Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/b49202-6904-42fb-86f7-746400ae2f5e/1/4cydNUQ4wRvIvrYelYrmOXaBoDc.roa
File: 4cydNUQ4wRvIvrYelYrmOXaBoDc.roa (raw, json)
Hash identifier: q1/N1WipDiDPXVJfcSl3ZLObEgcT+51pKtRPmQ2H1hE=
Subject key identifier: E1:CC:9D:35:44:38:C1:1B:C8:BE:B6:1E:95:8A:E6:39:76:81:A0:37
Certificate issuer: /CN=b5bba209d4b1956b956569d72a43154448d4dc03
Certificate serial: 01821C77B3F548A7E4EE4A52E0D25016EFB7
Authority key identifier: B5:BB:A2:09:D4:B1:95:6B:95:65:69:D7:2A:43:15:44:48:D4:DC:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tbuiCdSxlWuVZWnXKkMVREjU3AM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/b49202-6904-42fb-86f7-746400ae2f5e/1/4cydNUQ4wRvIvrYelYrmOXaBoDc.roa
Signing time: Wed 20 Jul 2022 16:36:23 +0000
ROA not before: Wed 20 Jul 2022 16:36:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43260
IP address blocks: 5.34.192.0/21 maxlen: 24
5.34.200.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:1c:77:b3:f5:48:a7:e4:ee:4a:52:e0:d2:50:16:ef:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5bba209d4b1956b956569d72a43154448d4dc03
Validity
Not Before: Jul 20 16:36:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e1cc9d354438c11bc8beb61e958ae6397681a037
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:b4:77:d7:ca:41:1f:9e:d2:59:2e:3b:34:94:
2c:d7:fc:94:86:ff:21:63:3d:de:13:c3:23:59:45:
2a:44:81:f4:54:68:1c:4d:0c:3f:2e:c5:c2:38:7b:
8e:5a:70:3d:c8:b2:a8:f2:e4:30:2f:aa:08:13:a3:
4d:53:7f:2b:fe:1b:43:4f:25:f1:a3:bc:93:fa:30:
55:2a:13:50:aa:3f:c8:53:6f:14:0a:2d:44:04:91:
e4:23:db:f1:f6:03:10:b5:a3:ea:55:23:f0:2f:78:
02:d3:bb:64:3d:43:45:cc:31:24:ed:27:9f:0c:78:
36:0a:8d:8e:a2:c7:80:5a:55:c5:83:50:51:13:e6:
c0:98:24:04:13:cd:54:5c:5d:e3:1c:c7:72:b0:04:
c5:6a:20:4f:51:76:d7:b6:d8:8f:11:ab:c9:ce:6c:
ee:fb:a6:4f:b9:ee:6e:84:e5:41:65:8f:a7:00:e5:
b8:68:cd:31:b0:4d:6e:25:bc:eb:a7:de:cb:d7:35:
8e:92:3d:d4:7f:ef:10:d1:20:79:76:4d:27:83:07:
2d:19:91:72:8e:3e:20:53:43:6b:6a:f3:7f:ec:7b:
df:a4:39:90:9c:a6:7d:d8:88:cb:5c:c2:21:86:02:
37:ff:7b:4f:12:70:8b:e9:42:3a:e7:18:26:5c:f3:
b1:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:CC:9D:35:44:38:C1:1B:C8:BE:B6:1E:95:8A:E6:39:76:81:A0:37
X509v3 Authority Key Identifier:
keyid:B5:BB:A2:09:D4:B1:95:6B:95:65:69:D7:2A:43:15:44:48:D4:DC:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tbuiCdSxlWuVZWnXKkMVREjU3AM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/b49202-6904-42fb-86f7-746400ae2f5e/1/4cydNUQ4wRvIvrYelYrmOXaBoDc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/b49202-6904-42fb-86f7-746400ae2f5e/1/tbuiCdSxlWuVZWnXKkMVREjU3AM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.34.192.0-5.34.203.255
Signature Algorithm: sha256WithRSAEncryption
a9:2e:b5:d6:ce:d0:16:e8:fa:8e:5f:db:8d:76:9a:e1:1b:86:
02:f9:bf:c7:f7:4a:ed:8f:32:dc:c7:69:02:ed:a0:b3:14:7f:
68:b1:14:16:c3:59:da:1f:cb:02:b5:af:67:04:fe:99:83:38:
94:fd:0f:6d:34:af:c1:d9:f1:0d:2d:54:e2:22:1a:ce:36:fc:
a8:23:e2:fd:5a:63:14:f0:8e:d0:a0:f1:e4:a4:45:aa:8e:b8:
0b:07:76:d8:2d:29:91:57:b7:17:66:02:c8:b4:38:3f:df:42:
0c:b0:c2:10:3f:53:d3:4c:c9:ea:f8:51:2c:6d:a9:ef:11:4d:
97:ac:3c:40:e8:07:d6:72:cc:bd:eb:a7:4f:68:37:e4:04:d5:
bc:a1:02:39:46:3a:fd:3e:1e:a2:d6:6d:6a:d4:16:42:5c:5a:
e7:30:47:23:2e:dd:29:37:0b:84:69:f4:29:91:df:74:b2:60:
58:d5:6b:79:6e:59:ce:02:b9:d1:45:60:8d:44:61:01:64:21:
ea:82:cd:64:eb:0e:7f:00:c0:cf:53:d3:e6:62:a6:7b:cc:06:
1e:07:b1:d7:66:80:e6:41:00:32:32:bd:58:5e:ba:8d:a5:76:
b1:33:e4:da:05:d2:a7:2b:ee:b7:54:e5:5d:05:1b:3e:5b:63:
ef:45:13:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:32 2024 by rpki-client on console-fra.rpki-client.org