Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/nChaXZ6RF_b_FKrXyhIQIU6pC8g.roa
File: nChaXZ6RF_b_FKrXyhIQIU6pC8g.roa (raw, json)
Hash identifier: nLuY3OaBp6FsY3TShwlKM0lClKqXUCGR8hIoMgd1Qtg=
Subject key identifier: 9C:28:5A:5D:9E:91:17:F6:FF:14:AA:D7:CA:12:10:21:4E:A9:0B:C8
Certificate issuer: /CN=764f8daadf1d775d59d1502b573901b875513b56
Certificate serial: 0182C6F75BFAF8EB42893D496C95EBB2BDA5
Authority key identifier: 76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/nChaXZ6RF_b_FKrXyhIQIU6pC8g.roa
Signing time: Mon 22 Aug 2022 19:11:15 +0000
ROA not before: Mon 22 Aug 2022 19:11:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 400377
IP address blocks: 89.23.87.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:c6:f7:5b:fa:f8:eb:42:89:3d:49:6c:95:eb:b2:bd:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=764f8daadf1d775d59d1502b573901b875513b56
Validity
Not Before: Aug 22 19:11:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9c285a5d9e9117f6ff14aad7ca1210214ea90bc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a8:bc:d2:ea:10:84:83:de:f8:bc:9a:ea:dc:
a3:0f:36:c3:8e:e4:37:50:cb:19:40:33:ea:c4:3a:
8e:5f:61:c1:b3:a6:39:98:cd:5b:f6:bc:d8:e7:a3:
69:df:49:74:72:c6:f6:09:00:00:2c:d1:4e:55:52:
90:70:8d:13:eb:18:9f:f7:bc:4a:7b:7d:69:27:92:
d0:58:b9:65:16:d5:39:f3:7c:84:54:dc:39:31:6a:
b1:b1:16:49:e1:a6:f7:a1:7f:a9:88:a9:f6:49:06:
33:71:a4:a0:06:91:7e:19:b6:2f:4b:67:29:ab:4c:
2a:11:3b:6c:21:30:5c:fa:e9:3c:d2:75:ee:4e:f0:
54:08:35:41:a6:f9:22:e4:37:74:c4:32:4a:c2:fe:
32:a5:0d:5c:6c:16:ec:b9:c5:44:e4:90:d5:66:c9:
4b:62:28:80:7f:57:26:31:3f:68:23:85:b3:43:3d:
bb:6e:66:72:ce:b8:89:82:d5:23:d7:0d:b0:be:db:
f6:ff:04:e4:85:d6:53:b1:7f:d7:b9:4c:d2:58:76:
3c:3e:ec:cd:9a:21:4b:ee:35:cb:dc:86:3c:6a:2f:
ce:85:bd:b3:a2:d7:6e:1b:d3:dd:c3:18:dd:41:d4:
9b:bf:a1:0a:0b:b7:dd:36:74:1e:b0:88:86:2d:68:
44:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:28:5A:5D:9E:91:17:F6:FF:14:AA:D7:CA:12:10:21:4E:A9:0B:C8
X509v3 Authority Key Identifier:
keyid:76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/nChaXZ6RF_b_FKrXyhIQIU6pC8g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.87.0/24
Signature Algorithm: sha256WithRSAEncryption
73:e2:32:ad:f8:eb:02:68:3a:0d:79:18:7c:89:e3:90:6a:2f:
f5:57:f0:13:9f:bf:b0:f6:f4:04:66:d6:1a:c8:9e:41:95:5b:
5e:60:3c:ba:84:02:e0:95:90:ca:74:1c:6c:cc:5f:03:a3:7e:
0c:1e:17:dd:6a:d0:9a:7c:0f:41:02:7f:5e:fe:ee:a5:bc:2c:
a4:6d:4d:89:01:a0:03:21:48:7d:da:7f:13:32:b6:1e:b0:20:
89:36:a8:10:05:e1:9d:31:db:a9:54:c2:47:c9:90:d1:16:b9:
4d:90:45:c8:fc:61:aa:24:c0:69:5b:b3:b2:1a:35:bd:bd:17:
1f:ec:4e:6f:59:1f:db:36:26:af:55:38:79:1d:dc:0d:d7:b4:
07:6b:a6:d8:d3:33:df:dd:5a:42:43:0e:db:1d:a2:3a:4b:29:
65:e5:07:29:04:4d:74:e6:a7:65:e5:4f:81:00:04:c6:34:a7:
7f:e0:f4:8f:8f:65:af:ee:96:93:f2:d5:e0:d2:30:61:8a:df:
8b:96:21:05:24:a0:1b:1c:72:0b:b6:bc:3b:13:41:cc:9e:df:
6c:89:68:1f:79:88:ad:f3:58:f1:b2:b5:a9:9a:fa:15:b6:73:
f9:0f:de:a6:93:ec:67:92:8d:d8:81:fe:e3:7e:09:77:97:d0:
cc:a5:f7:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:54 2023 by rpki-client on console-ams.rpki-client.org