Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/orSKYYKhMBeSw7jcOKPIkwzH6cI.roa
File: orSKYYKhMBeSw7jcOKPIkwzH6cI.roa (raw, json)
Hash identifier: Apy4V8oi0JVcdSMjn7iYM4WejJ8ZigzpBRvaOKWMVcI=
Subject key identifier: A2:B4:8A:61:82:A1:30:17:92:C3:B8:DC:38:A3:C8:93:0C:C7:E9:C2
Certificate issuer: /CN=764f8daadf1d775d59d1502b573901b875513b56
Certificate serial: 01849C55C404A90F9F6FAB735F62D2187AAB
Authority key identifier: 76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/orSKYYKhMBeSw7jcOKPIkwzH6cI.roa
Signing time: Mon 21 Nov 2022 22:36:17 +0000
ROA not before: Mon 21 Nov 2022 22:36:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 52116
IP address blocks: 178.254.165.0/24 maxlen: 24
178.254.170.0/24 maxlen: 24
178.254.180.0/24 maxlen: 24
178.254.181.0/24 maxlen: 24
178.254.183.0/24 maxlen: 24
89.23.71.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:9c:55:c4:04:a9:0f:9f:6f:ab:73:5f:62:d2:18:7a:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=764f8daadf1d775d59d1502b573901b875513b56
Validity
Not Before: Nov 21 22:36:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a2b48a6182a1301792c3b8dc38a3c8930cc7e9c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:e7:ce:53:4e:33:95:73:bc:33:71:e2:ee:4c:
44:0d:2b:57:7e:ed:c4:26:08:fe:30:7d:13:c4:af:
92:38:ef:de:ac:d9:67:34:4c:c6:2c:f3:23:db:15:
3d:f3:30:20:db:75:f5:70:52:05:29:59:13:1a:82:
84:3c:d0:a7:87:42:ec:c5:f5:cb:eb:7d:a2:b0:36:
22:b7:b3:09:a2:08:02:45:aa:43:95:42:6a:13:37:
35:b4:87:6f:1b:64:8b:a0:dd:16:e1:ac:27:2a:c0:
0a:ab:d4:b0:f6:e3:ff:5d:43:ac:a0:6f:6f:86:28:
38:40:0a:91:90:d0:e2:07:8f:0d:18:fe:1f:fe:1e:
29:36:b4:6b:36:1c:39:f1:d4:77:cd:c6:ee:6b:62:
9a:5a:38:6a:61:a3:9b:04:d3:97:c1:6e:27:da:ca:
27:9d:23:29:9d:cc:8e:b7:3e:01:49:1c:0c:3d:39:
fb:b1:fe:21:8e:1b:45:99:47:21:26:6e:09:21:3d:
d3:28:54:7a:22:80:73:16:6f:46:e8:32:cf:d2:70:
b3:f3:5e:c6:94:a1:51:2b:45:ff:f8:53:96:0c:52:
3e:b6:33:40:ae:f7:76:27:8b:64:dc:e3:c9:03:4a:
1c:44:f6:c0:9e:02:60:0e:61:d3:c0:e8:47:0c:0f:
14:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:B4:8A:61:82:A1:30:17:92:C3:B8:DC:38:A3:C8:93:0C:C7:E9:C2
X509v3 Authority Key Identifier:
keyid:76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/orSKYYKhMBeSw7jcOKPIkwzH6cI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.71.0/24
178.254.165.0/24
178.254.170.0/24
178.254.180.0/23
178.254.183.0/24
Signature Algorithm: sha256WithRSAEncryption
22:03:de:01:61:1c:7a:6b:83:40:79:9b:eb:f5:09:6d:48:cc:
89:7f:6a:b6:3e:71:64:4d:6e:84:52:4c:5d:f4:db:53:d9:e9:
7a:d7:dd:48:89:bc:fe:d9:da:7e:65:ee:d0:f7:b3:be:42:00:
57:b3:92:8c:cc:5a:4f:b1:99:9f:f9:46:7d:89:1c:b4:10:d1:
bc:90:87:58:11:2e:5c:ad:07:72:62:d8:84:7b:d3:a1:65:3f:
47:df:2e:3b:bd:65:61:21:60:25:f0:ae:55:04:1e:c9:27:aa:
84:83:1b:56:9d:46:a8:b0:89:30:b4:ba:94:81:0f:2d:1e:9c:
37:52:14:36:96:c4:08:49:45:58:b5:4d:5e:98:5f:e9:b8:4e:
2e:99:7b:09:83:83:78:7d:94:17:c0:d5:06:d1:53:d9:33:ee:
d2:7f:b2:79:cb:7f:ad:69:af:37:3a:9e:12:62:df:18:11:71:
12:0c:a8:ca:67:e8:70:d6:1e:60:e1:c3:ae:7f:e7:01:4a:9f:
80:cb:39:72:86:18:eb:c4:e8:8f:fc:26:9c:64:a4:04:5a:e5:
1e:bd:41:b4:db:a9:93:61:62:11:5d:37:32:ff:b7:fe:94:2f:
07:c6:83:ef:21:7d:40:97:84:43:f6:ed:dc:77:5d:75:86:3e:
e4:de:fa:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:35 2023 by rpki-client on console.sobornost.net