Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/b49202-6904-42fb-86f7-746400ae2f5e/1/4PUisx5igeKD2EORX9lvvXc0nfA.roa
File: 4PUisx5igeKD2EORX9lvvXc0nfA.roa (raw, json)
Hash identifier: BnaLwTuvjRSbJ036kroE/sljZaLPfXJSKmFIb2ILdQw=
Subject key identifier: E0:F5:22:B3:1E:62:81:E2:83:D8:43:91:5F:D9:6F:BD:77:34:9D:F0
Certificate issuer: /CN=b5bba209d4b1956b956569d72a43154448d4dc03
Certificate serial: 355EDC63
Authority key identifier: B5:BB:A2:09:D4:B1:95:6B:95:65:69:D7:2A:43:15:44:48:D4:DC:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tbuiCdSxlWuVZWnXKkMVREjU3AM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/b49202-6904-42fb-86f7-746400ae2f5e/1/4PUisx5igeKD2EORX9lvvXc0nfA.roa
Signing time: Mon 04 Jul 2022 20:59:18 +0000
ROA not before: Mon 04 Jul 2022 20:59:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58142
IP address blocks: 5.34.206.0/24 maxlen: 24
5.34.205.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 895409251 (0x355edc63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5bba209d4b1956b956569d72a43154448d4dc03
Validity
Not Before: Jul 4 20:59:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e0f522b31e6281e283d843915fd96fbd77349df0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:68:0d:70:f6:0e:ed:75:c2:a7:8f:79:f7:48:
4f:0e:c9:1a:b8:0b:14:fe:11:5e:d5:ed:89:27:27:
32:61:af:79:33:5f:de:42:b5:58:77:4d:af:91:cc:
37:6f:c4:09:ab:24:7c:9d:3c:36:45:a1:79:1b:d7:
07:d3:cd:e3:f1:7e:38:90:96:de:b6:39:bc:7d:35:
57:3a:af:35:70:37:4c:19:a7:eb:07:65:a0:98:3f:
ca:18:73:d0:78:56:b0:23:a9:84:fb:c9:40:35:4b:
b5:3b:6d:59:bf:5d:69:53:6c:6a:a2:f8:91:98:63:
3e:40:89:b9:a3:7a:6b:f1:59:6c:e1:03:76:32:a2:
8d:73:3f:98:a9:68:ef:c5:91:77:eb:ef:f6:82:3a:
b9:a0:bd:4b:c9:fd:0d:7a:41:8c:e9:1a:c5:d5:29:
f5:3a:d0:32:d8:fd:c2:8a:09:36:31:29:bf:04:02:
10:0d:6d:99:43:48:74:03:35:49:bc:dd:d5:ea:58:
83:02:15:2c:1b:2e:d2:ef:38:af:48:7a:7a:89:68:
11:1e:54:34:0f:30:ae:61:27:f4:72:f3:6a:7c:7e:
1f:61:14:eb:1e:da:97:c5:cc:a7:7b:78:51:f1:3b:
6b:71:ba:08:28:90:f6:b3:39:5c:5b:43:53:a2:78:
fc:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:F5:22:B3:1E:62:81:E2:83:D8:43:91:5F:D9:6F:BD:77:34:9D:F0
X509v3 Authority Key Identifier:
keyid:B5:BB:A2:09:D4:B1:95:6B:95:65:69:D7:2A:43:15:44:48:D4:DC:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tbuiCdSxlWuVZWnXKkMVREjU3AM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/b49202-6904-42fb-86f7-746400ae2f5e/1/4PUisx5igeKD2EORX9lvvXc0nfA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/b49202-6904-42fb-86f7-746400ae2f5e/1/tbuiCdSxlWuVZWnXKkMVREjU3AM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.34.205.0-5.34.206.255
