Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/riQhrp2C49DnTLxAY5Z6C3W3v60.roa
File: riQhrp2C49DnTLxAY5Z6C3W3v60.roa (raw, json)
Hash identifier: 4zeAWcgpCn9u9wlN6kBywIfAZ1saeObMIl88WgkodWs=
Subject key identifier: AE:24:21:AE:9D:82:E3:D0:E7:4C:BC:40:63:96:7A:0B:75:B7:BF:AD
Certificate issuer: /CN=764f8daadf1d775d59d1502b573901b875513b56
Certificate serial: 0186B851E7033D9EC1BFF6871EEA30EC6331
Authority key identifier: 76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/riQhrp2C49DnTLxAY5Z6C3W3v60.roa
Signing time: Mon 06 Mar 2023 19:07:00 +0000
ROA not before: Mon 06 Mar 2023 19:07:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 150303
IP address blocks: 89.23.92.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:b8:51:e7:03:3d:9e:c1:bf:f6:87:1e:ea:30:ec:63:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=764f8daadf1d775d59d1502b573901b875513b56
Validity
Not Before: Mar 6 19:07:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ae2421ae9d82e3d0e74cbc4063967a0b75b7bfad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:5f:a2:1d:9e:c6:91:b2:79:d4:62:57:b0:7d:
88:fa:65:0d:36:be:04:85:8c:94:86:79:bf:af:a6:
65:4e:42:50:82:4a:f8:7a:62:46:69:be:ea:6c:14:
83:81:60:83:8f:12:b1:73:24:38:5c:20:3f:4b:8f:
4b:ec:92:83:85:f3:92:ac:36:2d:e8:77:39:50:df:
30:d3:04:8e:ef:19:68:70:c8:c9:2e:3f:cc:19:47:
ae:da:69:d6:53:43:79:67:af:2d:e4:e8:2c:45:f4:
b1:02:18:1a:a0:07:28:5b:eb:0e:a6:f0:68:4b:cb:
b8:a1:af:f8:fa:b2:da:d7:4d:0f:ed:95:f9:19:da:
f5:48:bd:47:7a:68:a3:04:73:ef:af:44:6e:f9:ae:
5d:23:db:16:58:89:16:b0:6a:44:c0:58:95:20:4e:
e2:83:b1:60:fe:7c:05:8e:47:9a:8a:68:69:46:ff:
9a:ce:7e:33:4e:24:ce:81:dd:78:a2:8d:69:d3:4d:
2a:2a:4d:0b:e1:05:eb:8b:79:eb:ae:71:3a:95:83:
56:c6:1e:ed:a8:d2:68:fd:a6:e5:1e:b0:c6:c2:e1:
1f:cf:35:10:9c:78:d8:50:7a:4d:ef:69:7f:e3:6d:
c2:7d:bd:4d:f5:91:97:9c:2b:3e:8d:e1:ce:64:bb:
b8:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:24:21:AE:9D:82:E3:D0:E7:4C:BC:40:63:96:7A:0B:75:B7:BF:AD
X509v3 Authority Key Identifier:
keyid:76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/riQhrp2C49DnTLxAY5Z6C3W3v60.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.92.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:9c:20:74:ac:b8:58:69:0b:e4:65:61:98:fb:14:b5:6d:8f:
27:24:2e:21:5f:14:91:a2:ce:38:1f:43:79:26:8d:a8:7b:51:
11:0e:db:9f:7b:fd:f5:15:12:28:6e:17:2a:e2:c1:d8:41:2d:
a8:38:ad:b7:bd:ec:53:64:0c:9d:05:ba:c4:f0:89:15:06:3d:
6b:c9:97:e1:7b:bb:ac:1a:e6:61:aa:69:cd:4d:52:f8:04:c4:
7d:f0:5b:b8:67:1b:ee:78:d3:46:1f:65:a4:b5:e6:af:d5:54:
0a:56:74:9d:ae:61:32:ac:94:fb:d4:ea:45:f3:a3:56:78:29:
21:20:03:84:7f:13:92:5a:d6:06:91:5a:77:1e:16:40:26:f9:
70:01:18:94:e0:c3:e1:63:2e:2c:00:4b:96:09:b6:2f:73:18:
42:f1:1f:82:f5:d6:e2:6f:3c:48:94:90:26:fa:ba:43:f5:fe:
30:17:ee:4b:07:f5:9b:c4:52:03:56:44:ff:c4:1d:0d:74:ec:
fe:dd:a5:e8:be:9a:c3:0c:f6:e1:81:f9:f5:85:9a:f2:0d:4f:
c4:8b:7d:4b:c1:e6:1d:a4:eb:77:60:44:c1:68:5a:2e:29:3e:
f0:1a:15:60:ca:a0:bc:47:2e:4e:ed:67:6a:83:ea:6b:e5:bd:
0e:00:97:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:35 2023 by rpki-client on console.sobornost.net