Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/TtjS_dxDsxebD5wqa4EgopQT31A.roa
File: TtjS_dxDsxebD5wqa4EgopQT31A.roa (raw, json)
Hash identifier: 0GBMoQyxEzqshI96tdXoMMr1Vea+g/YtL/lalXZwbOE=
Subject key identifier: 4E:D8:D2:FD:DC:43:B3:17:9B:0F:9C:2A:6B:81:20:A2:94:13:DF:50
Certificate issuer: /CN=764f8daadf1d775d59d1502b573901b875513b56
Certificate serial: 01860460F3265B640183C9175B48C7C9B538
Authority key identifier: 76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/TtjS_dxDsxebD5wqa4EgopQT31A.roa
Signing time: Mon 30 Jan 2023 20:31:47 +0000
ROA not before: Mon 30 Jan 2023 20:31:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206119
IP address blocks: 89.23.91.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:04:60:f3:26:5b:64:01:83:c9:17:5b:48:c7:c9:b5:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=764f8daadf1d775d59d1502b573901b875513b56
Validity
Not Before: Jan 30 20:31:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4ed8d2fddc43b3179b0f9c2a6b8120a29413df50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:39:a3:e9:6f:31:70:fa:9a:36:3d:87:b3:16:
3a:b2:8d:1f:74:44:ba:47:60:46:37:ed:79:55:26:
d6:04:97:42:56:de:12:52:4e:78:13:3c:39:47:83:
a6:9a:8d:0f:02:e4:9e:75:7b:5b:85:b5:bd:1d:1b:
4a:23:9c:a2:a7:7e:49:e2:93:80:16:d3:f5:99:04:
8f:e9:44:21:2d:f1:f8:d0:a3:7e:9d:3c:fd:45:8d:
ad:17:ab:9c:4b:66:51:88:3e:98:28:9a:ed:88:ea:
64:e2:f4:41:ca:bd:10:4b:45:2a:b7:45:55:cc:dc:
eb:b5:d7:80:d0:28:8d:8d:34:e2:f4:52:e1:3f:64:
4c:ce:92:91:ba:c6:c5:fe:c0:a7:98:90:ac:14:2b:
df:b2:7e:74:40:ca:f1:88:b6:73:08:10:2e:b6:e2:
13:15:49:df:6f:15:12:f5:cb:9c:65:19:81:26:1b:
eb:4f:4d:8d:70:ec:eb:c9:5a:97:1e:c3:02:19:dc:
e1:26:cd:58:34:13:99:f9:77:00:52:4d:18:96:d5:
59:36:0a:78:5b:57:b3:23:f8:c4:6a:ae:bd:93:d7:
4c:c7:f8:49:11:f6:c4:9f:e6:f4:2f:c2:47:30:c0:
c1:94:67:bd:4a:8f:3d:9a:7c:be:d3:75:0f:5a:16:
54:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:D8:D2:FD:DC:43:B3:17:9B:0F:9C:2A:6B:81:20:A2:94:13:DF:50
X509v3 Authority Key Identifier:
keyid:76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/TtjS_dxDsxebD5wqa4EgopQT31A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.91.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:26:42:93:7f:c5:de:a0:7c:ce:9e:2f:f2:b5:5f:41:09:83:
60:10:21:92:6c:15:8b:4f:f2:b7:c2:4f:5f:a1:41:a8:df:97:
ad:e3:e1:71:ae:23:f3:af:82:48:74:15:6e:61:e8:f1:17:6b:
2c:fb:88:fb:cb:a8:03:12:04:3f:36:4f:34:52:90:d5:a4:bc:
48:17:b5:05:a6:c8:63:cd:18:69:c9:a7:10:e7:74:e5:12:20:
49:da:c7:13:ef:d6:ca:91:99:da:3a:6a:c3:0b:22:e9:9f:0a:
7c:1e:1d:4a:bb:b1:cf:67:b3:ad:f3:f2:9c:4a:b9:26:fb:83:
95:8f:dc:73:6b:ad:4c:9c:5e:2c:e4:6d:00:9e:68:d9:28:c5:
8b:06:3f:5a:5c:85:22:29:6b:f6:bd:5e:9d:6b:6e:19:cb:52:
df:41:3e:c8:f2:b2:64:a9:15:6c:72:28:61:98:f1:f9:4d:27:
98:66:42:f2:8b:c0:fa:d3:e3:68:88:91:59:fb:92:19:20:f0:
58:45:f3:cb:f3:21:55:d0:0c:5d:a2:4a:b7:11:36:0e:99:b5:
b5:8b:96:6e:2f:e5:98:a5:b1:48:dd:ab:b8:cc:92:38:29:af:
bd:ed:84:9e:9d:2f:88:b3:a9:ff:e0:e4:cb:4a:d9:a8:3f:56:
91:03:cb:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:04 2023 by rpki-client on console-fra.rpki-client.org