Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/nHGszXpoS9Zv9RrSV46z_YDS7yM.roa
File: nHGszXpoS9Zv9RrSV46z_YDS7yM.roa (raw, json)
Hash identifier: Z+x/kFJoal5aQoyEVey46/+ZSl7uvQ2mXqIBVdwkocQ=
Subject key identifier: 9C:71:AC:CD:7A:68:4B:D6:6F:F5:1A:D2:57:8E:B3:FD:80:D2:EF:23
Certificate issuer: /CN=764f8daadf1d775d59d1502b573901b875513b56
Certificate serial: 0187FB782C39FE11C2EC426C189AE4178891
Authority key identifier: 76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/nHGszXpoS9Zv9RrSV46z_YDS7yM.roa
Signing time: Mon 08 May 2023 13:06:09 +0000
ROA not before: Mon 08 May 2023 13:06:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15731
IP address blocks: 89.23.78.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:fb:78:2c:39:fe:11:c2:ec:42:6c:18:9a:e4:17:88:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=764f8daadf1d775d59d1502b573901b875513b56
Validity
Not Before: May 8 13:06:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9c71accd7a684bd66ff51ad2578eb3fd80d2ef23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ae:c8:36:50:44:74:2c:13:18:9a:99:f6:4c:
aa:e1:1f:59:7f:bf:3d:ba:68:14:d7:3c:4c:49:ed:
8a:3e:e8:7e:44:b8:59:bb:fd:97:3f:36:c3:0e:4b:
1b:41:37:57:3b:a3:46:73:1b:f1:a7:25:d8:9c:c1:
a2:d6:38:92:e5:e6:a1:f5:d1:20:66:56:cc:8c:9f:
d3:7f:c3:8d:cf:ba:3c:b4:d1:a6:7e:6c:7c:09:3d:
bb:e0:fd:03:a8:da:94:af:25:72:ae:ff:9b:01:e3:
83:ae:ef:41:e6:41:79:50:29:28:fb:23:76:d9:61:
76:87:23:e0:40:a2:66:18:11:16:56:ae:6c:97:e8:
bb:0b:ac:a4:87:96:44:d1:30:51:79:1b:81:ea:b7:
23:73:c9:05:ef:01:fa:20:4e:0c:d9:bc:9e:76:12:
d0:aa:25:21:56:67:d5:3c:a2:1f:6f:c2:ef:52:28:
ce:cf:1c:9e:d7:cd:59:f7:e6:ab:57:cc:76:96:94:
b4:e0:f9:9d:52:6b:28:26:9e:c8:15:0e:f2:26:56:
49:03:ea:8e:57:a2:20:be:39:bd:52:1a:2b:84:e2:
64:d2:50:f0:04:4c:bd:4e:3a:bd:d1:a8:b6:4a:86:
ec:da:ef:2e:c7:b7:0d:6d:69:e7:00:5a:95:0a:71:
19:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:71:AC:CD:7A:68:4B:D6:6F:F5:1A:D2:57:8E:B3:FD:80:D2:EF:23
X509v3 Authority Key Identifier:
keyid:76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/nHGszXpoS9Zv9RrSV46z_YDS7yM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.78.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:0b:33:18:c5:75:4c:7a:a4:e3:82:ef:f3:ab:a8:fe:f7:5d:
0e:bc:59:d7:61:eb:fe:3e:52:38:e4:ec:12:31:c9:7a:90:3a:
af:90:dd:92:c1:72:d4:0c:72:41:91:71:5b:5d:d2:b9:51:e9:
27:f0:2c:9e:1f:da:f3:55:fd:20:90:f7:ae:db:fd:8a:f6:2c:
4f:4c:4f:91:89:d2:4d:cc:6d:6f:fe:0e:ba:46:0c:02:dc:88:
07:91:e5:68:db:a7:65:75:07:d3:2e:35:58:40:91:14:33:fa:
13:dd:2e:20:28:27:31:33:17:c1:e9:a3:2f:80:b4:9e:22:4b:
38:30:da:8c:c9:ce:5e:9b:2d:35:03:ca:5b:7c:f7:ad:06:b0:
a5:56:14:71:46:ed:17:35:73:a5:8b:75:14:71:02:6e:7f:67:
9c:99:75:33:cf:74:bd:9f:aa:2d:73:7a:d8:34:b2:a7:db:35:
90:64:79:35:a5:8e:b6:75:90:04:7c:f1:29:06:a1:c2:d0:eb:
ce:e7:60:f1:12:db:2f:64:ec:bb:8a:33:81:39:7c:f9:ec:0f:
a4:01:00:b5:1d:22:7a:8b:6a:66:59:cd:cd:8a:ab:c7:75:f0:
5b:97:73:7e:f0:5a:18:14:c1:ae:31:4c:fc:f7:02:92:4c:82:
34:ba:09:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:04 2023 by rpki-client on console-fra.rpki-client.org