Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/HewOHfcf-8DFqOihWpyI41NgQJs.roa
File: HewOHfcf-8DFqOihWpyI41NgQJs.roa (raw, json)
Hash identifier: CGChrwSByIaNpob6c4TTEJpRTjE0sJSC5knB4ErmqI4=
Subject key identifier: 1D:EC:0E:1D:F7:1F:FB:C0:C5:A8:E8:A1:5A:9C:88:E3:53:60:40:9B
Certificate issuer: /CN=764f8daadf1d775d59d1502b573901b875513b56
Certificate serial: 01873140E4E0095C0468E16FDDD1C048CF8F
Authority key identifier: 76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/HewOHfcf-8DFqOihWpyI41NgQJs.roa
Signing time: Thu 30 Mar 2023 06:42:29 +0000
ROA not before: Thu 30 Mar 2023 06:42:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50781
IP address blocks: 89.23.65.0/24 maxlen: 24
89.23.70.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:31:40:e4:e0:09:5c:04:68:e1:6f:dd:d1:c0:48:cf:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=764f8daadf1d775d59d1502b573901b875513b56
Validity
Not Before: Mar 30 06:42:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1dec0e1df71ffbc0c5a8e8a15a9c88e35360409b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:14:88:4b:e5:d8:e7:4d:0d:9b:54:99:46:87:
8e:69:95:58:82:04:4a:0d:31:84:76:d3:4a:74:13:
1a:66:93:b8:e0:3b:6e:04:4f:14:e0:dd:e5:e1:32:
65:af:5a:06:43:98:cb:32:9b:36:cf:b7:b2:30:6d:
a7:3c:64:44:99:9f:81:4f:f9:7c:2c:d0:2a:a5:9d:
62:bc:1a:e4:3e:3d:00:20:34:25:9a:c0:27:b5:7d:
bb:1b:c1:b3:d6:62:75:7d:81:32:37:bd:fa:79:bc:
c1:48:71:95:41:c8:3b:81:0a:6d:a8:cb:46:2b:7b:
ce:84:e6:2c:7c:a3:d7:44:e6:a5:e4:73:2e:ed:f3:
01:6e:e9:95:15:76:4f:5a:8f:da:ce:d8:d4:97:b3:
e7:d9:3e:c5:0e:4c:38:ec:59:b9:be:d5:74:76:50:
6a:ee:2a:11:4b:28:3d:4d:58:2a:a6:54:96:72:88:
bc:ac:7e:09:69:d7:72:1a:18:41:aa:6d:63:94:31:
2e:ad:9c:ef:c7:be:a7:1c:99:dc:50:ae:3a:4e:37:
cf:3e:52:e1:02:98:6e:29:af:e6:a8:23:da:ef:89:
b2:ca:4a:49:92:ed:02:ac:ec:9c:37:61:06:1b:d3:
fd:bf:d3:78:74:e5:33:3d:8e:0c:be:7a:ed:01:9e:
d1:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:EC:0E:1D:F7:1F:FB:C0:C5:A8:E8:A1:5A:9C:88:E3:53:60:40:9B
X509v3 Authority Key Identifier:
keyid:76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/HewOHfcf-8DFqOihWpyI41NgQJs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.65.0/24
89.23.70.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:13:bb:d9:06:59:5c:b6:e0:23:19:fc:4f:41:39:3c:1a:d3:
ef:54:be:ba:86:3f:e6:b9:35:38:20:32:cf:ec:f6:d4:e8:d6:
59:93:f7:9a:84:71:bc:ab:c0:95:48:2b:63:62:2f:42:b4:ff:
f0:53:cc:79:8f:25:fb:c1:3a:be:f1:9a:cd:66:4a:b1:e9:e1:
b7:38:48:b6:40:d7:c1:f7:8d:33:9e:a6:c5:69:c9:17:c1:3c:
eb:3c:74:11:64:7b:bb:17:67:99:1b:47:44:9c:44:6b:f4:39:
ad:79:41:73:40:6a:7a:e1:4c:8b:9d:15:d5:34:c4:b3:86:34:
92:a7:8c:f5:83:c5:06:d1:06:e4:91:27:a9:7d:f5:99:e0:3b:
36:24:f1:32:9b:41:92:d0:62:77:c0:06:25:d7:d3:bb:72:df:
2d:6f:6b:74:2b:fb:c6:47:d9:ef:0d:3f:11:3b:96:46:5a:66:
b6:5c:26:1a:84:53:40:c7:9c:a3:d7:c4:79:ec:37:63:04:f0:
d0:82:07:48:8b:9e:dd:aa:47:57:c5:7a:0c:d2:14:54:82:3e:
df:cf:db:99:a2:a4:c7:6d:dd:71:be:73:98:e7:92:51:01:42:
e8:2a:fc:55:87:7b:37:0d:55:19:25:bd:02:ea:d4:98:77:74:
64:d7:8b:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:04 2023 by rpki-client on console-fra.rpki-client.org