Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/nvGfphlvdBro9cz8sjvaLK7e0bM.roa
File: nvGfphlvdBro9cz8sjvaLK7e0bM.roa (raw, json)
Hash identifier: So3lAkRtP8fwPD633U5EGTeCVuZ0f7b+pcDkmWuZOew=
Subject key identifier: 9E:F1:9F:A6:19:6F:74:1A:E8:F5:CC:FC:B2:3B:DA:2C:AE:DE:D1:B3
Certificate issuer: /CN=764f8daadf1d775d59d1502b573901b875513b56
Certificate serial: 018410D90EB194DA223F18C7ED25A08B3DEB
Authority key identifier: 76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/nvGfphlvdBro9cz8sjvaLK7e0bM.roa
Signing time: Tue 25 Oct 2022 20:32:51 +0000
ROA not before: Tue 25 Oct 2022 20:32:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 52116
IP address blocks: 178.254.145.0/24 maxlen: 24
178.254.165.0/24 maxlen: 24
178.254.170.0/24 maxlen: 24
178.254.172.0/24 maxlen: 24
178.254.180.0/24 maxlen: 24
178.254.181.0/24 maxlen: 24
178.254.183.0/24 maxlen: 24
89.23.71.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:10:d9:0e:b1:94:da:22:3f:18:c7:ed:25:a0:8b:3d:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=764f8daadf1d775d59d1502b573901b875513b56
Validity
Not Before: Oct 25 20:32:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9ef19fa6196f741ae8f5ccfcb23bda2caeded1b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c7:99:d3:8a:c1:d5:0b:19:c7:2c:d6:79:ba:
cb:de:8d:a2:b4:7f:6a:4f:51:34:d2:da:b9:f4:c3:
4f:ef:37:87:70:61:53:3c:dc:2c:c8:f9:23:96:7b:
47:84:f0:ef:68:eb:69:7f:59:c3:dc:34:70:53:30:
73:8c:a4:a5:d4:0c:39:08:67:a6:42:39:44:9b:e4:
c7:24:79:8a:9a:2a:09:37:62:6d:55:e3:fa:37:7c:
29:7a:81:04:3b:d2:9b:1b:ef:21:88:fc:ab:84:51:
6a:5c:63:48:d8:1e:4c:97:38:b8:10:e5:15:15:36:
5c:dc:5d:26:db:ee:cd:65:f1:64:bd:c9:d8:f2:47:
b7:43:fb:f5:b1:93:02:e4:6a:4f:4c:49:6f:c6:76:
ac:d8:c0:74:ff:f8:d4:67:9b:be:47:2a:21:7e:52:
4d:1a:ec:35:ae:50:33:7c:10:0d:d2:d1:24:09:9e:
a3:b9:d5:a5:ec:86:8a:49:bb:c9:3f:70:cb:27:86:
0b:9a:26:e9:72:e5:e5:53:64:1e:9a:30:1b:89:03:
07:d8:db:54:e4:d1:0e:b6:a2:14:b3:f0:0e:aa:1c:
9d:95:2c:f8:59:df:b0:55:b4:75:ec:f9:81:fc:f4:
f9:c6:20:71:fa:c1:e2:e7:6e:bd:f7:e5:e7:71:44:
0d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:F1:9F:A6:19:6F:74:1A:E8:F5:CC:FC:B2:3B:DA:2C:AE:DE:D1:B3
X509v3 Authority Key Identifier:
keyid:76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/nvGfphlvdBro9cz8sjvaLK7e0bM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.71.0/24
178.254.145.0/24
178.254.165.0/24
178.254.170.0/24
178.254.172.0/24
178.254.180.0/23
178.254.183.0/24
Signature Algorithm: sha256WithRSAEncryption
02:0f:ee:eb:9e:17:3e:7b:a4:d8:5c:80:47:56:83:e1:88:84:
c0:53:0f:ea:70:ec:d8:fd:e1:5d:3d:5a:30:39:00:79:f5:88:
30:1d:42:1e:96:8d:08:70:e9:53:32:88:df:59:92:bc:e1:b3:
ed:db:37:a7:bc:da:b9:76:64:92:b9:cf:d1:d1:de:14:53:ea:
58:71:2a:15:72:2c:77:e6:eb:b6:6c:88:24:5c:05:ea:25:67:
a9:87:b8:3e:f9:1b:72:0d:85:b7:e4:db:82:53:e8:09:af:48:
ee:e8:e9:f9:0e:27:fa:ce:f1:a6:de:9a:97:c6:94:84:fb:50:
4b:62:ca:20:b0:d5:09:03:6c:27:99:bb:0c:cc:2c:e3:a4:51:
fe:7e:fe:c2:d3:42:79:95:32:c7:06:6b:f1:c8:8b:30:f3:89:
87:8d:be:f4:b5:1f:0a:54:c1:68:11:8a:e7:00:5f:6d:ca:fc:
6a:e1:7f:29:cb:a9:56:c7:3f:d2:ee:77:33:ef:c9:0e:ba:f2:
0c:2b:86:c9:b9:75:5a:a1:dc:e0:81:5c:d9:0d:78:ed:d1:cd:
b1:a3:36:c8:92:c7:22:6a:55:ad:ad:f5:97:41:c2:5d:48:8d:
3d:76:72:5f:3e:8d:5d:1a:ce:ad:d8:b1:99:8a:0a:59:3a:95:
cc:79:e1:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:35 2023 by rpki-client on console.sobornost.net