Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/qzcB80kpjw13EgnX0GU-Y70QkmA.roa
File: qzcB80kpjw13EgnX0GU-Y70QkmA.roa (raw, json)
Hash identifier: re8C1JIk0+o4CLvkZ6r4FMIVUiNb88CpHHMC0zKj+dA=
Subject key identifier: AB:37:01:F3:49:29:8F:0D:77:12:09:D7:D0:65:3E:63:BD:10:92:60
Certificate issuer: /CN=764f8daadf1d775d59d1502b573901b875513b56
Certificate serial: 0187FB782BDEB1B83CD5520EA2B945E1F18E
Authority key identifier: 76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/qzcB80kpjw13EgnX0GU-Y70QkmA.roa
Signing time: Mon 08 May 2023 13:06:09 +0000
ROA not before: Mon 08 May 2023 13:06:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 89.23.86.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:fb:78:2b:de:b1:b8:3c:d5:52:0e:a2:b9:45:e1:f1:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=764f8daadf1d775d59d1502b573901b875513b56
Validity
Not Before: May 8 13:06:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ab3701f349298f0d771209d7d0653e63bd109260
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:df:0f:0b:81:db:4b:ac:40:06:13:8a:90:64:
df:92:7d:ed:16:da:c9:0a:28:a5:ce:a0:84:b3:e1:
10:2f:ef:f0:8f:1f:f0:02:ec:4d:a0:82:cd:5e:5e:
bf:33:1c:ff:01:84:91:00:b8:84:91:91:f5:da:26:
ac:41:4f:1e:ba:84:06:a0:35:1b:eb:5a:8d:22:fa:
b8:54:e9:db:c0:87:54:8c:1c:3a:11:12:9c:89:48:
e6:f4:90:08:52:85:8b:b1:88:f6:85:42:1a:a9:fc:
6c:2c:22:7a:3e:4f:a4:80:64:f2:69:59:8d:be:b7:
18:a6:20:06:de:b3:58:f6:94:4b:4e:45:a6:41:ca:
ee:e1:a2:37:df:a2:85:c3:32:02:3f:10:12:1e:6a:
83:5c:59:5c:1f:2f:09:54:34:55:25:8f:28:a6:5d:
a0:4d:56:b6:6a:2e:61:50:ca:ff:f0:5f:90:43:43:
3d:38:cb:fe:27:ed:4b:b2:4d:50:c6:0e:5b:48:e6:
a3:5d:3d:87:6c:88:5e:04:25:5b:88:a4:62:fc:6d:
ed:dd:ad:72:01:53:2d:fb:68:ac:61:8c:2c:26:fe:
ef:6d:db:47:50:b5:46:4f:b7:b2:3a:f1:20:91:92:
50:e1:fa:22:41:5a:81:ab:e6:b3:70:44:e3:8e:d8:
8a:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:37:01:F3:49:29:8F:0D:77:12:09:D7:D0:65:3E:63:BD:10:92:60
X509v3 Authority Key Identifier:
keyid:76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/qzcB80kpjw13EgnX0GU-Y70QkmA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.86.0/24
Signature Algorithm: sha256WithRSAEncryption
70:62:56:d3:90:38:26:62:b1:0e:92:cc:44:c3:67:5d:d5:33:
b8:02:56:08:3c:74:b2:33:b1:d6:c6:38:b4:9e:0d:98:4c:40:
4b:07:84:94:b0:81:d5:70:70:ea:34:62:16:19:16:32:a0:21:
fc:3c:b4:6d:fd:0e:f9:1e:16:83:36:2f:8a:a5:90:73:a3:9c:
af:92:53:a7:41:92:3d:1f:27:67:76:1e:c9:f3:ed:f3:35:df:
1f:41:11:0b:0d:47:c2:a4:f2:6d:0e:1a:2b:10:de:2c:8d:fe:
2b:89:3a:23:22:0b:ee:63:fd:bb:71:95:06:f7:49:27:c9:12:
b5:ed:c6:0e:fb:50:f5:c7:3f:de:da:83:67:4b:3f:48:58:77:
3a:6d:a1:c4:7d:41:ae:1a:17:e0:aa:30:5f:b6:59:26:f2:35:
76:f2:e2:0a:8a:ec:05:16:32:51:41:04:1b:7b:2c:9f:f3:0c:
24:63:c8:29:3a:e4:fd:63:3d:9b:90:48:20:ca:04:72:46:86:
c2:bf:55:da:3d:71:1e:52:e0:f9:e3:f6:5a:cd:2c:6b:8e:7d:
ef:0b:95:78:24:b3:e2:66:82:4a:3c:d7:15:d7:f2:bc:2f:e3:
ea:57:5e:45:7b:e8:7b:d1:2b:87:12:01:a7:41:87:b8:ee:23:
db:21:4b:78
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYf7eCvesbg81VIOorlF4fGOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2NGY4ZGFhZGYxZDc3NWQ1OWQxNTAyYjU3MzkwMWI4NzU1
MTNiNTYwHhcNMjMwNTA4MTMwNjA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYjM3MDFmMzQ5Mjk4ZjBkNzcxMjA5ZDdkMDY1M2U2M2JkMTA5MjYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkd8PC4HbS6xABhOKkGTfkn3tFtrJ
CiilzqCEs+EQL+/wjx/wAuxNoILNXl6/Mxz/AYSRALiEkZH12iasQU8euoQGoDUb
61qNIvq4VOnbwIdUjBw6ERKciUjm9JAIUoWLsYj2hUIaqfxsLCJ6Pk+kgGTyaVmN
vrcYpiAG3rNY9pRLTkWmQcru4aI336KFwzICPxASHmqDXFlcHy8JVDRVJY8opl2g
TVa2ai5hUMr/8F+QQ0M9OMv+J+1Lsk1Qxg5bSOajXT2HbIheBCVbiKRi/G3t3a1y
AVMt+2isYYwsJv7vbdtHULVGT7eyOvEgkZJQ4foiQVqBq+azcETjjtiKQQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKs3AfNJKY8NdxIJ19BlPmO9EJJgMB8GA1UdIwQY
MBaAFHZPjarfHXddWdFQK1c5Abh1UTtWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGstTnF0OGRkMTFaMFZBclZ6a0J1SFZSTzFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC83YjkyYmYtMDExYi00NGE3LTgzODIt
YmZiMmI4ODE1ZTQ5LzEvcXpjQjgwa3BqdzEzRWduWDBHVS1ZNzBRa21BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC83YjkyYmYtMDExYi00NGE3LTgzODItYmZiMmI4ODE1ZTQ5
LzEvZGstTnF0OGRkMTFaMFZBclZ6a0J1SFZSTzFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWRdWMA0G
CSqGSIb3DQEBCwUAA4IBAQBwYlbTkDgmYrEOksxEw2dd1TO4AlYIPHSyM7HWxji0
ng2YTEBLB4SUsIHVcHDqNGIWGRYyoCH8PLRt/Q75HhaDNi+KpZBzo5yvklOnQZI9
Hydndh7J8+3zNd8fQRELDUfCpPJtDhorEN4sjf4riTojIgvuY/27cZUG90knyRK1
7cYO+1D1xz/e2oNnSz9IWHc6baHEfUGuGhfgqjBftlkm8jV28uIKiuwFFjJRQQQb
eyyf8wwkY8gpOuT9Yz2bkEggygRyRobCv1XaPXEeUuD54/ZazSxrjn3vC5V4JLPi
ZoJKPNcV1/K8L+PqV15Fe+h70SuHEgGnQYe47iPbIUt4
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:35 2023 by rpki-client on console.sobornost.net