Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/bkkgLQCk8NYSt40M1AhH7xrgKvc.roa
File: bkkgLQCk8NYSt40M1AhH7xrgKvc.roa (raw, json)
Hash identifier: P4hcH1efr9gVxBNGr8kZKovGsaiH7sxjqW1pRL7bms0=
Subject key identifier: 6E:49:20:2D:00:A4:F0:D6:12:B7:8D:0C:D4:08:47:EF:1A:E0:2A:F7
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 08AAE438
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/bkkgLQCk8NYSt40M1AhH7xrgKvc.roa
Signing time: Fri 17 Jun 2022 12:40:44 +0000
ROA not before: Fri 17 Jun 2022 12:40:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
151.216.5.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 145417272 (0x8aae438)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Jun 17 12:40:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6e49202d00a4f0d612b78d0cd40847ef1ae02af7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:95:29:19:94:7d:11:3d:96:50:ea:4a:73:5a:
62:e4:7a:2e:cb:9e:52:e5:f6:07:3f:be:20:26:82:
54:57:ab:31:1c:4e:d0:a9:c8:f5:d8:56:a6:02:61:
72:6b:ec:bf:0c:44:b9:8f:53:83:6a:01:bc:87:33:
7e:42:17:b0:57:af:8d:67:57:31:b6:e2:d5:a2:e4:
9c:6f:3e:35:07:8b:31:f9:cb:f6:01:96:68:f7:0d:
ee:c2:37:29:9c:1d:64:1d:6c:92:db:32:e3:bc:32:
ec:1f:26:84:d6:9e:60:d6:d3:ae:dc:0c:ed:1c:03:
17:03:7b:15:a6:08:7b:c0:a2:1f:1c:38:4a:84:78:
e7:84:ea:0e:aa:05:42:e4:15:8d:00:d5:d6:37:aa:
cd:53:dd:8e:44:1b:1b:91:3f:d2:c8:54:42:a5:92:
0e:ba:d1:bc:86:4a:6a:b1:3f:4c:d4:f7:95:d8:e8:
d0:9a:fc:9a:d8:99:92:8d:25:1d:e2:6f:a3:89:09:
a8:0f:bd:f2:f7:81:bb:3b:6d:f9:50:68:1b:cc:22:
a6:f0:35:10:53:e2:97:8a:42:cc:20:4e:50:67:7f:
d7:ae:39:9d:e3:ad:2d:fd:af:23:e1:43:d7:26:5d:
96:a0:ed:60:56:05:63:4b:5a:47:fc:24:c8:ac:10:
f9:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:49:20:2D:00:A4:F0:D6:12:B7:8D:0C:D4:08:47:EF:1A:E0:2A:F7
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/bkkgLQCk8NYSt40M1AhH7xrgKvc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/23
IPv6:
2001:7fc:2::/48
Signature Algorithm: sha256WithRSAEncryption
56:40:af:e2:ff:40:f4:6f:fe:72:6d:23:ed:e3:f2:4a:28:94:
41:f1:f7:eb:67:96:f4:b5:b3:ae:9a:8a:f2:a3:0e:0f:6c:41:
c2:64:2c:f3:60:e8:01:23:8a:68:97:af:de:b0:dd:ce:f2:96:
f0:7b:52:0d:d3:f9:36:3e:6f:87:a3:8c:9e:77:24:ee:55:4b:
83:69:e8:7b:87:0d:7d:4c:af:b8:af:b7:44:d5:0e:89:31:e4:
85:1c:5d:5e:2f:4d:89:ae:d3:aa:76:84:71:46:21:e1:ea:d7:
b9:21:82:42:10:e1:f1:51:93:77:69:55:6e:3e:24:a1:3a:a2:
10:ad:97:3a:e7:f3:03:71:75:bc:60:33:4e:e2:24:fc:3b:24:
b0:b4:7f:99:a7:d7:ec:18:08:45:f0:ab:72:07:ce:16:16:0d:
59:ca:67:00:21:5a:62:ca:77:51:4e:a5:d1:92:0d:09:b9:46:
f2:68:62:44:d4:47:d3:31:23:76:14:10:c8:e8:9a:e2:42:c8:
d2:c1:7e:08:bf:23:81:e4:3f:13:c7:65:86:d2:76:8b:53:80:
26:a2:2c:69:76:e4:22:70:ca:b7:4d:88:66:53:83:40:fd:ce:
73:71:e9:f1:8a:16:a5:0d:e5:89:32:1f:df:fe:bf:b5:20:01:
20:73:20:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:56 2023 by rpki-client on console-fra.rpki-client.org