa
File: d3UHlSlqC0f2_0k3GMQkIdmdd9c.roa (raw, json)
Hash identifier: wMxUj2GaLpyWyG/NDlA5kaRfrEbJtrJLoNpUZWdWlSc=
Subject key identifier: 77:75:07:95:29:6A:0B:47:F6:FF:49:37:18:C4:24:21:D9:9D:77:D7
Certificate issuer: /CN=764f8daadf1d775d59d1502b573901b875513b56
Certificate serial: 01843831AC7360DE622ED99627F76617CBF7
Authority key identifier: 76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/d3UHlSlqC0f2_0k3GMQkIdmdd9c.roa
Signing time: Wed 02 Nov 2022 11:54:50 +0000
ROA not before: Wed 02 Nov 2022 11:54:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 28964
IP address blocks: 178.254.164.0/24 maxlen: 24
178.254.166.0/24 maxlen: 24
178.254.160.0/22 maxlen: 22
178.254.167.0/24 maxlen: 24
178.254.178.0/24 maxlen: 24
178.254.174.0/24 maxlen: 24
178.254.173.0/24 maxlen: 24
178.254.182.0/24 maxlen: 24
109.111.255.0/24 maxlen: 24
89.23.94.0/23 maxlen: 23
109.111.242.0/24 maxlen: 24
109.111.241.0/24 maxlen: 24
109.111.249.0/24 maxlen: 24
109.111.251.0/24 maxlen: 24
109.111.247.0/24 maxlen: 24
89.23.64.0/24 maxlen: 24
89.23.66.0/23 maxlen: 23
185.157.45.0/24 maxlen: 24
185.157.46.0/24 maxlen: 24
185.157.47.0/24 maxlen: 24
89.23.72.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:38:31:ac:73:60:de:62:2e:d9:96:27:f7:66:17:cb:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=764f8daadf1d775d59d1502b573901b875513b56
Validity
Not Before: Nov 2 11:54:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=77750795296a0b47f6ff493718c42421d99d77d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ab:20:96:9b:09:95:b4:20:2d:6b:13:8f:c6:
53:b7:52:4e:ce:75:c7:e4:ce:0e:8e:08:b6:4c:24:
ed:a9:6d:c6:b1:bd:c5:68:01:28:c2:4c:e4:d2:42:
9e:22:7c:ba:ac:95:da:1f:d9:3d:b3:f0:09:7f:1e:
14:00:6c:5d:8c:d8:cf:e4:88:e5:4e:e6:4f:06:e7:
ec:7d:74:eb:a5:b7:11:72:f2:1c:60:37:67:97:1b:
d9:94:a6:29:99:0a:bc:14:8c:c4:c4:3b:7c:dc:99:
47:78:8c:4a:de:90:64:6c:a8:5b:af:a2:27:07:54:
cd:df:84:d6:e2:32:86:53:5c:57:5a:23:a7:03:7c:
dd:04:c5:a8:4f:5e:06:a3:1b:06:a8:00:b5:06:4c:
20:a4:7b:4e:0d:5c:85:98:7d:a3:97:45:f3:e1:e1:
32:a7:17:6e:10:15:e9:a1:be:cd:e6:c9:1f:d6:0e:
39:50:1e:fa:4e:8b:ea:eb:20:f8:cb:dd:91:f8:f1:
25:3e:19:58:ce:b2:7f:33:b7:36:a0:e3:09:f6:eb:
50:d2:e5:ac:8b:b7:c9:cd:52:77:18:6d:ee:08:28:
3a:13:9b:dc:83:9d:cc:27:20:5e:ce:bf:01:06:d2:
2f:00:22:37:ef:7d:58:e3:01:6d:26:0e:c9:de:fe:
b2:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:75:07:95:29:6A:0B:47:F6:FF:49:37:18:C4:24:21:D9:9D:77:D7
X509v3 Authority Key Identifier:
keyid:76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/d3UHlSlqC0f2_0k3GMQkIdmdd9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.64.0/24
89.23.66.0/23
89.23.72.0/23
89.23.94.0/23
109.111.241.0-109.111.242.255
109.111.247.0/24
109.111.249.0/24
109.111.251.0/24
109.111.255.0/24
178.254.160.0-178.254.164.255
178.254.166.0/23
178.254.173.0-178.254.174.255
178.254.178.0/24
178.254.182.0/24
185.157.45.0-185.157.47.255
Signature Algorithm: sha256WithRSAEncryption
02:2e:12:0e:78:a2:f3:0a:7d:5e:d1:ba:26:96:3d:51:77:dd:
ca:e8:08:c0:25:61:79:1c:de:01:c9:58:92:36:51:4c:e1:ee:
a1:15:da:14:eb:65:08:08:08:64:9f:97:da:61:cc:da:c5:97:
53:f2:7f:19:7d:d3:5b:5a:9c:a9:78:bf:8d:35:7b:cd:f9:62:
4f:52:a2:02:51:e0:03:a6:45:63:91:cd:ed:60:c2:b0:ff:bf:
b5:31:1f:b8:43:9f:56:37:ce:db:2a:52:a9:09:6c:ba:a4:3f:
c5:16:6b:18:ff:03:d0:1f:08:6d:14:da:4b:2e:10:cc:da:61:
db:c9:5b:b7:f6:88:cc:73:46:fa:9c:73:b3:dc:d2:74:72:c6:
a4:23:79:d3:f8:35:dd:d8:90:c7:84:1c:64:69:d0:36:2e:2d:
9e:98:96:c6:6e:c3:d4:1e:fd:a3:c9:3a:ec:3a:8c:41:21:70:
0f:5d:7a:d4:35:0e:9d:24:34:1c:39:6a:96:90:96:02:80:72:
0e:14:a2:17:31:40:ae:1b:34:bb:bb:42:c1:b4:d2:c8:42:34:
1f:90:75:af:14:fe:5c:e7:4c:3f:08:24:57:69:64:0d:b9:71:
6f:25:f6:27:57:1c:45:4c:d1:33:05:ff:b0:41:30:01:57:59:
e7:a9:f8:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:35 2023 by rpki-client on console.sobornost.net