Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/1-1_warD9Iod0-7LKEG_eR9OdFDc.roa
File: 1-1_warD9Iod0-7LKEG_eR9OdFDc.roa (raw, json)
Hash identifier: Xn9e2d4yktqNcKykyxL9cxAAoewFXO6KdHaMPzglNLo=
Subject key identifier: FB:5F:F0:6A:B0:FD:22:87:74:FB:B2:CA:10:6F:DE:47:D3:9D:14:37
Certificate issuer: /CN=764f8daadf1d775d59d1502b573901b875513b56
Certificate serial: 01856D11DD65DF5063EE97E2836FBACB167C
Authority key identifier: 76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/1-1_warD9Iod0-7LKEG_eR9OdFDc.roa
Signing time: Sun 01 Jan 2023 11:22:45 +0000
ROA not before: Sun 01 Jan 2023 11:22:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212238
IP address blocks: 89.23.83.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:11:dd:65:df:50:63:ee:97:e2:83:6f:ba:cb:16:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=764f8daadf1d775d59d1502b573901b875513b56
Validity
Not Before: Jan 1 11:22:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fb5ff06ab0fd228774fbb2ca106fde47d39d1437
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:de:8e:1e:6c:5e:9b:50:25:ba:71:8a:b1:a0:
35:de:27:c6:f6:40:ff:ff:b0:f6:02:f5:ed:22:71:
55:d9:9a:bf:9f:f7:b6:e1:56:53:e4:7b:ed:28:1c:
ae:03:33:94:06:53:dd:b2:5f:8f:fe:e1:2c:0b:1a:
24:88:a7:3a:a1:e2:c9:4c:26:f3:39:e2:a8:3a:13:
68:bd:65:f1:36:c2:54:23:8a:e7:7a:b1:61:c7:ae:
5c:6b:77:52:47:91:18:09:84:af:3b:ad:4b:45:b5:
a9:e2:23:f2:87:d7:c8:d5:bf:d3:17:14:0e:57:ef:
a7:9a:69:dc:cf:91:8c:23:7d:c8:a0:60:e3:e7:3e:
87:34:4b:d1:d2:10:e2:0b:39:a5:10:f6:ac:cf:75:
77:cc:d4:3c:0a:d8:0c:22:a1:b5:e8:f3:6e:c6:ba:
17:f5:bb:87:e9:65:ad:92:b8:f2:88:3f:4b:95:67:
2d:06:a4:23:b1:cb:e6:b8:ba:45:81:17:6c:ad:c9:
40:fc:76:d4:2f:53:ab:c5:cb:0e:d9:55:60:0d:02:
de:54:38:7f:33:f8:05:55:4b:aa:86:30:4a:b4:cb:
16:93:07:74:f5:74:09:5c:14:c7:88:ab:26:24:dc:
3b:29:6e:e3:cc:3a:14:42:e6:55:e0:4e:29:be:a6:
8e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:5F:F0:6A:B0:FD:22:87:74:FB:B2:CA:10:6F:DE:47:D3:9D:14:37
X509v3 Authority Key Identifier:
keyid:76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/1-1_warD9Iod0-7LKEG_eR9OdFDc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.83.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:6b:af:bd:a7:a7:e1:41:ac:ee:e4:e2:bd:d7:83:ec:36:7e:
a1:a6:92:9f:11:62:5d:9b:f2:43:10:a1:5b:d5:e3:37:fd:8a:
77:5a:7f:3f:82:b3:ec:4e:99:0a:a2:0f:4c:59:7f:64:68:dc:
3f:7e:81:8f:c2:e9:15:5d:e1:d4:36:ae:87:bd:24:c2:ae:17:
2a:17:25:c7:b0:3c:a9:01:e0:4a:3c:6f:1e:d4:28:da:1f:48:
a6:24:2b:70:54:e1:ae:2b:28:c7:f5:50:5e:c7:eb:d5:5a:4c:
e9:32:e2:d4:69:0f:bb:e4:65:80:42:36:b1:03:f1:9f:de:07:
96:05:de:d5:87:5d:df:ca:46:f7:93:ca:98:7e:2b:08:9a:1c:
67:67:85:22:33:59:f5:0e:78:c6:1e:17:83:a3:3f:3f:83:ab:
b2:96:e7:97:8f:ac:76:50:ca:60:db:2b:6d:3c:c6:da:5d:35:
d2:f3:c3:db:ee:f4:df:fb:f7:98:fb:fc:69:76:f0:2f:13:90:
63:e0:10:f7:db:9e:5a:03:16:36:1d:6f:2c:c6:84:79:41:2e:
56:c7:6e:48:4a:3f:5e:c7:df:a2:2d:10:d8:e6:29:ae:a1:5f:
df:7f:bb:3c:2b:8f:13:8f:f0:59:41:6e:15:76:30:32:ba:0f:
0f:68:22:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:04 2023 by rpki-client on console-fra.rpki-client.org