Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/sOCrvS-0cfWXh4GK2tQsrMZHSkk.roa
File: sOCrvS-0cfWXh4GK2tQsrMZHSkk.roa (raw, json)
Hash identifier: BhchEXVGaL2rBaJbgURHMF+dxrjVAgviaDNG1+LgrpA=
Subject key identifier: B0:E0:AB:BD:2F:B4:71:F5:97:87:81:8A:DA:D4:2C:AC:C6:47:4A:49
Certificate issuer: /CN=764f8daadf1d775d59d1502b573901b875513b56
Certificate serial: 01840F6C648F13D20A0B2BC6FDE6EB77AFE8
Authority key identifier: 76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/sOCrvS-0cfWXh4GK2tQsrMZHSkk.roa
Signing time: Tue 25 Oct 2022 13:54:32 +0000
ROA not before: Tue 25 Oct 2022 13:54:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 52116
IP address blocks: 89.23.93.0/24 maxlen: 24
178.254.145.0/24 maxlen: 24
178.254.165.0/24 maxlen: 24
178.254.170.0/24 maxlen: 24
178.254.172.0/24 maxlen: 24
178.254.180.0/24 maxlen: 24
178.254.181.0/24 maxlen: 24
178.254.183.0/24 maxlen: 24
89.23.71.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:0f:6c:64:8f:13:d2:0a:0b:2b:c6:fd:e6:eb:77:af:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=764f8daadf1d775d59d1502b573901b875513b56
Validity
Not Before: Oct 25 13:54:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b0e0abbd2fb471f59787818adad42cacc6474a49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:a9:95:00:bf:de:97:cd:42:65:e9:cb:bd:73:
1b:87:45:56:d0:b8:49:41:d8:11:bb:ba:dc:1e:7d:
2f:c7:dc:41:ae:3f:24:39:7b:ac:14:a8:6a:21:21:
50:81:67:43:f2:84:21:b2:ad:38:f0:48:31:28:37:
ce:a6:47:de:b8:83:b9:8c:08:61:db:d7:44:7c:69:
e5:da:8c:99:50:13:69:87:18:12:ec:09:15:7a:7f:
b2:41:26:82:4a:a1:aa:d3:e6:ce:da:ef:5b:fc:b6:
8d:7a:df:63:d0:b2:8e:81:50:d6:3d:ef:9a:ac:e6:
80:b8:c4:32:44:de:e6:47:0a:91:c0:45:f9:83:e2:
0a:fc:1e:ff:51:b3:2e:3f:59:99:fd:17:d8:01:ee:
03:6e:05:09:0a:57:28:af:6b:c5:29:63:f8:3f:6f:
35:90:5f:94:c2:91:9d:62:54:49:8d:30:91:f1:83:
58:86:3e:c9:3d:1b:33:80:b7:db:19:36:cb:7f:5c:
f3:eb:e4:63:8d:32:cd:24:3a:1c:03:8c:e7:a0:e1:
ae:06:5b:56:e3:3c:23:04:36:20:9c:54:bf:91:a8:
41:74:4a:bd:ed:e1:fa:cd:88:be:2d:a6:e6:cb:5e:
5b:72:9d:08:2a:ef:5c:ed:24:27:e2:83:be:cd:e6:
32:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:E0:AB:BD:2F:B4:71:F5:97:87:81:8A:DA:D4:2C:AC:C6:47:4A:49
X509v3 Authority Key Identifier:
keyid:76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/sOCrvS-0cfWXh4GK2tQsrMZHSkk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.71.0/24
89.23.93.0/24
178.254.145.0/24
178.254.165.0/24
178.254.170.0/24
178.254.172.0/24
178.254.180.0/23
178.254.183.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:0f:fd:1e:f4:bf:a4:7c:33:ea:1c:51:d4:2e:0f:7c:7c:cb:
69:81:0e:96:bc:fa:7b:f5:98:b9:0c:5d:cd:99:e8:f6:87:04:
44:a5:da:df:c0:eb:45:f5:63:93:01:20:c4:49:44:44:ad:27:
48:87:30:ae:a6:50:ad:4d:c8:58:5e:23:38:d8:11:f0:7c:0c:
17:46:61:30:52:7a:39:d2:49:d0:06:51:3f:6b:66:a6:5f:85:
23:89:f6:58:1e:8a:93:3c:0c:f5:70:94:2f:b9:eb:f7:f9:01:
70:59:00:ff:67:91:c3:f1:e1:78:1b:c5:57:1c:63:a5:d8:cf:
10:47:b5:0c:f0:0d:77:c2:f0:4c:d6:0d:fc:8a:96:db:73:2d:
69:de:2c:a0:69:57:8a:ee:6f:92:ab:ee:f6:9a:8f:8a:dd:0a:
04:7d:32:0f:a0:55:f9:b6:56:d0:3a:4b:1b:c6:c4:25:fb:d4:
24:86:f3:89:ff:5c:1e:c8:69:d9:fc:00:ab:06:29:3a:6d:84:
d5:d0:2e:e7:c4:6e:8f:d4:03:f3:ab:bd:5b:1d:70:7a:dc:1c:
c6:3a:37:a5:5d:19:c1:1d:c1:a0:59:9b:4e:08:21:86:76:c0:
21:37:f3:96:e3:41:76:36:5a:07:75:17:03:e7:a3:5e:58:32:
7f:84:53:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:35 2023 by rpki-client on console.sobornost.net