Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/b49202-6904-42fb-86f7-746400ae2f5e/1/9MB7PT0QxT8c0r4uDSOXL1umKas.roa
File: 9MB7PT0QxT8c0r4uDSOXL1umKas.roa (raw, json)
Hash identifier: JU7E3khsTKRir2ke8wAkVyrAM8fbt5n861pHj55w9KI=
Subject key identifier: F4:C0:7B:3D:3D:10:C5:3F:1C:D2:BE:2E:0D:23:97:2F:5B:A6:29:AB
Certificate issuer: /CN=b5bba209d4b1956b956569d72a43154448d4dc03
Certificate serial: 33A573D5
Authority key identifier: B5:BB:A2:09:D4:B1:95:6B:95:65:69:D7:2A:43:15:44:48:D4:DC:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tbuiCdSxlWuVZWnXKkMVREjU3AM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/b49202-6904-42fb-86f7-746400ae2f5e/1/9MB7PT0QxT8c0r4uDSOXL1umKas.roa
Signing time: Sat 01 Jan 2022 06:59:29 +0000
ROA not before: Sat 01 Jan 2022 06:59:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43847
IP address blocks: 5.34.200.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 866481109 (0x33a573d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5bba209d4b1956b956569d72a43154448d4dc03
Validity
Not Before: Jan 1 06:59:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f4c07b3d3d10c53f1cd2be2e0d23972f5ba629ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6a:a3:10:13:31:67:50:54:66:ea:42:79:d3:
0f:d4:10:a8:10:53:44:db:b8:5b:23:73:42:1d:49:
ec:0f:fc:08:62:51:25:c5:55:f6:47:8d:9a:82:19:
e3:13:1e:6e:18:7b:e4:f9:4b:f3:8d:0e:6e:92:4c:
92:cb:b2:93:27:cb:e7:b6:d3:ac:9c:d5:67:91:1d:
77:e0:f8:4e:61:48:15:ac:04:e7:87:dd:51:04:31:
97:c7:68:47:0f:42:8d:af:ec:8c:de:45:58:ba:f4:
3e:54:41:61:07:9a:cb:ea:cc:af:81:f5:2a:7f:a0:
1e:22:95:7b:f1:1a:e3:a5:c1:63:b5:47:3e:42:a4:
75:62:9d:07:ec:21:ea:81:12:c3:67:c2:b3:99:ff:
85:5f:f7:6f:e2:f9:39:76:c5:a5:0e:06:11:01:f5:
46:fa:c4:c9:da:d3:f0:85:3a:4d:23:77:99:03:3e:
ec:2e:25:b2:25:39:f8:db:20:af:4f:b6:d0:e4:2e:
90:3c:cd:11:f9:76:9c:4e:f9:ac:63:fa:89:07:e0:
11:d6:99:2f:98:4a:74:19:bc:1e:76:ad:0f:fe:0e:
c9:67:d7:0d:6d:a6:d1:c7:ab:c1:f7:7d:fd:dc:ca:
48:be:98:6c:b0:b8:88:14:f5:99:fc:3d:71:ea:47:
17:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:C0:7B:3D:3D:10:C5:3F:1C:D2:BE:2E:0D:23:97:2F:5B:A6:29:AB
X509v3 Authority Key Identifier:
keyid:B5:BB:A2:09:D4:B1:95:6B:95:65:69:D7:2A:43:15:44:48:D4:DC:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tbuiCdSxlWuVZWnXKkMVREjU3AM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/b49202-6904-42fb-86f7-746400ae2f5e/1/9MB7PT0QxT8c0r4uDSOXL1umKas.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/b49202-6904-42fb-86f7-746400ae2f5e/1/tbuiCdSxlWuVZWnXKkMVREjU3AM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.34.200.0/22
Signature Algorithm: sha256WithRSAEncryption
bf:84:16:66:a0:e7:b9:4b:77:4b:d9:39:58:03:6b:83:f6:49:
7b:fe:d7:6d:33:47:71:39:d9:65:e1:34:26:4c:1c:35:05:58:
09:46:1f:93:15:da:ab:56:c7:52:ac:de:ed:cb:40:ae:b0:03:
4e:e2:81:85:c6:a6:14:db:68:8f:c3:2f:ac:90:46:27:c0:a5:
76:6a:65:b7:2b:8a:0e:11:7e:de:ba:b5:ec:1d:3f:ae:00:c6:
c7:92:55:99:9c:00:b2:ff:e2:78:36:e7:ae:ce:8b:0f:e3:eb:
35:22:a6:56:47:ef:ed:12:d9:e8:1c:9c:64:93:53:f5:21:26:
97:f7:6f:63:d3:59:67:bd:13:62:0d:a1:26:46:ab:5c:e7:75:
3a:95:29:52:5d:61:fe:4f:4c:03:57:85:fa:39:4c:23:dd:eb:
3d:9b:4e:71:b4:2e:38:c5:be:2c:c7:3f:91:c0:c7:95:f4:af:
4a:38:1d:87:ee:c8:ff:49:ff:ef:7a:a5:25:6b:51:66:04:df:
ea:2f:8a:a0:36:a8:c7:2d:47:ef:3c:f2:5f:3b:2a:8c:d8:82:
8f:df:64:ae:86:6f:1a:3f:99:c4:d2:fc:d3:3e:f3:2e:38:dd:
92:3a:04:0a:36:be:af:d5:b8:4d:5f:0f:f5:48:73:ad:93:71:
5e:57:66:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:52 2024 by rpki-client on console-ams.rpki-client.org