Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/oA7nlenvu7poWql0tjNhUgJRWBk.roa
File: oA7nlenvu7poWql0tjNhUgJRWBk.roa (raw, json)
Hash identifier: fMDOnOVuUXWMAGAu6T+awNHmtCRbqip7jjiiqEAoyJk=
Subject key identifier: A0:0E:E7:95:E9:EF:BB:BA:68:5A:A9:74:B6:33:61:52:02:51:58:19
Certificate issuer: /CN=764f8daadf1d775d59d1502b573901b875513b56
Certificate serial: 01884800B1552D1EBC8177C23557E55B5382
Authority key identifier: 76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/oA7nlenvu7poWql0tjNhUgJRWBk.roa
Signing time: Tue 23 May 2023 09:46:24 +0000
ROA not before: Tue 23 May 2023 09:46:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199545
IP address blocks: 89.23.86.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:48:00:b1:55:2d:1e:bc:81:77:c2:35:57:e5:5b:53:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=764f8daadf1d775d59d1502b573901b875513b56
Validity
Not Before: May 23 09:46:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a00ee795e9efbbba685aa974b633615202515819
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:2f:7a:c6:4c:0a:d8:80:80:49:5f:ac:ea:a7:
ff:c4:c9:cf:43:e2:10:55:6b:06:90:6c:b4:79:cd:
33:83:bf:df:7b:a1:7e:f0:42:a6:4d:78:67:c7:cc:
39:cf:4b:cd:70:36:3c:bc:a1:e1:c1:9a:d0:53:e0:
e1:7d:5b:c6:21:2c:e0:36:7e:ea:ef:8a:98:78:a1:
63:ce:89:2d:80:8e:22:22:f0:66:a9:1e:46:3f:ec:
83:f1:61:0f:e6:55:f0:21:06:e4:89:94:31:c8:00:
29:7c:20:d9:6d:b6:49:1a:5e:26:de:d3:9d:0f:9d:
57:65:d1:f9:c4:90:62:66:35:e9:3a:c0:87:5e:f6:
5f:a4:1b:12:24:ab:59:cb:29:08:40:9e:ff:4b:b7:
d6:ff:b4:1e:8d:e6:a8:4b:8f:6a:4e:7a:f4:13:1b:
ad:0c:a9:2c:88:0c:45:e3:f7:f7:6d:dc:16:9a:af:
96:24:c2:c0:fd:6b:b2:ef:07:34:1e:e1:89:26:61:
f5:6e:39:43:f0:80:42:01:c3:51:4a:f2:d0:31:0e:
b5:53:38:27:4e:74:ea:ea:7d:39:7c:8b:77:f6:8b:
cd:3f:f7:a0:41:e3:86:c7:5c:31:9b:b5:0f:f9:62:
c1:b1:f2:7c:26:20:ec:d0:95:b6:4e:f0:ca:30:05:
72:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:0E:E7:95:E9:EF:BB:BA:68:5A:A9:74:B6:33:61:52:02:51:58:19
X509v3 Authority Key Identifier:
keyid:76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/oA7nlenvu7poWql0tjNhUgJRWBk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.86.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:37:64:e0:d5:5e:07:52:b5:25:78:bf:21:ea:4f:e3:8a:1a:
7b:f7:7c:15:7e:2c:3f:11:91:64:be:08:2c:10:34:78:a9:15:
d3:59:bd:cc:85:ca:49:89:11:80:73:8b:5f:00:d9:0f:b9:6f:
f0:79:0e:84:ef:81:00:b2:47:95:0b:cb:ec:a6:aa:79:b6:2b:
e0:ad:75:be:9c:96:e6:79:4b:be:76:96:2f:85:b0:44:67:1c:
2d:c3:9c:cb:40:57:d3:be:a2:2b:04:be:be:a2:d2:7d:c7:12:
c6:0c:92:e6:c9:17:1e:0c:bf:cb:91:5e:dc:29:87:18:9c:14:
51:62:6b:8b:57:bb:49:68:a8:61:d2:a4:72:67:87:43:ca:56:
1a:e8:be:a1:c3:6d:75:c6:86:71:5f:bb:55:72:0f:19:f2:52:
c5:c5:c4:74:19:ea:02:0f:d4:4c:6e:d9:ce:e6:77:6f:f1:d7:
d7:07:95:20:28:bd:77:9e:89:bc:e3:7f:68:60:5e:01:ca:23:
0e:d0:19:10:2a:78:08:7b:b6:c8:73:09:79:c9:0d:ed:d1:7e:
6b:94:bf:8f:55:bb:20:ff:72:f1:ee:be:56:95:48:03:07:2b:
8d:a2:ec:45:f6:38:7a:1d:54:a9:9e:b8:03:5d:0e:5b:94:73:
62:38:44:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:54 2023 by rpki-client on console-ams.rpki-client.org