Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/nJWDuIYatcC0bGH-Yqj01UJrcu4.roa
File: nJWDuIYatcC0bGH-Yqj01UJrcu4.roa (raw, json)
Hash identifier: YO+b6elkoTDsbveF8PzYi+OoZ1RPf7hGO2CNdvB9qig=
Subject key identifier: 9C:95:83:B8:86:1A:B5:C0:B4:6C:61:FE:62:A8:F4:D5:42:6B:72:EE
Certificate issuer: /CN=764f8daadf1d775d59d1502b573901b875513b56
Certificate serial: 01856D11DAEB3BFB723F5FE4B0CF19E90F31
Authority key identifier: 76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/nJWDuIYatcC0bGH-Yqj01UJrcu4.roa
Signing time: Sun 01 Jan 2023 11:22:44 +0000
ROA not before: Sun 01 Jan 2023 11:22:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205570
IP address blocks: 178.254.168.0/24 maxlen: 24
89.23.90.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:11:da:eb:3b:fb:72:3f:5f:e4:b0:cf:19:e9:0f:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=764f8daadf1d775d59d1502b573901b875513b56
Validity
Not Before: Jan 1 11:22:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9c9583b8861ab5c0b46c61fe62a8f4d5426b72ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:93:dc:da:7f:33:8f:35:ac:a7:2e:0c:bf:03:
01:18:9e:0a:af:87:9a:09:5e:b2:b0:d6:00:80:6b:
f3:b9:ca:17:04:21:28:44:61:66:3e:da:8f:3a:3d:
21:42:91:69:d4:dd:d2:22:82:b1:a6:cd:b0:ca:81:
46:e5:64:f8:d6:42:fa:27:2c:4a:8b:bf:ba:15:29:
62:6f:7d:98:ba:19:a9:47:97:52:ac:69:bf:52:f8:
97:25:4c:52:b0:26:a4:cc:75:5b:38:70:45:ed:91:
e9:4d:be:89:c6:cf:87:c9:ea:9c:5e:17:59:14:f2:
84:59:2d:21:00:42:2f:c7:9e:76:7b:2c:f4:6d:b1:
f4:e4:8e:ce:69:31:e1:65:13:86:4d:04:12:43:9e:
a7:ac:66:ba:89:df:39:49:2a:60:a0:45:aa:e1:32:
a0:22:d5:23:e1:cb:84:ce:c3:e9:3d:15:91:ae:72:
d5:85:60:b2:0b:65:2d:d0:2e:63:84:d4:cd:e5:45:
c9:37:a4:67:3f:db:7a:ad:1c:34:d0:b6:70:52:e2:
21:4c:24:19:fe:ec:90:e6:51:35:ff:00:8b:5c:66:
fe:ea:f4:a9:c8:f6:5d:68:d5:6c:99:99:a7:02:d1:
03:73:9e:6e:87:fa:41:c2:2c:ca:93:e4:d2:23:2d:
37:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:95:83:B8:86:1A:B5:C0:B4:6C:61:FE:62:A8:F4:D5:42:6B:72:EE
X509v3 Authority Key Identifier:
keyid:76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/nJWDuIYatcC0bGH-Yqj01UJrcu4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.90.0/24
178.254.168.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:38:ef:dc:5c:c3:cc:5f:34:30:76:23:2d:6d:ec:8f:d4:c2:
6f:df:b6:1c:75:12:9d:b4:3c:a2:c5:e4:3a:bb:b6:48:c8:17:
79:3d:d0:76:d6:78:89:08:c1:42:8f:c5:1e:6b:46:ba:72:50:
dd:f3:1d:48:f3:17:1c:69:27:06:d9:00:81:09:9f:b0:05:a5:
a7:42:5f:79:ad:fd:00:a5:58:4d:3d:ae:9f:1b:77:2e:60:2a:
3d:da:79:ba:ee:ee:67:2d:85:84:ed:8f:67:ea:d5:13:80:a8:
ff:ea:eb:51:c8:d5:f6:6d:6d:b1:e7:94:94:36:a7:39:f8:29:
89:36:90:58:8f:53:cc:26:d4:71:2d:a0:c4:8d:7f:45:a3:45:
42:2e:65:a2:32:69:54:36:20:49:cf:d7:a7:5d:46:18:8a:e2:
4d:19:e6:ec:fc:31:5c:5e:a5:b6:6d:85:93:ae:f0:6a:3e:f3:
20:6e:ee:5b:3b:a1:64:7a:bb:74:c9:4e:e6:bb:9c:11:20:17:
54:58:94:d6:3e:66:26:e7:12:1e:33:46:a6:73:91:eb:c5:8f:
74:e3:9e:d8:a5:ad:a4:65:5a:ee:d3:c8:f7:52:ee:6c:c3:db:
13:4c:a9:51:35:2c:ea:4a:ce:71:d2:92:6d:d4:ac:11:09:c7:
3d:68:53:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:35 2023 by rpki-client on console.sobornost.net