Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/sUZvzaYz6FbQyMZ3LBmYbb0cCog.roa
File: sUZvzaYz6FbQyMZ3LBmYbb0cCog.roa (raw, json)
Hash identifier: DMr2OfxtgZPdQzzG9tFcBuJsnsY2+9mV+SrbkVD4gn8=
Subject key identifier: B1:46:6F:CD:A6:33:E8:56:D0:C8:C6:77:2C:19:98:6D:BD:1C:0A:88
Certificate issuer: /CN=764f8daadf1d775d59d1502b573901b875513b56
Certificate serial: 0184BA9E5C3E41CC9DFE3A776473035D6D16
Authority key identifier: 76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/sUZvzaYz6FbQyMZ3LBmYbb0cCog.roa
Signing time: Sun 27 Nov 2022 19:44:11 +0000
ROA not before: Sun 27 Nov 2022 19:44:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209260
IP address blocks: 89.23.78.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:ba:9e:5c:3e:41:cc:9d:fe:3a:77:64:73:03:5d:6d:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=764f8daadf1d775d59d1502b573901b875513b56
Validity
Not Before: Nov 27 19:44:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b1466fcda633e856d0c8c6772c19986dbd1c0a88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c4:0b:14:57:b6:d4:f6:83:63:6c:62:63:d5:
b1:8e:f0:48:a4:6b:8d:49:f4:96:0e:c7:1e:b7:3e:
2d:8f:cf:25:e2:7c:a8:29:f9:32:ec:2c:e6:7b:cd:
c0:88:4c:93:d7:22:6b:8c:eb:a6:3d:c9:b6:61:4c:
e2:98:a7:10:48:31:3e:09:c3:78:30:b6:1d:02:8b:
c3:fc:6a:3d:dd:a0:8d:b4:6b:60:11:e3:29:3f:b9:
82:3e:bc:c6:20:dd:60:db:d5:55:17:73:3b:14:d8:
c3:43:0c:25:a5:93:4c:d2:e8:1b:ff:31:f6:4a:6d:
9f:1a:ea:55:3f:76:d6:76:a6:52:c1:97:db:03:64:
68:c0:e5:66:d7:93:e9:1a:91:91:23:2c:37:ee:4d:
d7:9d:cc:9a:94:6f:54:7c:f0:b4:c3:95:89:b5:85:
a0:16:18:c8:73:e3:be:18:dd:2f:c9:10:c2:01:e3:
98:5b:be:60:83:95:9a:b2:4a:dd:00:e4:51:3d:dd:
70:cd:95:a0:f3:3c:bc:98:ea:c6:93:2c:11:54:61:
80:49:56:73:ed:7e:e2:ef:b0:33:aa:be:09:c2:70:
32:07:53:63:0f:8f:86:bf:30:66:42:06:76:e7:4c:
4e:5a:ac:19:04:c2:68:8a:13:6f:fd:53:5d:d6:ed:
44:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:46:6F:CD:A6:33:E8:56:D0:C8:C6:77:2C:19:98:6D:BD:1C:0A:88
X509v3 Authority Key Identifier:
keyid:76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/sUZvzaYz6FbQyMZ3LBmYbb0cCog.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.78.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:4b:ae:17:0d:3b:52:19:37:52:3f:ba:54:c1:72:08:2c:5d:
25:d8:95:b8:58:8e:87:29:47:4c:a7:6b:fe:0a:3a:50:db:ac:
72:f1:dc:94:99:c8:d0:e5:61:a7:4d:c9:21:d4:f0:e6:6e:45:
