Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/sScUswCkLJJXcp5_qLDwZOjYDjg.roa
File: sScUswCkLJJXcp5_qLDwZOjYDjg.roa (raw, json)
Hash identifier: 5SaOkvCQZ/6KvRsrBgLxqqS45/iFbwQh9saVBD9gRSU=
Subject key identifier: B1:27:14:B3:00:A4:2C:92:57:72:9E:7F:A8:B0:F0:64:E8:D8:0E:38
Certificate issuer: /CN=764f8daadf1d775d59d1502b573901b875513b56
Certificate serial: 0186458A2C98CBFBC88E8E25D94051872A14
Authority key identifier: 76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/sScUswCkLJJXcp5_qLDwZOjYDjg.roa
Signing time: Sun 12 Feb 2023 12:12:08 +0000
ROA not before: Sun 12 Feb 2023 12:12:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50868
IP address blocks: 89.23.89.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:45:8a:2c:98:cb:fb:c8:8e:8e:25:d9:40:51:87:2a:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=764f8daadf1d775d59d1502b573901b875513b56
Validity
Not Before: Feb 12 12:12:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b12714b300a42c9257729e7fa8b0f064e8d80e38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:7d:0e:71:f4:0e:5b:a6:27:41:9c:da:d3:02:
bf:2c:a5:25:87:db:ad:1d:61:cb:ce:35:75:b9:b5:
71:93:57:10:f9:64:d4:05:8d:9b:fb:60:26:ae:71:
16:0e:92:3b:02:7e:2a:6a:d6:16:39:bb:db:1f:27:
cd:81:e9:f6:29:72:94:08:78:25:90:b9:5c:86:4a:
6c:e2:1d:9a:be:75:0b:05:7e:3c:cf:c8:15:20:ac:
6b:5e:bb:20:62:d5:59:3c:97:b5:ab:56:16:d6:e4:
8e:85:cb:af:b3:22:a2:10:b7:ff:0f:cf:fa:bc:cb:
6f:e5:0e:74:5d:3b:2d:7f:01:59:b4:52:74:ba:f0:
41:3e:5d:d5:c0:a0:40:ff:84:db:65:d9:72:0d:c2:
d2:cc:e2:60:f2:80:8e:7f:1c:fa:36:94:82:9b:db:
06:85:43:c0:df:05:55:77:06:c6:38:6b:99:7b:95:
8f:15:85:2f:e2:a7:63:6d:52:e4:f1:a0:be:95:19:
ef:23:55:87:5f:ce:96:58:2f:95:0d:1f:4e:33:c1:
6d:9b:d1:60:d4:95:79:48:b3:e3:60:7b:a6:89:a0:
bc:d6:0f:a4:86:de:7a:ad:73:b1:a9:43:99:b1:e5:
48:0a:5d:37:1e:07:2c:85:7f:a7:a8:f3:45:38:4e:
df:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:27:14:B3:00:A4:2C:92:57:72:9E:7F:A8:B0:F0:64:E8:D8:0E:38
X509v3 Authority Key Identifier:
keyid:76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/sScUswCkLJJXcp5_qLDwZOjYDjg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.89.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:1c:3d:39:60:63:79:2b:da:b9:8f:46:33:a2:a9:55:b0:fe:
9a:39:74:fd:c4:f3:4d:45:00:b1:ea:d9:1a:ea:a7:4f:80:22:
e0:a5:0e:1e:06:3f:61:42:0f:0e:32:05:b6:30:ac:49:9b:74:
b5:29:f5:8a:e6:3b:f3:b6:59:07:dc:25:5f:4f:47:fe:50:c0:
be:e8:92:bb:11:cf:d0:e5:40:30:f1:25:92:a2:d8:2d:95:71:
0a:74:82:13:77:cd:b8:02:f3:7d:20:3e:ba:ce:d3:bf:b0:62:
c9:70:c7:e0:6d:5f:a2:a5:8d:86:7f:e8:f8:5f:2d:ee:40:72:
4c:76:18:9f:fb:1a:e9:fa:51:fa:43:73:59:49:4e:14:91:4a:
13:ee:9b:46:16:16:bc:5a:d9:b2:26:37:e3:07:2a:24:38:8d:
fe:0e:4f:a4:15:38:77:de:5b:bf:cd:fb:a9:ab:31:bc:9b:2b:
ec:05:e5:56:5f:1a:18:a2:76:b8:2e:23:17:41:4e:74:f8:b0:
8e:00:1e:d9:bb:31:bf:bf:ac:81:c2:74:64:52:a2:3b:13:90:
47:c5:0d:c5:e9:e0:33:40:f3:92:3f:94:85:aa:db:ff:a8:c8:
a5:8a:1a:f5:a1:1b:1b:2a:7c:5a:19:d6:4c:d4:20:a0:fb:26:
b7:de:17:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:35 2023 by rpki-client on console.sobornost.net