Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/b49202-6904-42fb-86f7-746400ae2f5e/1/5Ek7hFzqmeHIUmvN-HzuBBQyWZI.roa
File: 5Ek7hFzqmeHIUmvN-HzuBBQyWZI.roa (raw, json)
Hash identifier: H/7XugRaUKAkgG3EVYdMFUyHNbdRGEXUipN4+Z0L9k0=
Subject key identifier: E4:49:3B:84:5C:EA:99:E1:C8:52:6B:CD:F8:7C:EE:04:14:32:59:92
Certificate issuer: /CN=b5bba209d4b1956b956569d72a43154448d4dc03
Certificate serial: 34428D3F
Authority key identifier: B5:BB:A2:09:D4:B1:95:6B:95:65:69:D7:2A:43:15:44:48:D4:DC:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tbuiCdSxlWuVZWnXKkMVREjU3AM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/b49202-6904-42fb-86f7-746400ae2f5e/1/5Ek7hFzqmeHIUmvN-HzuBBQyWZI.roa
Signing time: Wed 09 Mar 2022 10:12:49 +0000
ROA not before: Wed 09 Mar 2022 10:12:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15828
IP address blocks: 5.34.192.0/21 maxlen: 24
5.34.204.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 876776767 (0x34428d3f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5bba209d4b1956b956569d72a43154448d4dc03
Validity
Not Before: Mar 9 10:12:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e4493b845cea99e1c8526bcdf87cee0414325992
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d9:60:f8:6d:98:d0:81:ca:fd:19:00:d1:53:
79:bc:52:39:b1:b7:80:51:55:f8:cf:38:87:aa:8f:
8e:cd:47:4f:cd:05:db:fd:ae:d9:1e:d8:78:08:cc:
b5:f2:c3:d1:7d:b1:d3:ce:e4:71:42:b9:2b:64:09:
ee:90:74:41:97:c8:ad:05:a2:10:cd:2c:b6:fa:11:
fb:7e:5c:75:dc:62:af:ec:2e:32:82:23:a0:70:80:
04:8a:66:10:1d:af:30:d7:db:da:af:73:da:bd:a5:
9e:bf:d7:7b:89:da:3f:90:da:6e:a3:09:1c:8d:4c:
30:4e:36:f6:63:9c:76:84:2c:a9:16:cf:ff:52:2d:
03:ac:89:aa:aa:4c:f4:4a:36:03:05:c2:bd:0d:5c:
82:14:55:18:89:cc:aa:7d:b9:e8:a2:f9:a6:85:a4:
93:09:b8:8b:db:bd:6d:a4:95:a7:63:5c:20:98:5b:
1f:a2:3f:db:2c:bf:cc:e1:70:85:2a:ba:7b:a2:9b:
b6:13:01:51:a8:e5:57:2b:af:5a:98:a7:db:45:b9:
b7:75:bb:73:fd:d3:1b:1d:e8:22:5d:7e:ce:60:27:
c2:46:93:2b:83:c5:72:c4:12:00:77:d6:91:03:77:
a2:29:f6:45:ee:ab:bd:ce:0b:3a:48:fe:f1:d5:86:
be:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:49:3B:84:5C:EA:99:E1:C8:52:6B:CD:F8:7C:EE:04:14:32:59:92
X509v3 Authority Key Identifier:
keyid:B5:BB:A2:09:D4:B1:95:6B:95:65:69:D7:2A:43:15:44:48:D4:DC:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tbuiCdSxlWuVZWnXKkMVREjU3AM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/b49202-6904-42fb-86f7-746400ae2f5e/1/5Ek7hFzqmeHIUmvN-HzuBBQyWZI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/b49202-6904-42fb-86f7-746400ae2f5e/1/tbuiCdSxlWuVZWnXKkMVREjU3AM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.34.192.0/21
5.34.204.0/22
Signature Algorithm: sha256WithRSAEncryption
14:9f:24:cd:35:0f:fd:a0:f8:c5:f2:60:18:9a:3e:8f:e4:83:
df:12:9b:99:5c:c9:4d:31:8e:5d:f2:df:38:5a:e5:80:b5:8d:
95:0f:3c:49:a8:1d:d4:e2:2f:0f:e9:85:4e:b5:7c:02:92:c8:
0b:04:dd:c8:19:88:62:e3:dd:01:72:5e:ff:fe:d6:08:7f:6b:
d9:fc:3f:fb:5b:12:ee:0a:05:14:89:23:ce:da:95:c6:fa:74:
4d:77:15:5f:f0:09:36:e8:00:df:ac:ff:25:a6:21:42:7e:37:
43:18:d7:d3:0b:5c:ac:bd:45:4a:3e:23:0e:a0:4b:5a:3e:89:
13:62:83:c6:83:d4:51:37:a6:0d:f8:9a:01:4a:6c:64:2c:7e:
49:04:eb:4d:9a:ea:55:6c:3c:5b:7f:4b:82:30:9d:0f:5c:62:
5c:93:09:e8:10:76:3d:2b:0b:d0:3d:4e:b0:28:8d:fb:da:0a:
9a:cd:3d:5c:90:b6:2e:16:9d:0b:45:38:55:d6:22:cd:72:14:
b7:83:51:8a:85:a5:ab:0e:d2:67:bf:e4:2b:e0:d1:8c:93:b6:
e5:03:76:a8:08:9e:ee:72:bb:3e:19:77:8b:15:13:fd:99:96:
75:59:cf:df:8c:d8:01:06:87:aa:81:a3:54:d8:27:81:93:23:
62:26:1f:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:52 2024 by rpki-client on console-ams.rpki-client.org