Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/z696oRiMTyulre-LjPcHthbn27Q.roa
File: z696oRiMTyulre-LjPcHthbn27Q.roa (raw, json)
Hash identifier: WA/xKuzKKrKYjANR5695nrKtIVthB2OqT17dM4RIlvA=
Subject key identifier: CF:AF:7A:A1:18:8C:4F:2B:A5:AD:EF:8B:8C:F7:07:B6:16:E7:DB:B4
Certificate issuer: /CN=764f8daadf1d775d59d1502b573901b875513b56
Certificate serial: 018215666BA41A2498C98C8D7FB99EE2C6A2
Authority key identifier: 76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/z696oRiMTyulre-LjPcHthbn27Q.roa
Signing time: Tue 19 Jul 2022 07:40:09 +0000
ROA not before: Tue 19 Jul 2022 07:40:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211585
IP address blocks: 89.23.76.0/24 maxlen: 24
89.23.86.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:15:66:6b:a4:1a:24:98:c9:8c:8d:7f:b9:9e:e2:c6:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=764f8daadf1d775d59d1502b573901b875513b56
Validity
Not Before: Jul 19 07:40:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cfaf7aa1188c4f2ba5adef8b8cf707b616e7dbb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:2b:5d:2e:3c:f9:f1:77:1b:2a:30:2b:62:3b:
78:3c:08:de:97:71:7b:69:b8:ff:68:05:02:0f:57:
e8:52:4c:68:1d:b1:06:51:33:6f:60:d9:c0:4e:75:
b8:c7:31:6c:58:5b:ea:6b:b5:d2:de:c2:45:5f:9e:
69:40:21:15:d7:07:cc:02:73:18:2e:e8:55:7c:63:
21:84:a8:f5:9c:9f:ed:2e:b7:8b:49:04:3b:c3:87:
6b:f4:3f:60:30:7c:c7:8c:72:48:57:86:14:ab:e7:
37:80:4f:68:1e:5d:6e:30:03:7f:8e:6d:2d:3e:0b:
a1:94:79:f6:ae:81:23:ec:c9:12:26:85:a7:6e:13:
5b:14:05:97:19:77:29:7e:54:dd:49:c3:db:00:69:
ad:f7:0e:a7:15:d7:9a:c6:6b:ee:84:d7:ee:4c:09:
2a:f5:bc:97:d0:54:d4:6e:48:86:65:08:14:68:16:
17:23:6f:d3:ad:63:8d:72:b4:25:d7:2f:61:df:37:
45:e7:b7:39:b2:57:93:ce:03:0c:9a:21:03:70:ba:
48:81:da:ab:04:47:61:54:5c:57:76:c2:94:be:0a:
c5:88:85:5e:d7:95:29:75:14:0b:72:ad:8d:cb:a0:
95:e1:90:b2:8d:74:0e:ff:ae:73:4c:dd:9d:48:be:
f7:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:AF:7A:A1:18:8C:4F:2B:A5:AD:EF:8B:8C:F7:07:B6:16:E7:DB:B4
X509v3 Authority Key Identifier:
keyid:76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/z696oRiMTyulre-LjPcHthbn27Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.76.0/24
89.23.86.0/24
Signature Algorithm: sha256WithRSAEncryption
12:89:2c:d7:44:b1:85:98:18:67:25:c5:0d:ed:eb:c8:4e:bf:
d4:80:a5:88:15:9c:e6:ed:64:e5:82:9a:1a:ea:28:ee:06:a4:
6d:6c:bb:2d:74:35:10:e1:de:1e:ca:7c:9d:01:b1:7a:7c:30:
a7:87:4f:b8:e5:01:b7:40:6a:9c:9e:c6:92:78:b1:4f:06:db:
63:86:54:2a:fe:57:59:bb:5c:a8:6e:72:dd:bd:4d:b8:9b:93:
1a:46:e7:8e:56:b2:6c:a0:5f:bc:b5:48:b6:53:d8:61:e0:34:
87:4d:c4:90:72:ac:9a:c8:f1:d9:df:8e:42:86:76:f2:aa:19:
2a:d3:da:4d:df:d5:17:8c:f7:97:c1:cf:68:69:cd:fe:f8:af:
59:10:50:88:8b:43:16:9b:30:28:52:6a:04:39:c8:bc:fa:d1:
ef:33:c6:51:45:e8:9a:ae:fe:46:6d:26:43:fd:b4:f1:95:a9:
d1:61:90:6e:05:22:2d:af:55:7a:58:37:0d:f6:51:6f:5e:88:
63:8d:80:0b:d8:22:fa:84:ad:8e:c4:29:b4:7c:33:c1:cd:76:
77:52:be:7c:50:8b:5c:c7:64:be:f1:03:e9:63:0a:dd:4b:a7:
79:69:dd:d8:fe:f1:65:60:d5:91:20:de:aa:90:7d:0c:ad:92:
42:ff:3f:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:35 2023 by rpki-client on console.sobornost.net