Signature Algorithm: sha256WithRSAEncryption
05:94:26:00:29:6d:88:e5:42:40:d7:cd:7b:6f:c0:73:a5:48:
a5:54:45:10:09:0d:61:33:ec:c0:39:cc:40:48:9f:4c:d5:98:
61:e7:24:b0:64:d9:22:2b:96:b2:4d:6c:c2:f0:4d:ea:90:f1:
9d:11:49:61:4e:3b:91:a5:f8:e5:05:b0:09:ab:40:26:e1:e4:
6e:66:2c:8b:f5:7a:d6:ec:e9:30:ad:5b:fe:43:a9:7f:57:b3:
7d:cb:ab:ac:6f:91:78:95:cb:58:bf:35:4b:d2:49:16:50:3c:
4f:a9:31:2b:6a:92:1c:35:65:d2:8b:1c:9f:06:85:9f:0a:df:
57:03:aa:7f:20:e7:86:04:62:b8:17:9f:02:a0:f0:8f:81:7f:
b6:a1:e1:79:a9:47:69:16:b2:a0:62:34:95:69:d6:5d:d0:95:
b6:87:a0:fc:89:6a:f0:5e:26:4e:34:b7:d7:35:7e:39:84:1b:
f5:a9:a1:80:70:c5:d7:c7:4b:7b:9b:96:85:1c:1b:c5:4b:b9:
4a:62:6e:ac:59:07:7c:73:70:7d:82:97:91:21:0c:96:06:c5:
1f:53:8a:34:84:85:38:d2:bc:6a:14:c9:94:e7:2d:1c:e0:cf:
50:58:7d:e7:7a:41:61:e4:a7:36:38:91:ee:10:44:d5:fb:88:
11:92:e5:a6
-----BEGIN CERTIFICATE-----
MIIE9zCCA9+gAwIBAgIENV7cYzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
NWJiYTIwOWQ0YjE5NTZiOTU2NTY5ZDcyYTQzMTU0NDQ4ZDRkYzAzMB4XDTIyMDcw
NDIwNTkxOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZTBmNTIyYjMxZTYy
ODFlMjgzZDg0MzkxNWZkOTZmYmQ3NzM0OWRmMDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMFoDXD2Du11wqePefdITw7JGrgLFP4RXtXtiScnMmGveTNf
3kK1WHdNr5HMN2/ECaskfJ08NkWheRvXB9PN4/F+OJCW3rY5vH01VzqvNXA3TBmn
6wdloJg/yhhz0HhWsCOphPvJQDVLtTttWb9daVNsaqL4kZhjPkCJuaN6a/FZbOED
djKijXM/mKlo78WRd+vv9oI6uaC9S8n9DXpBjOkaxdUp9TrQMtj9wooJNjEpvwQC
EA1tmUNIdAM1Sbzd1epYgwIVLBsu0u84r0h6eoloER5UNA8wrmEn9HLzanx+H2EU
6x7al8XMp3t4UfE7a3G6CCiQ9rM5XFtDU6J4/I0CAwEAAaOCAhEwggINMB0GA1Ud
DgQWBBTg9SKzHmKB4oPYQ5Ff2W+9dzSd8DAfBgNVHSMEGDAWgBS1u6IJ1LGVa5Vl
adcqQxVESNTcAzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3RidWlDZFN4bFd1VlpXblhLa01WUkVqVTNBTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZmEvYjQ5MjAyLTY5MDQtNDJmYi04NmY3LTc0NjQwMGFlMmY1ZS8x
LzRQVWlzeDVpZ2VLRDJFT1JYOWx2dlhjMG5mQS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmEv
YjQ5MjAyLTY5MDQtNDJmYi04NmY3LTc0NjQwMGFlMmY1ZS8xL3RidWlDZFN4bFd1
VlpXblhLa01WUkVqVTNBTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAn
BggrBgEFBQcBBwEB/wQYMBYwFAQCAAEwDjAMAwQABSLNAwQABSLOMA0GCSqGSIb3
DQEBCwUAA4IBAQAFlCYAKW2I5UJA1817b8BzpUilVEUQCQ1hM+zAOcxASJ9M1Zhh
5ySwZNkiK5ayTWzC8E3qkPGdEUlhTjuRpfjlBbAJq0Am4eRuZiyL9XrW7OkwrVv+
Q6l/V7N9y6usb5F4lctYvzVL0kkWUDxPqTErapIcNWXSixyfBoWfCt9XA6p/IOeG
BGK4F58CoPCPgX+2oeF5qUdpFrKgYjSVadZd0JW2h6D8iWrwXiZONLfXNX45hBv1
qaGAcMXXx0t7m5aFHBvFS7lKYm6sWQd8c3B9gpeRIQyWBsUfU4o0hIU40rxqFMmU
5y0c4M9QWH3nekFh5Kc2OJHuEETV+4gRkuWm
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:52 2024 by rpki-client on console-ams.rpki-client.org