Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/lzY4Lo93X1oBGjAlYJxymvIOXiM.roa
File: lzY4Lo93X1oBGjAlYJxymvIOXiM.roa (raw, json)
Hash identifier: k8gxLSxJ53+GY97/zHHMen1MzKVcH6uD9RN5Uq9H5Og=
Subject key identifier: 97:36:38:2E:8F:77:5F:5A:01:1A:30:25:60:9C:72:9A:F2:0E:5E:23
Certificate issuer: /CN=764f8daadf1d775d59d1502b573901b875513b56
Certificate serial: 01856D11D386FA5CF44A9B32DD1408ACA3CE
Authority key identifier: 76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/lzY4Lo93X1oBGjAlYJxymvIOXiM.roa
Signing time: Sun 01 Jan 2023 11:22:42 +0000
ROA not before: Sun 01 Jan 2023 11:22:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 89.23.82.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:11:d3:86:fa:5c:f4:4a:9b:32:dd:14:08:ac:a3:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=764f8daadf1d775d59d1502b573901b875513b56
Validity
Not Before: Jan 1 11:22:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9736382e8f775f5a011a3025609c729af20e5e23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:9e:5c:2b:ff:e5:a5:af:7b:7c:6f:ec:28:c6:
50:67:84:e7:65:4d:cc:d2:13:f1:f3:95:52:4e:d1:
55:04:84:be:b9:43:d3:be:47:cf:c0:27:5a:82:d4:
52:e3:02:0b:7b:25:61:59:5c:0f:26:ad:ef:ac:3f:
7d:a8:4b:f9:10:77:89:0c:27:fe:ed:c3:bb:0c:e4:
c5:5f:15:aa:43:b8:c5:de:ed:35:e1:94:33:30:4a:
c5:33:53:75:62:b5:b5:58:bc:2c:26:b5:7b:98:e9:
ec:b2:c0:e6:4d:cc:7f:37:9e:2a:de:e2:55:88:2d:
54:93:63:0f:ba:04:68:85:45:f1:35:51:65:e3:a1:
a9:a9:fc:18:6d:3a:97:0f:8b:3c:1b:16:06:3a:02:
d2:f2:b2:95:d0:6e:f1:20:de:21:25:48:ca:0f:8a:
f9:b5:1d:fd:92:35:6c:c4:da:6a:a7:b9:5d:94:e9:
3b:8d:6d:84:a6:6f:40:36:f9:92:75:b6:a3:b8:ed:
b0:4f:b6:b0:30:1a:8e:0f:0d:f3:ae:35:79:47:90:
5b:4d:85:71:fa:31:10:1b:a3:21:4c:49:c5:ef:0e:
90:44:a4:d2:7b:8a:5d:63:2d:57:ce:8d:65:a1:f9:
02:0c:d0:cf:5f:3f:c8:ce:41:cf:b7:43:77:43:d5:
4a:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:36:38:2E:8F:77:5F:5A:01:1A:30:25:60:9C:72:9A:F2:0E:5E:23
X509v3 Authority Key Identifier:
keyid:76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/lzY4Lo93X1oBGjAlYJxymvIOXiM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.82.0/24
Signature Algorithm: sha256WithRSAEncryption
68:84:90:9d:87:be:44:6e:55:5e:9f:34:e7:79:e0:fa:aa:ee:
86:97:6e:55:fa:1c:d0:50:07:e9:bb:39:96:44:01:0c:90:ab:
9e:2b:a0:35:ef:01:ce:68:de:41:2e:18:d3:58:91:8d:bd:7b:
91:95:b0:59:6f:15:ad:7e:c5:7c:e5:90:ad:65:3c:2c:98:da:
59:8b:16:c3:e9:5e:a1:24:59:62:11:3b:d1:9d:c0:e7:5e:94:
e5:55:bf:6a:f9:1b:55:0f:c2:9e:d5:26:43:d8:08:9c:c2:cf:
d0:2f:e0:e0:06:a6:e3:72:72:d0:d9:c2:ce:9d:3d:e7:70:41:
5a:cc:c6:b8:03:36:6a:e1:7a:76:8c:00:85:73:e9:6d:cc:72:
58:c7:bc:07:1a:0f:da:0f:92:93:ea:57:48:85:a0:d8:ce:42:
f8:68:57:1b:1e:aa:43:91:3f:76:95:55:e4:26:3f:01:07:f2:
73:e8:e1:a7:c8:5f:43:f4:e7:c1:ef:91:79:57:97:2b:6a:46:
72:b0:6f:31:28:e1:96:12:ec:14:c1:19:29:29:88:eb:98:1d:
19:0e:63:e8:a6:f9:94:53:d8:ae:b5:3b:f2:8f:96:a9:4f:27:
c5:ab:2a:09:75:03:23:39:71:11:7d:13:69:72:62:a4:c1:2f:
a1:fa:31:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:35 2023 by rpki-client on console.sobornost.net