Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/jgYhuXpbwRo8uUKolcXRJXavWNo.roa
File: jgYhuXpbwRo8uUKolcXRJXavWNo.roa (raw, json)
Hash identifier: ZKRLGcHFqPFNjLILMwvz6Vo/Z5il/BMFjmd98nSgdUQ=
Subject key identifier: 8E:06:21:B9:7A:5B:C1:1A:3C:B9:42:A8:95:C5:D1:25:76:AF:58:DA
Certificate issuer: /CN=764f8daadf1d775d59d1502b573901b875513b56
Certificate serial: 018776329EE2B3C9784C3EB72BBFDD1D8C14
Authority key identifier: 76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/jgYhuXpbwRo8uUKolcXRJXavWNo.roa
Signing time: Wed 12 Apr 2023 16:00:41 +0000
ROA not before: Wed 12 Apr 2023 16:00:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62068
IP address blocks: 89.23.92.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:76:32:9e:e2:b3:c9:78:4c:3e:b7:2b:bf:dd:1d:8c:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=764f8daadf1d775d59d1502b573901b875513b56
Validity
Not Before: Apr 12 16:00:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8e0621b97a5bc11a3cb942a895c5d12576af58da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a0:e8:6a:1e:35:54:d9:0b:73:b9:7c:b9:75:
08:5a:65:0d:90:e5:08:5c:86:a3:03:4c:4b:65:c8:
8d:e9:36:a8:62:38:7c:a5:43:3d:c5:aa:d6:0e:b1:
53:71:48:fe:11:68:ae:25:4e:b4:70:aa:61:d5:84:
55:bf:9b:08:92:cf:79:1a:5e:8b:9b:3a:26:52:c8:
7a:75:b0:6e:0f:17:3e:13:5a:99:3a:16:c9:0e:8d:
80:5f:43:67:46:bf:54:b7:c8:20:87:f7:6d:f7:ff:
b7:d6:11:0d:f1:df:e9:c6:a5:38:59:70:a3:68:2c:
ff:07:4b:14:80:4f:ac:b9:35:f6:c9:77:d6:80:7c:
d3:81:8d:31:1d:17:a0:63:aa:4b:81:c0:09:fa:57:
19:16:d4:30:84:af:1f:ed:1a:14:58:25:0c:19:a3:
97:58:fb:c4:60:0b:52:e0:9a:80:63:bd:f6:b8:28:
df:62:6c:41:33:1e:1b:9a:9d:40:97:12:85:9d:d6:
ee:9b:04:71:0e:05:bc:85:a4:20:1e:22:8e:44:e6:
9c:de:dc:9f:29:05:03:74:da:16:ae:48:ab:11:85:
85:2b:a7:dd:e8:c2:04:f8:f8:d1:86:26:f8:76:4e:
10:32:2f:c8:d1:c2:3b:65:1c:70:ee:70:0b:6e:dc:
f3:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:06:21:B9:7A:5B:C1:1A:3C:B9:42:A8:95:C5:D1:25:76:AF:58:DA
X509v3 Authority Key Identifier:
keyid:76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/jgYhuXpbwRo8uUKolcXRJXavWNo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.92.0/24
Signature Algorithm: sha256WithRSAEncryption
97:1c:19:d0:d4:74:8d:04:16:88:32:87:a5:e5:6c:95:24:0f:
68:41:93:5f:24:af:67:2a:87:e9:0b:33:7a:55:13:4a:ee:4f:
c8:c5:d5:99:3a:99:5f:04:63:27:72:06:56:92:e5:97:1a:48:
22:28:5d:29:4c:85:db:a1:70:0b:64:83:55:3d:3e:66:ef:cf:
c7:d9:36:51:01:4b:32:2b:5f:f7:fb:22:7f:55:0e:fc:5e:62:
5c:b4:80:37:35:40:07:15:d5:62:b0:d0:d5:9e:07:5c:45:9d:
69:7c:04:4c:67:a0:12:c3:96:41:7a:c7:e0:81:41:c8:9d:66:
80:f9:22:f5:e1:ab:4d:a5:14:dc:c9:8b:1d:36:8a:d4:cf:6f:
d1:34:f1:11:cc:9e:57:0f:48:88:c3:5a:77:80:92:1b:44:bd:
ec:f0:7d:d3:57:39:2e:60:5b:0a:1a:15:50:a0:b0:c3:9e:48:
0d:52:a4:73:87:15:09:e1:ad:5f:c5:c9:fe:4f:ac:e4:7c:89:
c1:a9:87:1f:1a:76:15:18:cf:9d:42:d7:92:a1:f4:db:41:96:
67:ad:86:2c:fc:3b:c1:16:47:95:4a:01:e5:6c:5b:4c:d2:78:
3f:35:73:b1:3b:0b:c9:e7:a8:1d:1a:73:e3:9e:3c:13:8c:16:
84:91:7e:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:35 2023 by rpki-client on console.sobornost.net