Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/XJDjmiLXpE9R8-u0xClt5xFykOY.roa
File: XJDjmiLXpE9R8-u0xClt5xFykOY.roa (raw, json)
Hash identifier: 1818G1F8VtHwRcFmX8bksneEAPRwH+JOuKxBvogWZNA=
Subject key identifier: 5C:90:E3:9A:22:D7:A4:4F:51:F3:EB:B4:C4:29:6D:E7:11:72:90:E6
Certificate issuer: /CN=764f8daadf1d775d59d1502b573901b875513b56
Certificate serial: 01856D11D887F43500C29BFDD3DBD3B91F29
Authority key identifier: 76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/XJDjmiLXpE9R8-u0xClt5xFykOY.roa
Signing time: Sun 01 Jan 2023 11:22:44 +0000
ROA not before: Sun 01 Jan 2023 11:22:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 64267
IP address blocks: 89.23.81.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:11:d8:87:f4:35:00:c2:9b:fd:d3:db:d3:b9:1f:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=764f8daadf1d775d59d1502b573901b875513b56
Validity
Not Before: Jan 1 11:22:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5c90e39a22d7a44f51f3ebb4c4296de7117290e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:2b:05:f7:64:57:80:47:83:ee:c3:d4:b8:56:
0d:47:95:a5:72:a9:71:b3:9d:db:89:ce:39:af:50:
06:da:94:0f:f5:77:3f:69:db:4f:5f:e9:20:dc:9e:
29:04:29:8b:c7:30:16:b3:f8:b0:da:e2:d3:f5:1f:
9d:08:4a:83:97:88:53:24:fe:2b:6e:4e:2b:90:03:
ff:8d:26:d3:fd:b5:6b:19:ca:cf:8c:d0:5d:88:62:
86:8d:74:27:2c:cc:27:2f:07:93:61:2b:19:c5:7a:
99:73:fc:6d:c8:7a:b0:f9:b5:2e:9a:f3:db:9a:df:
a2:da:a9:01:82:ac:37:ff:c0:a4:bc:a8:fb:e3:b4:
e3:29:de:dd:c0:ca:3a:45:b9:f8:05:a9:01:27:87:
56:01:23:76:e8:ae:6a:ab:30:2f:81:d1:19:77:b0:
62:21:fc:95:41:51:f5:30:d0:87:bb:05:d6:ec:6a:
ee:1b:98:85:c7:b6:c7:b8:38:a8:1d:a1:88:f8:eb:
3e:47:27:8c:3b:f3:19:12:2f:b7:72:52:9b:d6:17:
c4:55:32:47:05:46:5c:74:26:0c:a7:26:5b:8f:5d:
8b:cb:79:6a:54:c5:2a:d8:d0:7a:a3:65:fb:e7:a3:
71:98:eb:63:12:db:6f:29:69:11:90:71:44:b2:06:
da:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:90:E3:9A:22:D7:A4:4F:51:F3:EB:B4:C4:29:6D:E7:11:72:90:E6
X509v3 Authority Key Identifier:
keyid:76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/XJDjmiLXpE9R8-u0xClt5xFykOY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.81.0/24
Signature Algorithm: sha256WithRSAEncryption
91:d8:4a:84:e3:2a:ba:f9:6e:49:c8:f0:20:89:75:29:22:b4:
dc:0e:89:03:54:63:97:41:7b:b0:2f:f9:e2:c3:07:b7:15:73:
e7:a7:b3:10:9e:15:75:b0:29:78:6e:72:c9:9c:17:18:83:7c:
95:0b:c9:9b:f5:8b:cd:ee:4b:52:11:71:60:3a:ac:ab:48:4b:
f2:c7:31:14:b8:25:2e:80:11:a0:10:5f:0c:77:98:9a:ef:a0:
8c:c2:dd:01:61:7e:3b:c3:29:84:58:a4:8d:fd:bc:c0:fb:45:
f1:b5:e9:e6:61:fa:11:06:ab:d6:fc:70:45:e0:93:ad:17:1f:
e6:90:26:3a:93:32:b3:8c:82:dd:a9:78:c9:cd:c9:a5:33:12:
6c:79:85:ba:c0:5c:cf:74:d7:d4:9e:bc:a2:21:a8:85:37:b5:
92:ad:7e:97:d1:61:0f:0f:d0:c6:2f:f8:f3:91:c9:b0:ea:c4:
6a:3c:7c:84:e4:3c:59:79:91:06:d5:d1:79:ba:38:7f:71:2d:
f8:b7:17:f2:e5:5d:ec:ed:1a:91:1a:59:97:d3:3f:a0:b9:aa:
dc:91:00:fc:6c:73:33:18:f7:78:30:41:da:d3:d0:6a:28:bd:
57:65:79:bc:19:ce:79:3f:1e:90:3a:e6:e5:a6:14:21:bf:42:
bd:23:c6:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:17 2024 by rpki-client on console-ams.rpki-client.org