Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/zBMlDlXwRDhaw70UPd18VEkmwzI.roa
File: zBMlDlXwRDhaw70UPd18VEkmwzI.roa (raw, json)
Hash identifier: bmrc8QpGaxljszJXjK1/qBICUaIhK/msY1mHjNF41Bw=
Subject key identifier: CC:13:25:0E:55:F0:44:38:5A:C3:BD:14:3D:DD:7C:54:49:26:C3:32
Certificate issuer: /CN=764f8daadf1d775d59d1502b573901b875513b56
Certificate serial: 018234CDE5C1BE2D7AF50C3B6988BA3084DF
Authority key identifier: 76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/zBMlDlXwRDhaw70UPd18VEkmwzI.roa
Signing time: Mon 25 Jul 2022 10:01:25 +0000
ROA not before: Mon 25 Jul 2022 10:01:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3356
IP address blocks: 89.23.92.0/24 maxlen: 24
89.23.85.0/24 maxlen: 24
89.23.79.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:34:cd:e5:c1:be:2d:7a:f5:0c:3b:69:88:ba:30:84:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=764f8daadf1d775d59d1502b573901b875513b56
Validity
Not Before: Jul 25 10:01:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cc13250e55f044385ac3bd143ddd7c544926c332
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:fc:52:e8:2b:6b:ae:36:82:5a:b3:8b:80:2e:
9d:e0:26:05:0f:a2:f9:68:b7:e9:01:b0:f9:00:6f:
50:5d:87:d9:ae:6c:29:4f:6e:9d:36:7a:54:a3:68:
66:56:b6:d0:0c:0f:d4:c6:32:04:57:67:64:e3:bc:
7a:ca:99:33:32:33:9b:86:72:92:8b:5a:b5:d6:8d:
86:f6:2f:71:a3:6a:00:a0:0a:eb:4c:82:d5:72:94:
6c:98:48:fd:97:89:9a:63:5f:71:4b:6e:a1:70:5d:
92:a5:4a:59:3b:cb:c9:fd:3e:6a:eb:2d:0e:67:05:
14:cd:df:3a:b7:d0:8a:17:8e:12:e1:90:66:b2:26:
1a:3c:c4:ba:3d:66:16:e5:ea:81:47:5a:eb:0e:73:
e5:44:c8:88:4b:d7:60:bc:44:dd:49:46:2b:a6:be:
47:7c:c8:bf:0c:9a:d9:83:97:79:b4:7c:05:78:10:
6d:f2:69:6c:9d:f4:26:01:f9:f5:49:6c:6c:4b:ad:
bf:74:fd:0f:8e:3b:68:f7:96:32:4d:0b:7f:cf:5d:
0d:ef:db:9e:1b:90:e7:62:c1:1c:72:b5:a0:0d:70:
9d:55:21:dc:cf:3b:10:69:9a:9c:e3:1c:66:7d:e7:
eb:fe:01:1d:6b:0b:60:d4:26:31:f6:67:f2:20:aa:
ec:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:13:25:0E:55:F0:44:38:5A:C3:BD:14:3D:DD:7C:54:49:26:C3:32
X509v3 Authority Key Identifier:
keyid:76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/zBMlDlXwRDhaw70UPd18VEkmwzI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.79.0/24
89.23.85.0/24
89.23.92.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:9f:42:fe:2a:0e:c5:2c:29:35:fb:e0:b3:e9:52:c3:b2:e6:
a3:1b:9d:4c:54:ea:e0:26:9b:bc:e2:24:f3:8a:60:f4:78:e5:
82:b5:ee:4f:bb:4f:54:e0:c5:0d:19:6a:7e:c2:d9:9c:28:ca:
65:5b:88:97:f4:3c:1a:87:25:73:e2:74:38:ff:1e:16:9d:1a:
69:5c:f2:02:cd:ea:1f:b4:8b:14:6f:96:cf:de:66:bb:99:fb:
b2:e4:45:2d:1f:41:64:d1:de:79:9c:67:c1:fb:91:95:bd:e2:
33:f1:94:af:63:bb:ee:06:f3:54:b1:35:6d:b0:d2:20:f2:94:
1c:e2:fa:42:de:81:d1:3e:fc:88:79:51:7d:03:74:ac:2c:b9:
a8:cf:4d:dd:1d:1d:a1:ea:d9:6b:34:57:5e:35:24:f6:0e:74:
fc:a4:36:7d:d2:f4:96:63:c9:19:51:70:57:95:f3:bb:c5:5e:
8e:80:6e:cf:1c:93:74:8c:60:d5:74:03:3b:c8:ba:b4:aa:e1:
11:2e:0d:8c:b0:3e:35:63:d5:10:c3:c9:07:c2:ee:a3:c9:3e:
42:bd:4d:8b:1c:79:bc:6e:9c:f3:f2:c6:af:d4:0d:1c:61:0e:
02:b6:59:f1:d3:a6:26:d8:46:5e:3c:fa:9d:59:8a:62:b7:e8:
6c:dc:74:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:54 2023 by rpki-client on console-ams.rpki-client.org