Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/bGSO19ZOo1ZSdBSlXEuKtseKNgY.roa
File: bGSO19ZOo1ZSdBSlXEuKtseKNgY.roa (raw, json)
Hash identifier: 4nMnRFjuf0yViiRMCODR5W7B3McPcApeqm6F/spOH5E=
Subject key identifier: 6C:64:8E:D7:D6:4E:A3:56:52:74:14:A5:5C:4B:8A:B6:C7:8A:36:06
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 0550ED5C
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/bGSO19ZOo1ZSdBSlXEuKtseKNgY.roa
Signing time: Thu 24 Mar 2022 17:25:13 +0000
ROA not before: Thu 24 Mar 2022 17:25:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89189724 (0x550ed5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Mar 24 17:25:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6c648ed7d64ea356527414a55c4b8ab6c78a3606
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:bb:c6:04:f9:f3:64:d1:b0:c3:d7:f2:29:43:
c6:8a:64:a6:89:9d:24:0e:74:49:8e:b9:5f:cc:2f:
ed:b8:54:f0:d0:4d:c4:79:e7:9b:b5:59:be:bf:56:
bc:51:d7:cd:15:21:29:ff:54:b7:20:fa:f0:de:20:
63:95:a2:44:c7:34:b2:a6:8f:6e:7d:17:be:20:db:
2b:b0:00:e2:51:44:3e:a0:e3:61:aa:8e:79:e8:bd:
36:23:cf:35:9b:bd:3e:8b:da:d1:3b:d3:95:8b:1b:
04:d6:b1:02:30:77:12:1e:36:0e:15:90:f0:97:35:
c5:e1:67:33:26:86:ee:67:d1:67:11:da:f8:65:6c:
e1:13:a6:57:2b:62:71:85:18:f5:33:d2:59:d8:db:
64:73:fa:10:e6:48:36:7a:27:98:6c:c6:d3:4e:57:
15:c8:1a:92:e9:7a:f9:18:6f:00:30:a0:df:19:59:
e6:40:b6:c1:2b:50:66:ab:f3:a7:04:a7:9a:eb:60:
ff:c4:59:e6:af:33:fe:0c:f1:9c:3e:02:7c:7e:14:
61:23:a6:df:7a:f1:29:7d:4e:8a:dd:2c:ed:b5:7c:
e8:16:b8:92:d1:a2:12:b0:e1:68:33:57:e4:fd:18:
42:f8:ee:5a:16:08:7c:0b:0d:a2:f6:ee:5a:86:8a:
58:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:64:8E:D7:D6:4E:A3:56:52:74:14:A5:5C:4B:8A:B6:C7:8A:36:06
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/bGSO19ZOo1ZSdBSlXEuKtseKNgY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/24
IPv6:
2001:7fc:2::/48
Signature Algorithm: sha256WithRSAEncryption
3f:68:e6:a1:92:b4:e9:5e:35:ff:04:d3:58:4f:e6:9f:23:ac:
fa:08:14:a8:5d:01:81:0a:23:7c:51:9b:78:0e:8b:d0:3b:fe:
54:56:01:0a:b6:3c:49:96:c8:54:1f:49:3b:28:ab:33:aa:26:
bd:39:f5:35:6a:ef:18:a9:1e:bb:68:fb:c2:8b:5d:33:63:b2:
0a:93:fd:fb:be:62:3b:b5:d2:f1:37:ec:6e:ef:95:63:f7:3f:
d8:81:ac:b3:8d:64:76:e9:60:4d:6c:ce:3d:92:01:3d:93:98:
a1:65:9b:0b:b0:3e:92:98:48:6b:89:6e:7e:8a:56:69:ed:ad:
34:bf:0a:97:5b:eb:1c:01:3e:f8:ef:79:74:b9:e5:be:d8:95:
d5:e8:13:29:15:c6:7a:ec:1f:de:d5:d2:8c:bc:e5:ba:ef:6e:
99:cd:b8:ac:03:80:b1:28:37:e5:e6:56:da:bc:25:38:ce:d4:
40:26:e3:83:db:f2:4d:15:1a:40:62:c6:eb:04:d3:af:e5:b6:
cd:18:d9:b9:a6:48:1d:2b:8c:1a:ba:b9:4d:8e:1e:7c:55:66:
f9:1d:e5:35:de:71:18:e0:cf:31:b9:19:06:af:14:4d:05:4f:
e9:4d:fb:73:91:b5:f9:7c:11:89:ca:f7:5d:64:6d:e8:2f:b5:
53:ab:9f:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:28 2024 by rpki-client on console-fra.rpki-client.org