Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/b7ee6c-af99-45af-9c34-4569de2644e2/1/PboHJI2Hs7fqhTJ3yAr_ivlVR7g.roa
File: PboHJI2Hs7fqhTJ3yAr_ivlVR7g.roa (raw, json)
Hash identifier: PDUG476ou13wc6ShC9Y8TqxOB6WMeC3oLylEQkvhk3w=
Subject key identifier: 3D:BA:07:24:8D:87:B3:B7:EA:85:32:77:C8:0A:FF:8A:F9:55:47:B8
Certificate issuer: /CN=8418e90c6deab04ad9d25dd116b1990cdbcd88f2
Certificate serial: 018570B075479540B49D778C10E27CAE6CB5
Authority key identifier: 84:18:E9:0C:6D:EA:B0:4A:D9:D2:5D:D1:16:B1:99:0C:DB:CD:88:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hBjpDG3qsErZ0l3RFrGZDNvNiPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/b7ee6c-af99-45af-9c34-4569de2644e2/1/PboHJI2Hs7fqhTJ3yAr_ivlVR7g.roa
Signing time: Mon 02 Jan 2023 04:14:50 +0000
ROA not before: Mon 02 Jan 2023 04:14:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212667
IP address blocks: 31.222.250.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:b0:75:47:95:40:b4:9d:77:8c:10:e2:7c:ae:6c:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8418e90c6deab04ad9d25dd116b1990cdbcd88f2
Validity
Not Before: Jan 2 04:14:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3dba07248d87b3b7ea853277c80aff8af95547b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f9:1b:59:9a:6c:10:56:9d:73:e6:c0:a4:54:
06:22:b4:41:49:3a:70:5e:ba:d8:a9:8b:8c:3a:20:
b3:09:45:8d:e4:f4:b5:9a:82:04:d6:f1:b4:d4:c8:
5d:a9:87:bc:5d:3a:04:de:96:76:41:c9:fd:25:94:
9d:79:44:45:b6:03:21:ff:30:f7:b6:de:e3:6f:7f:
e2:42:f8:79:dd:54:ff:9b:48:73:74:40:38:0d:32:
12:0e:97:7a:de:6a:58:24:b6:33:25:60:5f:b6:b6:
17:4e:7f:29:79:32:68:03:4d:7e:95:69:90:20:63:
e3:6f:6b:ef:1c:e9:f2:a2:90:a2:63:8f:6e:72:e9:
29:30:ad:64:b2:fc:a7:d4:fe:71:93:47:80:97:9b:
61:32:c1:71:fd:05:59:15:b9:6a:c1:2e:68:60:84:
e2:77:ed:f5:2b:09:24:d6:b3:c7:9c:73:9d:5a:bf:
3d:81:76:20:c1:11:6a:07:1e:01:1c:d8:9f:1c:d7:
7c:4d:14:c2:da:9b:e1:3e:59:88:1d:36:81:48:3e:
35:da:f6:62:1a:6f:d3:f6:b9:41:07:ef:14:52:92:
01:c5:9c:52:24:47:71:93:24:86:06:29:6d:af:42:
04:c1:3a:7d:5e:39:d3:20:72:80:97:d7:75:35:ff:
1a:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:BA:07:24:8D:87:B3:B7:EA:85:32:77:C8:0A:FF:8A:F9:55:47:B8
X509v3 Authority Key Identifier:
keyid:84:18:E9:0C:6D:EA:B0:4A:D9:D2:5D:D1:16:B1:99:0C:DB:CD:88:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hBjpDG3qsErZ0l3RFrGZDNvNiPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b7ee6c-af99-45af-9c34-4569de2644e2/1/PboHJI2Hs7fqhTJ3yAr_ivlVR7g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b7ee6c-af99-45af-9c34-4569de2644e2/1/hBjpDG3qsErZ0l3RFrGZDNvNiPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.222.250.0/24
Signature Algorithm: sha256WithRSAEncryption
94:98:bd:ba:f5:bc:d0:62:6d:02:ae:dd:da:9d:8e:2b:8a:91:
9f:7a:75:32:c6:89:0e:5d:e9:9e:81:f8:f7:42:34:bc:11:1b:
c8:b2:40:f4:51:d2:ed:1e:ea:80:ae:eb:27:1d:ed:fb:e4:f1:
36:2d:24:14:ee:8b:b6:b6:57:d6:b3:b3:18:99:63:4b:c0:70:
09:c9:ee:1a:ba:3b:f9:41:29:a6:24:e7:34:f5:6f:3e:0c:75:
ea:e2:29:d7:9e:e3:c6:c4:f5:1e:8b:92:db:86:00:2c:d2:16:
77:e1:9d:1b:d9:01:67:0f:89:a7:73:80:c3:3c:73:5a:ad:49:
9f:78:bf:17:17:32:4c:8e:06:0e:44:4f:21:a8:35:3e:f8:05:
88:f9:7c:7f:a8:6f:ee:48:c4:1a:82:60:65:b6:65:48:d2:50:
ff:bf:36:fd:d0:11:9a:52:ee:41:44:e4:32:26:f0:3f:0b:b5:
99:33:f3:af:95:10:a5:70:38:a6:ef:e9:a5:88:3a:e4:bb:2f:
87:20:b5:7f:54:1c:6d:c3:f0:13:d3:ac:e1:ca:50:1c:35:54:
da:f9:0c:5d:86:10:51:be:a3:67:cd:8c:3c:50:15:59:9a:30:
b8:71:40:12:14:c2:8a:59:15:bd:ea:60:5b:d6:ea:64:d0:b0:
4e:48:1d:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:34 2024 by rpki-client on console-ams.rpki-client.org