Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/fD1cQFcl0snJ5GQtPBfhU__1g0Y.roa
File: fD1cQFcl0snJ5GQtPBfhU__1g0Y.roa (raw, json)
Hash identifier: 0ybAWIey5hASqCkxEEib+oQkYNeFH54+6Um5+PkUdyA=
Subject key identifier: 7C:3D:5C:40:57:25:D2:C9:C9:E4:64:2D:3C:17:E1:53:FF:F5:83:46
Certificate issuer: /CN=764f8daadf1d775d59d1502b573901b875513b56
Certificate serial: 018636B6644CF52BB720C164A478F9763037
Authority key identifier: 76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/fD1cQFcl0snJ5GQtPBfhU__1g0Y.roa
Signing time: Thu 09 Feb 2023 15:06:08 +0000
ROA not before: Thu 09 Feb 2023 15:06:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 178.254.150.0/24 maxlen: 24
89.23.77.0/24 maxlen: 24
89.23.84.0/24 maxlen: 24
89.23.85.0/24 maxlen: 24
89.23.81.0/24 maxlen: 24
89.23.79.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:36:b6:64:4c:f5:2b:b7:20:c1:64:a4:78:f9:76:30:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=764f8daadf1d775d59d1502b573901b875513b56
Validity
Not Before: Feb 9 15:06:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7c3d5c405725d2c9c9e4642d3c17e153fff58346
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:2a:b5:a7:df:5b:50:30:95:4d:6e:a0:eb:60:
53:c4:9a:3d:69:cd:6c:e1:c7:1c:0a:e0:d5:4f:22:
e7:84:ef:22:b4:c2:a3:60:b0:7c:7e:80:5d:23:18:
06:a6:62:10:da:90:c3:da:23:52:9b:ef:d5:f5:cc:
54:cc:70:1c:a3:ee:95:f5:5c:62:77:97:d5:47:6d:
be:c9:cb:cf:64:cb:f7:e4:8a:c8:9e:24:7d:68:99:
31:77:ed:f9:28:62:6a:60:a9:75:f6:45:fc:93:e8:
cf:08:7d:9c:d3:f6:8c:6e:03:37:7c:05:da:36:3b:
64:11:ae:d1:44:0e:d7:10:b1:d9:03:69:2b:00:78:
f5:28:67:41:b7:33:98:3b:92:9f:69:9d:aa:23:8c:
8f:61:21:44:9b:ef:34:e5:ec:04:d0:87:38:ab:f1:
f2:91:67:4d:28:82:2c:d2:a4:0f:70:5f:36:d8:81:
25:38:57:4b:31:0f:79:1e:d7:52:26:7c:3e:62:5f:
1b:b0:4d:93:d9:fd:c7:a8:19:b3:08:4d:01:33:fd:
e1:22:fd:a8:d0:66:d3:9f:f9:3e:6b:3d:24:03:4b:
d4:ed:7c:f4:f3:e8:da:2c:0b:e5:14:ff:dd:fb:33:
37:3d:6f:15:94:7b:4f:2d:42:d0:63:dc:94:9f:bd:
52:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:3D:5C:40:57:25:D2:C9:C9:E4:64:2D:3C:17:E1:53:FF:F5:83:46
X509v3 Authority Key Identifier:
keyid:76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/fD1cQFcl0snJ5GQtPBfhU__1g0Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.77.0/24
89.23.79.0/24
89.23.81.0/24
89.23.84.0/23
178.254.150.0/24
Signature Algorithm: sha256WithRSAEncryption
14:31:a3:47:49:d2:1e:24:50:8b:43:77:40:7d:e0:8c:60:bf:
46:82:84:78:94:76:68:51:83:fa:1a:a6:3a:1e:b3:28:54:a7:
33:06:0b:d1:5e:47:ca:3b:c2:7c:7f:97:1d:02:cc:e5:3b:3a:
90:ca:7c:48:1c:f4:a1:37:00:b4:bf:33:ea:a7:4c:9f:b2:50:
35:e9:ed:26:1a:04:3a:e9:67:64:20:a0:f4:fc:d4:38:36:31:
27:2d:ba:b9:36:3c:ff:20:b0:4b:02:6f:92:2f:e2:1a:61:fd:
35:fe:b8:58:df:64:1a:66:69:10:42:be:fe:20:fc:5c:c0:10:
fd:5a:69:a2:55:b4:f6:62:2b:d2:91:b2:d8:69:90:a3:05:6f:
cc:e5:06:a3:ab:4a:15:61:f6:21:f0:c2:cb:c1:81:31:06:f3:
65:12:23:52:23:44:86:01:38:4d:6d:98:db:ab:34:6b:a3:08:
3b:01:7f:91:d8:e6:7d:6e:d0:a6:97:e5:93:8a:a3:2d:55:1a:
92:36:2e:a7:d3:0a:19:2d:03:18:34:43:49:30:93:e9:a4:48:
59:50:54:a0:c1:4d:62:59:f3:ef:64:fe:10:27:18:5b:70:e4:
89:10:33:8c:14:cd:78:b0:8d:d2:cf:ef:62:93:1e:5f:67:9b:
64:13:7a:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:35 2023 by rpki-client on console.sobornost.net