Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/gLawzS1sZrhZoOUAkPabBl6dFrA.roa
File: gLawzS1sZrhZoOUAkPabBl6dFrA.roa (raw, json)
Hash identifier: oO67skd9iYcNSVtXlvJy5iZPjpx95uL4M2FXrGmo5x0=
Subject key identifier: 80:B6:B0:CD:2D:6C:66:B8:59:A0:E5:00:90:F6:9B:06:5E:9D:16:B0
Certificate issuer: /CN=764f8daadf1d775d59d1502b573901b875513b56
Certificate serial: 018501EFA4DABA31246BEB3D97EE4EEBE8F8
Authority key identifier: 76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/gLawzS1sZrhZoOUAkPabBl6dFrA.roa
Signing time: Sun 11 Dec 2022 16:06:00 +0000
ROA not before: Sun 11 Dec 2022 16:06:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205570
IP address blocks: 178.254.168.0/24 maxlen: 24
89.23.90.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:01:ef:a4:da:ba:31:24:6b:eb:3d:97:ee:4e:eb:e8:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=764f8daadf1d775d59d1502b573901b875513b56
Validity
Not Before: Dec 11 16:06:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=80b6b0cd2d6c66b859a0e50090f69b065e9d16b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:cc:75:d1:97:76:60:7e:86:00:53:6c:bb:cf:
9a:6c:58:dd:db:01:53:bd:98:39:90:0b:2a:04:af:
36:28:ea:29:97:19:18:2d:eb:6d:54:1a:52:7d:9f:
91:92:5f:8f:1b:5c:de:e8:20:e0:54:51:ac:69:95:
77:8a:bf:09:6c:cd:c1:aa:aa:5e:a0:07:90:16:d9:
a7:44:bc:b9:d6:3c:51:ec:1e:72:08:35:6c:24:58:
45:07:fd:fa:a5:7c:53:f9:8f:28:21:27:35:c3:40:
96:fc:09:f2:22:72:b0:e4:66:b3:2d:f6:a3:bf:84:
44:9c:dc:fa:95:5f:80:82:8e:f4:e4:8b:d5:aa:24:
48:cd:04:cf:b4:80:d9:58:60:90:62:0c:86:14:d3:
61:bf:bb:3c:9a:7d:a7:26:2f:c5:83:b5:90:8e:df:
72:94:bd:18:87:0d:5e:de:9a:51:b0:46:b9:eb:d2:
43:81:86:c0:a9:0a:5d:bb:c1:43:72:62:19:ca:51:
a5:fa:d7:03:cf:16:2a:47:9f:b7:8f:cb:dc:53:d4:
0d:60:ed:69:fd:c1:bb:e4:13:24:74:f4:a5:2a:c8:
c9:81:50:1b:22:2b:bf:47:1d:db:4f:88:af:fc:83:
49:07:10:67:ad:c9:87:31:fd:26:aa:de:62:67:3f:
5e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:B6:B0:CD:2D:6C:66:B8:59:A0:E5:00:90:F6:9B:06:5E:9D:16:B0
X509v3 Authority Key Identifier:
keyid:76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/gLawzS1sZrhZoOUAkPabBl6dFrA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.90.0/24
178.254.168.0/24
Signature Algorithm: sha256WithRSAEncryption
52:fe:03:d2:a5:bd:ef:97:ba:cc:f9:60:cc:6e:7a:41:c9:ac:
40:70:3b:00:f7:76:a2:80:c4:10:36:57:75:94:82:35:e3:32:
d2:f4:ea:41:4d:f4:0f:15:43:15:bd:cc:e7:3f:5e:55:c5:2e:
b0:d2:2d:c4:9f:5b:55:d7:f9:cc:37:c5:fc:21:33:7d:43:95:
ab:75:f0:d4:59:99:b3:d5:6e:78:bd:e9:1f:ee:17:10:ed:51:
d5:b9:3c:43:27:2d:29:2a:09:bc:30:69:d7:19:bc:41:08:85:
a5:8a:16:e3:59:89:36:e7:a8:f7:bc:b8:ff:0a:57:ba:44:b2:
28:1a:01:4c:0c:e2:eb:2f:7a:ed:cc:21:ed:a3:95:8d:b7:54:
0c:86:c7:05:2c:0e:74:7b:97:87:e4:95:7d:28:22:0a:78:5f:
a1:53:58:c9:41:0b:08:8f:6e:7f:dc:c9:a5:65:ed:35:7e:62:
f9:80:25:fd:22:ef:88:62:80:81:56:4d:5f:ac:8b:58:64:44:
79:9d:c6:28:8a:1e:73:a3:f6:25:84:73:18:5d:4a:71:ea:27:
9c:7f:4e:25:90:65:79:a6:0d:f3:1e:d1:70:f8:ac:db:e5:c8:
4b:25:e9:72:3a:c8:65:62:96:52:81:12:75:6c:d8:a5:c7:f9:
eb:86:e8:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:35 2023 by rpki-client on console.sobornost.net