Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/xQFYpI9GpsijxNM_DdwVVNLmaCU.roa
File: xQFYpI9GpsijxNM_DdwVVNLmaCU.roa (raw, json)
Hash identifier: hmPNCMqco4+R2WntAHyVo7+LyGGZWBJkaJKVaPL/l9Y=
Subject key identifier: C5:01:58:A4:8F:46:A6:C8:A3:C4:D3:3F:0D:DC:15:54:D2:E6:68:25
Certificate issuer: /CN=764f8daadf1d775d59d1502b573901b875513b56
Certificate serial: 0184C7DFFA7AF363F05A9B70E07A3A42D13C
Authority key identifier: 76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/xQFYpI9GpsijxNM_DdwVVNLmaCU.roa
Signing time: Wed 30 Nov 2022 09:30:55 +0000
ROA not before: Wed 30 Nov 2022 09:30:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 89.23.86.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:c7:df:fa:7a:f3:63:f0:5a:9b:70:e0:7a:3a:42:d1:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=764f8daadf1d775d59d1502b573901b875513b56
Validity
Not Before: Nov 30 09:30:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c50158a48f46a6c8a3c4d33f0ddc1554d2e66825
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:50:05:8e:bc:1b:4c:ac:dc:d1:32:10:b2:ff:
b4:8b:3e:7f:d8:0f:ee:ce:14:bc:b3:18:c0:16:a7:
da:ec:58:f0:27:06:7e:88:04:8a:42:48:67:8c:f9:
1c:b3:43:2f:03:ee:81:ee:a2:c6:27:15:dd:72:bc:
ef:fe:f4:0a:d7:41:6e:79:b1:a6:3e:6e:e6:4e:7e:
33:d1:c4:70:3b:a7:b7:11:c3:fb:0c:a4:3c:43:6e:
d7:58:4f:5b:74:bd:88:af:cc:0e:06:47:7c:dd:80:
07:11:3d:6d:c6:73:ed:39:65:b0:1a:ec:0b:6f:70:
63:03:38:53:93:c4:bf:be:0f:d2:2d:5a:69:d8:db:
3a:dd:22:3f:9a:b7:0f:e8:55:69:43:0c:70:fa:81:
ed:1f:8d:cf:3d:10:1c:ed:a3:ce:bd:11:6d:10:c8:
ba:de:c9:ae:33:bf:27:1c:3b:44:16:e7:66:3d:c2:
a6:5a:5a:e6:25:9c:0e:72:4d:a2:48:21:8d:7c:73:
b9:44:e8:4f:ad:75:41:f9:37:82:b3:05:cd:fe:1a:
43:e7:45:4d:63:d1:71:d2:ef:76:0d:d5:4b:8a:c4:
c9:6e:5a:43:fb:2d:59:c5:51:e4:36:62:cc:f9:9d:
8c:b2:1f:97:aa:36:9c:06:ab:01:33:f0:fb:8d:4d:
cc:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:01:58:A4:8F:46:A6:C8:A3:C4:D3:3F:0D:DC:15:54:D2:E6:68:25
X509v3 Authority Key Identifier:
keyid:76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/xQFYpI9GpsijxNM_DdwVVNLmaCU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.86.0/24
Signature Algorithm: sha256WithRSAEncryption
99:24:68:8d:f4:dd:66:8a:53:64:15:f1:a7:83:11:aa:24:36:
27:f4:d2:74:28:83:22:18:9d:3d:57:9e:77:f0:17:fa:7f:58:
ff:55:61:d0:29:71:4e:8b:30:da:bd:c9:22:c5:f0:4e:44:2f:
1d:fa:5a:d9:70:98:13:de:fd:b0:7b:8e:71:7e:a6:d8:e6:45:
14:13:bb:db:1f:c1:08:26:c7:36:fb:58:42:2d:d6:54:18:6e:
34:ea:5b:5e:1d:fb:c1:74:b9:7b:6b:2c:e5:4e:df:e9:fd:81:
20:23:4a:b4:dd:c0:a7:99:61:43:1a:b3:40:f3:73:5f:da:b2:
f7:7d:0a:94:7e:e0:bd:19:84:2a:ac:ed:dc:52:5c:af:96:8c:
1e:0c:1b:e1:4e:41:57:65:82:d3:1e:c1:b0:b0:10:ac:46:87:
a6:34:1a:6f:61:59:ec:aa:d9:f4:87:3a:67:35:89:a7:5f:1a:
73:bb:4e:d8:2d:a3:4a:93:55:9d:11:52:73:8a:51:4b:f9:0e:
32:f2:19:41:eb:2a:26:c7:4e:d2:39:f1:2c:21:60:a7:ed:66:
ac:bf:c8:41:52:a1:f3:f4:8e:d0:e4:c7:85:b6:41:45:7d:ae:
ff:72:22:97:54:76:e3:b0:d3:b8:e9:97:7e:4e:01:02:82:21:
41:07:9b:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:35 2023 by rpki-client on console.sobornost.net