Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/4UDHryToFWDeCzBpQlE9StPAznU.roa
File: 4UDHryToFWDeCzBpQlE9StPAznU.roa (raw, json)
Hash identifier: sjWkcaQJRuVglb7evyyYQQuqBoNUAwAPTbTiS7H7ynM=
Subject key identifier: E1:40:C7:AF:24:E8:15:60:DE:0B:30:69:42:51:3D:4A:D3:C0:CE:75
Certificate issuer: /CN=764f8daadf1d775d59d1502b573901b875513b56
Certificate serial: 01880B4B611E203DE20FDBD50986CD0471BE
Authority key identifier: 76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/4UDHryToFWDeCzBpQlE9StPAznU.roa
Signing time: Thu 11 May 2023 14:51:09 +0000
ROA not before: Thu 11 May 2023 14:51:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 89.23.82.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:0b:4b:61:1e:20:3d:e2:0f:db:d5:09:86:cd:04:71:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=764f8daadf1d775d59d1502b573901b875513b56
Validity
Not Before: May 11 14:51:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e140c7af24e81560de0b306942513d4ad3c0ce75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e2:68:21:7a:40:79:45:17:59:30:80:d1:3f:
05:99:4d:8a:27:5b:84:98:50:ed:0d:35:31:bb:1f:
e4:ec:f5:56:08:18:e7:c1:e6:51:4d:55:94:d5:6b:
d1:e1:91:d6:82:5d:34:04:36:05:df:04:06:49:01:
8e:9f:a9:8a:11:06:9d:4f:fb:25:bf:00:15:ce:d0:
1e:97:f1:5f:83:80:5b:de:6a:9e:a6:bb:13:45:4c:
d0:b8:26:e2:39:51:c2:7e:6b:d9:c7:09:d3:3c:56:
70:88:e1:19:b6:c2:69:36:72:b5:9e:13:90:23:c4:
38:45:02:98:39:81:6b:7f:ca:bc:f3:d4:de:3f:c7:
ad:72:ba:71:a9:78:1b:45:88:55:05:a3:e2:65:ae:
8c:8f:39:27:28:e0:41:00:ea:03:6e:a9:7e:06:ea:
e7:75:80:18:7c:35:65:f2:61:3b:9f:3b:5f:da:18:
3d:83:b0:f3:c4:d7:54:f2:9c:a6:34:26:98:f0:01:
49:00:6e:18:48:05:20:7c:5c:66:ef:c6:94:a8:65:
ce:e7:5c:90:24:77:28:b5:b9:9d:57:07:16:c1:31:
9c:19:e3:e2:38:bf:ab:a4:6f:02:f3:f4:9d:7a:8a:
22:e5:48:ef:4e:14:25:07:80:55:b2:60:49:39:cb:
77:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:40:C7:AF:24:E8:15:60:DE:0B:30:69:42:51:3D:4A:D3:C0:CE:75
X509v3 Authority Key Identifier:
keyid:76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/4UDHryToFWDeCzBpQlE9StPAznU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.82.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:c6:dc:ee:cb:da:c6:d5:75:cc:6a:bc:f2:e3:48:a4:da:f7:
e7:e8:c5:34:a1:76:1b:0c:eb:14:10:9f:bf:7f:5a:2d:92:d3:
f7:4a:85:44:90:04:00:b5:a6:32:05:cc:13:b7:ff:ff:9d:05:
32:a0:87:96:9c:3c:95:39:7c:c1:d5:d2:da:f1:54:02:76:b6:
77:15:ff:85:73:ed:c4:ad:ab:f5:c7:de:c4:bd:b8:04:7f:d4:
f9:35:44:86:b8:ea:ab:88:d1:a9:19:81:e5:da:4a:96:80:08:
00:dc:61:03:a6:0b:85:bd:e7:64:0c:26:af:07:b9:16:4f:36:
c3:e6:62:de:ad:d1:44:ee:a3:c1:27:58:c7:7c:93:88:dd:2a:
e3:e1:6f:4e:98:79:95:89:8d:77:18:12:b1:1c:3a:45:2b:7c:
93:c9:71:cc:16:e4:ff:13:1b:5b:89:49:5c:55:c3:78:00:04:
1d:b6:c3:4b:bc:79:07:0d:80:f3:de:06:14:66:ec:1b:5f:76:
3e:0b:44:e3:a0:cc:d5:61:e7:90:43:49:41:05:49:be:f6:08:
6e:db:bc:43:9a:1b:9b:dd:45:b8:6e:df:3f:b5:cf:b1:ec:95:
d8:10:92:b4:84:59:30:d5:e1:23:20:b8:26:93:59:4b:f3:ef:
c6:84:7a:8f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYgLS2EeID3iD9vVCYbNBHG+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2NGY4ZGFhZGYxZDc3NWQ1OWQxNTAyYjU3MzkwMWI4NzU1
MTNiNTYwHhcNMjMwNTExMTQ1MTA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMTQwYzdhZjI0ZTgxNTYwZGUwYjMwNjk0MjUxM2Q0YWQzYzBjZTc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmOJoIXpAeUUXWTCA0T8FmU2KJ1uE
mFDtDTUxux/k7PVWCBjnweZRTVWU1WvR4ZHWgl00BDYF3wQGSQGOn6mKEQadT/sl
vwAVztAel/Ffg4Bb3mqeprsTRUzQuCbiOVHCfmvZxwnTPFZwiOEZtsJpNnK1nhOQ
I8Q4RQKYOYFrf8q889TeP8etcrpxqXgbRYhVBaPiZa6MjzknKOBBAOoDbql+Burn
dYAYfDVl8mE7nztf2hg9g7DzxNdU8pymNCaY8AFJAG4YSAUgfFxm78aUqGXO51yQ
JHcotbmdVwcWwTGcGePiOL+rpG8C8/Sdeooi5UjvThQlB4BVsmBJOct34wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOFAx68k6BVg3gswaUJRPUrTwM51MB8GA1UdIwQY
MBaAFHZPjarfHXddWdFQK1c5Abh1UTtWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGstTnF0OGRkMTFaMFZBclZ6a0J1SFZSTzFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC83YjkyYmYtMDExYi00NGE3LTgzODIt
YmZiMmI4ODE1ZTQ5LzEvNFVESHJ5VG9GV0RlQ3pCcFFsRTlTdFBBem5VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC83YjkyYmYtMDExYi00NGE3LTgzODItYmZiMmI4ODE1ZTQ5
LzEvZGstTnF0OGRkMTFaMFZBclZ6a0J1SFZSTzFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWRdSMA0G
CSqGSIb3DQEBCwUAA4IBAQALxtzuy9rG1XXMarzy40ik2vfn6MU0oXYbDOsUEJ+/
f1otktP3SoVEkAQAtaYyBcwTt///nQUyoIeWnDyVOXzB1dLa8VQCdrZ3Ff+Fc+3E
rav1x97EvbgEf9T5NUSGuOqriNGpGYHl2kqWgAgA3GEDpguFvedkDCavB7kWTzbD
5mLerdFE7qPBJ1jHfJOI3Srj4W9OmHmViY13GBKxHDpFK3yTyXHMFuT/ExtbiUlc
VcN4AAQdtsNLvHkHDYDz3gYUZuwbX3Y+C0TjoMzVYeeQQ0lBBUm+9ghu27xDmhub
3UW4bt8/tc+x7JXYEJK0hFkw1eEjILgmk1lL8+/GhHqP
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:04 2023 by rpki-client on console-fra.rpki-client.org