Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/lVhIvC_ZJQRXXQIUqrctpvxhqAc.roa
File: lVhIvC_ZJQRXXQIUqrctpvxhqAc.roa (raw, json)
Hash identifier: JdZIMwql2LOTYiwBkZFWNUuAa+MVlyahlvnzyC6BVIg=
Subject key identifier: 95:58:48:BC:2F:D9:25:04:57:5D:02:14:AA:B7:2D:A6:FC:61:A8:07
Certificate issuer: /CN=764f8daadf1d775d59d1502b573901b875513b56
Certificate serial: 0182CE86D2F59FE438BBE4B9D484557CE3B1
Authority key identifier: 76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/lVhIvC_ZJQRXXQIUqrctpvxhqAc.roa
Signing time: Wed 24 Aug 2022 06:25:18 +0000
ROA not before: Wed 24 Aug 2022 06:25:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 30823
IP address blocks: 89.23.77.0/24 maxlen: 24
89.23.84.0/24 maxlen: 24
89.23.80.0/24 maxlen: 24
89.23.90.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:ce:86:d2:f5:9f:e4:38:bb:e4:b9:d4:84:55:7c:e3:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=764f8daadf1d775d59d1502b573901b875513b56
Validity
Not Before: Aug 24 06:25:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=955848bc2fd92504575d0214aab72da6fc61a807
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:47:e3:91:6b:22:94:aa:44:56:f9:2d:b5:dd:
4a:9e:60:f7:a7:b5:6a:8e:ce:c1:9c:b2:bf:a6:67:
8c:c6:b5:0c:4a:a9:b4:93:53:d9:aa:16:01:db:2b:
86:ca:75:15:c9:75:03:8f:b5:73:b8:b6:4b:de:1f:
0f:45:ce:68:b6:b4:3b:93:7f:e0:39:c0:27:b3:57:
14:3c:4e:4c:63:11:ee:a3:35:c3:f2:ba:b0:11:44:
85:77:c8:76:aa:e3:5b:fd:b3:b1:9d:d4:d5:08:52:
c6:48:ae:55:5d:8b:69:26:b4:f5:a8:74:2c:da:93:
96:8e:28:c8:10:e8:08:15:27:79:8a:e8:41:e9:91:
9e:f3:83:b1:51:c9:47:b8:0a:62:47:6a:a3:3b:30:
86:04:5a:24:98:2e:34:1a:d5:4a:e0:4c:98:93:c5:
28:37:c6:28:35:46:52:00:18:be:55:64:6d:9d:4d:
b9:b2:11:04:86:95:62:65:38:35:b1:27:19:5e:6f:
b0:12:d6:f4:67:e9:5d:12:4e:20:33:d3:5b:05:93:
2a:f4:d6:93:8c:56:b8:02:ba:cf:d0:d1:ee:29:44:
fd:6b:2d:c8:44:66:e0:7b:c8:7a:00:23:ff:fd:c8:
f8:06:49:74:16:41:c0:5a:08:00:f2:2b:19:c0:a9:
30:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:58:48:BC:2F:D9:25:04:57:5D:02:14:AA:B7:2D:A6:FC:61:A8:07
X509v3 Authority Key Identifier:
keyid:76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/lVhIvC_ZJQRXXQIUqrctpvxhqAc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.77.0/24
89.23.80.0/24
89.23.84.0/24
89.23.90.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:bb:f8:f1:db:62:7c:72:ba:99:6d:a2:0b:d9:28:d2:d1:c7:
78:26:31:d0:21:5a:93:6f:a9:38:f2:ce:fe:7f:22:b2:86:ec:
32:5e:18:0c:f4:c4:4c:08:9b:21:1d:61:6c:59:14:9d:50:28:
30:60:e5:95:de:65:44:8f:97:1f:87:70:3d:4d:00:1b:e0:09:
1b:97:05:71:e9:ee:04:30:19:b7:9b:1b:da:42:c5:26:51:c4:
21:cc:9d:59:3e:89:28:7e:f0:90:61:7b:6d:c1:02:20:a0:6d:
79:fe:ec:ec:be:d4:ae:36:2d:61:03:f4:3e:d2:aa:35:c7:73:
88:ea:33:e4:16:fc:98:26:40:98:7e:e2:a2:2e:ee:70:09:a7:
b3:a7:9c:55:67:e3:86:9e:b9:9d:93:4d:f8:51:6e:9d:18:8c:
af:77:7d:4b:32:b9:b5:86:ad:81:c5:97:d9:be:46:14:67:a4:
47:59:cc:66:f7:08:d1:c1:51:f0:64:40:9f:ce:72:ff:8f:d4:
8b:18:8f:54:ee:f8:04:f9:e8:13:e8:ef:71:3b:5a:76:3f:e8:
6a:7a:3a:c7:d2:b6:fd:15:fa:61:4e:4c:0f:e4:52:80:56:b1:
19:69:8c:b9:e9:89:68:46:74:03:ef:c4:55:83:d8:ca:97:d4:
87:98:5d:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:35 2023 by rpki-client on console.sobornost.net