c5:73:6e:47:44:ff:7a:aa:21:ef:7a:a2:49:ad:ca:62:a0:8f:
07:11:e2:4c:90:91:83:04:2c:7e:c8:79:b0:ae:86:c5:a9:c9:
00:79:03:3e:00:95:81:bf:28:26:48:f6:4d:c1:d4:13:18:1c:
25:ac:63:d4:f3:6c:51:c3:d3:0b:88:86:0e:dc:c5:39:70:93:
7a:4f:7d:f8:37:79:50:99:44:37:5a:43:9e:4a:ff:31:8e:28:
2b:1f:66:d2:d8:47:2a:2c:b5:fb:77:1e:9f:05:f3:6f:ba:ff:
14:f2:e5:ec:2e:25:dd:9c:b6:c7:a2:88:04:b3:46:b4:e0:5d:
67:dc:b7:01:84:98:23:a1:46:d6:ce:ca:eb:d9:55:1b:6b:47:
0d:4a:8b:d4:7f:68:d9:68:f7:85:2c:27:cb:6a:80:96:e2:a9:
a8:9f:e6:c0:22:35:f8:26:28:42:94:2f:69:0d:a9:e5:f6:8a:
1c:49:24:53:93:63:1a:ed:59:bf:01:be:d8:87:6c:9a:5b:c4:
19:d0:d3:49
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYS6nlw+Qcyd/jp3ZHMDXW0WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2NGY4ZGFhZGYxZDc3NWQ1OWQxNTAyYjU3MzkwMWI4NzU1
MTNiNTYwHhcNMjIxMTI3MTk0NDExWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMTQ2NmZjZGE2MzNlODU2ZDBjOGM2NzcyYzE5OTg2ZGJkMWMwYTg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8QLFFe21PaDY2xiY9WxjvBIpGuN
SfSWDscetz4tj88l4nyoKfky7Czme83AiEyT1yJrjOumPcm2YUzimKcQSDE+CcN4
MLYdAovD/Go93aCNtGtgEeMpP7mCPrzGIN1g29VVF3M7FNjDQwwlpZNM0ugb/zH2
Sm2fGupVP3bWdqZSwZfbA2RowOVm15PpGpGRIyw37k3XncyalG9UfPC0w5WJtYWg
FhjIc+O+GN0vyRDCAeOYW75gg5WaskrdAORRPd1wzZWg8zy8mOrGkywRVGGASVZz
7X7i77Azqr4JwnAyB1NjD4+GvzBmQgZ250xOWqwZBMJoihNv/VNd1u1EIwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLFGb82mM+hW0MjGdywZmG29HAqIMB8GA1UdIwQY
MBaAFHZPjarfHXddWdFQK1c5Abh1UTtWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGstTnF0OGRkMTFaMFZBclZ6a0J1SFZSTzFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC83YjkyYmYtMDExYi00NGE3LTgzODIt
YmZiMmI4ODE1ZTQ5LzEvc1VadnphWXo2RmJReU1aM0xCbVliYjBjQ29nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC83YjkyYmYtMDExYi00NGE3LTgzODItYmZiMmI4ODE1ZTQ5
LzEvZGstTnF0OGRkMTFaMFZBclZ6a0J1SFZSTzFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWRdOMA0G
CSqGSIb3DQEBCwUAA4IBAQBOS64XDTtSGTdSP7pUwXIILF0l2JW4WI6HKUdMp2v+
CjpQ26xy8dyUmcjQ5WGnTckh1PDmbkXFc25HRP96qiHveqJJrcpioI8HEeJMkJGD
BCx+yHmwrobFqckAeQM+AJWBvygmSPZNwdQTGBwlrGPU82xRw9MLiIYO3MU5cJN6
T334N3lQmUQ3WkOeSv8xjigrH2bS2EcqLLX7dx6fBfNvuv8U8uXsLiXdnLbHoogE
s0a04F1n3LcBhJgjoUbWzsrr2VUba0cNSovUf2jZaPeFLCfLaoCW4qmon+bAIjX4
JihClC9pDanl9oocSSRTk2Ma7Vm/Ab7Yh2yaW8QZ0NNJ
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:35 2023 by rpki-client on console.sobornost.net