Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7d93b3-7ddf-4d3a-a454-d56471e61c33/1/JHrQRwlp5oKOCD-hwT-0XWh_pko.roa
File: JHrQRwlp5oKOCD-hwT-0XWh_pko.roa (raw, json)
Hash identifier: 0bTtehOHiGxA6bn1xmRuRPOu0Jne7pNo2WCuEqRCBNQ=
Subject key identifier: 24:7A:D0:47:09:69:E6:82:8E:08:3F:A1:C1:3F:B4:5D:68:7F:A6:4A
Certificate issuer: /CN=cc4261880f82f38471a5717b8009c4fbda2df242
Certificate serial: 09A4BEDF
Authority key identifier: CC:42:61:88:0F:82:F3:84:71:A5:71:7B:80:09:C4:FB:DA:2D:F2:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zEJhiA-C84RxpXF7gAnE-9ot8kI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7d93b3-7ddf-4d3a-a454-d56471e61c33/1/JHrQRwlp5oKOCD-hwT-0XWh_pko.roa
Signing time: Sun 09 Jan 2022 07:07:13 +0000
ROA not before: Sun 09 Jan 2022 07:07:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212815
IP address blocks: 83.150.217.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 161791711 (0x9a4bedf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc4261880f82f38471a5717b8009c4fbda2df242
Validity
Not Before: Jan 9 07:07:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=247ad0470969e6828e083fa1c13fb45d687fa64a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:cb:90:d2:4b:f1:4b:4c:ac:2c:0f:91:91:1b:
8b:04:ac:a2:5b:97:2e:09:d0:56:eb:ce:13:72:fe:
66:56:d5:62:6d:28:c7:bd:b2:ef:48:f0:85:64:0d:
6a:7b:95:87:98:5d:01:f5:24:1a:1e:5c:35:45:80:
3a:48:59:b8:6d:24:5a:40:e0:a0:32:31:fc:fd:5c:
23:b9:a3:24:d8:b9:a0:fc:6e:26:62:f3:45:ee:5e:
28:b3:5e:68:35:2a:06:cb:78:86:6a:44:7e:73:d4:
1d:00:4d:42:b2:81:7d:15:37:c9:73:ab:0d:02:40:
35:37:9b:90:27:9f:ad:cd:93:5a:8b:a6:7b:14:58:
d5:52:8a:8b:29:f8:a5:3f:8e:47:86:00:bb:41:9a:
3a:3c:f0:dd:f6:6b:da:ad:0f:e4:27:a0:d9:fa:14:
e5:06:83:30:ff:9e:ec:d4:83:0a:64:19:31:86:94:
db:98:cd:95:ce:cc:72:7e:54:b5:4d:e2:3e:f3:81:
09:cc:6d:26:35:98:ab:21:99:c3:5c:1f:9a:49:22:
2e:3a:01:dc:bd:d1:d7:77:14:43:6a:71:fe:9b:0c:
54:71:f5:3b:46:82:3d:f3:8c:9b:57:f3:69:35:3c:
82:76:f4:b2:6b:0d:4a:79:ee:dc:f7:19:5f:b1:0f:
e0:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:7A:D0:47:09:69:E6:82:8E:08:3F:A1:C1:3F:B4:5D:68:7F:A6:4A
X509v3 Authority Key Identifier:
keyid:CC:42:61:88:0F:82:F3:84:71:A5:71:7B:80:09:C4:FB:DA:2D:F2:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zEJhiA-C84RxpXF7gAnE-9ot8kI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7d93b3-7ddf-4d3a-a454-d56471e61c33/1/JHrQRwlp5oKOCD-hwT-0XWh_pko.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7d93b3-7ddf-4d3a-a454-d56471e61c33/1/zEJhiA-C84RxpXF7gAnE-9ot8kI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.150.217.0/24
Signature Algorithm: sha256WithRSAEncryption
32:65:d1:1d:d6:a6:68:9f:1f:77:ea:0e:39:4a:6f:1b:ec:84:
e1:09:26:5e:e6:c8:39:a5:d3:7f:c2:50:e0:31:6e:37:07:0d:
26:4f:92:12:25:8a:61:b1:a4:64:26:62:ff:a3:50:85:c8:f0:
cd:cc:68:b6:fa:26:a8:21:2d:78:ad:bd:c7:7b:4f:d7:ef:f7:
99:d3:c3:0c:77:57:df:b1:b5:65:d6:04:ac:4b:8d:7d:f0:de:
05:8f:c4:31:76:09:8c:8a:cf:bb:9f:2c:88:0c:1d:2b:36:e2:
2b:03:97:17:98:96:bd:c6:1f:c4:db:61:03:f6:a3:25:7c:10:
e5:fc:2d:1f:d5:07:9f:4e:21:5c:c5:84:1f:dc:e7:2c:0a:43:
87:8a:7a:46:c1:24:7b:0c:05:79:98:4d:ba:eb:f2:9a:b3:59:
11:4f:fc:89:40:e0:82:d9:b6:5f:79:28:23:8a:27:98:d2:f1:
6d:43:be:ba:3c:42:90:5d:c4:d9:89:f4:d2:a0:26:a1:a3:5b:
80:6b:29:ed:0c:7f:41:4c:dc:e6:d3:6a:d3:e9:cf:ba:d7:d1:
24:ff:86:5d:5b:00:ee:dc:6b:67:2e:e9:44:63:66:44:1d:cf:
ec:e6:22:23:7a:d5:73:9e:c3:50:c3:77:c3:6a:15:c5:a4:13:
ef:38:5a:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:59 2023 by rpki-client on console-fra.rpki-client.org