Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/b49202-6904-42fb-86f7-746400ae2f5e/1/ExN39WkxTmmAkpCMSEb4k4qanos.roa
File: ExN39WkxTmmAkpCMSEb4k4qanos.roa (raw, json)
Hash identifier: K3NlKVpIzxiSBLeV5Eu3kT8AmIOHv8uuqOObU0Oljhc=
Subject key identifier: 13:13:77:F5:69:31:4E:69:80:92:90:8C:48:46:F8:93:8A:9A:9E:8B
Certificate issuer: /CN=b5bba209d4b1956b956569d72a43154448d4dc03
Certificate serial: 347C6B8B
Authority key identifier: B5:BB:A2:09:D4:B1:95:6B:95:65:69:D7:2A:43:15:44:48:D4:DC:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tbuiCdSxlWuVZWnXKkMVREjU3AM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/b49202-6904-42fb-86f7-746400ae2f5e/1/ExN39WkxTmmAkpCMSEb4k4qanos.roa
Signing time: Fri 01 Apr 2022 10:47:39 +0000
ROA not before: Fri 01 Apr 2022 10:47:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208485
IP address blocks: 5.34.192.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 880569227 (0x347c6b8b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5bba209d4b1956b956569d72a43154448d4dc03
Validity
Not Before: Apr 1 10:47:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=131377f569314e698092908c4846f8938a9a9e8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:63:a7:c3:97:20:09:f8:d3:fd:f4:ed:46:c5:
71:c1:a3:a6:a5:69:96:bb:cf:0f:46:1f:3f:b5:24:
ec:69:18:d6:77:7a:6a:a8:41:e3:22:91:d0:0a:d5:
66:60:0b:c2:db:37:ab:36:3a:54:89:5c:08:05:2c:
de:19:66:52:32:81:e9:bd:b9:d8:7d:d6:08:d6:a2:
ba:de:34:c0:2f:cf:4c:b0:cd:60:ae:9f:3f:68:33:
c7:f2:82:91:8b:ca:b9:ee:80:76:22:4b:25:87:bc:
d4:fe:04:be:e3:5e:99:59:19:5e:68:e1:08:42:47:
83:a7:93:7a:84:74:78:0d:2b:14:c4:da:1b:81:8b:
5b:b7:34:89:50:72:7b:a8:02:8c:ba:80:df:88:a5:
fa:cb:25:5d:f5:8c:cd:3e:73:7f:17:cc:8f:2e:67:
ba:03:de:0d:75:a1:ea:ad:8c:0f:5e:e1:b9:60:a6:
1a:99:2c:60:90:11:d0:de:51:e1:9a:7c:f4:c3:be:
f4:3f:33:b5:cf:47:3d:48:41:6b:5a:4e:db:b5:a2:
87:81:0e:21:d0:62:42:1d:91:e0:1b:8c:dd:43:86:
a0:e1:0b:97:40:fc:9b:d0:7b:0a:6d:19:25:a2:40:
9d:75:8d:01:5b:f2:ce:2f:1b:91:48:9e:c3:9e:0d:
7e:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:13:77:F5:69:31:4E:69:80:92:90:8C:48:46:F8:93:8A:9A:9E:8B
X509v3 Authority Key Identifier:
keyid:B5:BB:A2:09:D4:B1:95:6B:95:65:69:D7:2A:43:15:44:48:D4:DC:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tbuiCdSxlWuVZWnXKkMVREjU3AM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/b49202-6904-42fb-86f7-746400ae2f5e/1/ExN39WkxTmmAkpCMSEb4k4qanos.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/b49202-6904-42fb-86f7-746400ae2f5e/1/tbuiCdSxlWuVZWnXKkMVREjU3AM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.34.192.0/21
Signature Algorithm: sha256WithRSAEncryption
13:96:72:fc:1c:ec:4e:fb:a9:d4:e3:69:5f:6b:3c:c6:35:ac:
f9:9a:29:00:86:30:31:6f:44:ff:e6:18:07:e3:a6:b4:9c:96:
e7:8a:9a:1b:9c:ef:1e:0b:33:6b:99:d7:8a:cd:90:b2:f4:fc:
ea:5e:ec:20:94:4e:71:b5:80:63:6d:ca:51:88:0e:72:8a:26:
ae:fd:c7:20:1c:9c:c0:63:ef:d1:c9:3b:d3:3a:35:ae:49:f5:
f7:c6:bf:00:3b:67:02:81:f2:d7:96:ba:fb:17:52:2e:22:f1:
b7:5b:22:bc:b1:e1:4e:6d:84:73:21:80:ea:70:7a:40:c0:ef:
e2:d3:e7:30:c6:06:b6:62:c8:e0:50:ac:3d:8d:77:2e:63:5e:
ef:b5:df:6a:36:a3:d6:a6:e9:56:5a:50:67:46:b3:04:0c:c0:
3b:63:dc:3f:6e:11:cd:c0:aa:48:42:60:23:25:a8:c1:76:ec:
b6:32:f0:80:45:eb:91:04:19:38:de:f4:43:0d:88:90:ec:37:
3d:70:c8:73:45:6b:bc:65:d9:a8:c5:e2:34:47:a3:f4:f4:ba:
95:d4:db:d0:dc:2c:db:5b:b3:4c:88:e3:f9:22:3b:0b:11:5d:
94:7f:49:ec:ab:c6:e5:21:f2:83:1f:24:29:09:38:76:26:3d:
49:2b:d4:41
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIENHxrizANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
NWJiYTIwOWQ0YjE5NTZiOTU2NTY5ZDcyYTQzMTU0NDQ4ZDRkYzAzMB4XDTIyMDQw
MTEwNDczOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMTMxMzc3ZjU2OTMx
NGU2OTgwOTI5MDhjNDg0NmY4OTM4YTlhOWU4YjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALhjp8OXIAn40/307UbFccGjpqVplrvPD0YfP7Uk7GkY1nd6
aqhB4yKR0ArVZmALwts3qzY6VIlcCAUs3hlmUjKB6b252H3WCNaiut40wC/PTLDN
YK6fP2gzx/KCkYvKue6AdiJLJYe81P4EvuNemVkZXmjhCEJHg6eTeoR0eA0rFMTa
G4GLW7c0iVBye6gCjLqA34il+sslXfWMzT5zfxfMjy5nugPeDXWh6q2MD17huWCm
GpksYJAR0N5R4Zp89MO+9D8ztc9HPUhBa1pO27Wih4EOIdBiQh2R4BuM3UOGoOEL
l0D8m9B7Cm0ZJaJAnXWNAVvyzi8bkUiew54NfqcCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQTE3f1aTFOaYCSkIxIRviTipqeizAfBgNVHSMEGDAWgBS1u6IJ1LGVa5Vl
adcqQxVESNTcAzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3RidWlDZFN4bFd1VlpXblhLa01WUkVqVTNBTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZmEvYjQ5MjAyLTY5MDQtNDJmYi04NmY3LTc0NjQwMGFlMmY1ZS8x
L0V4TjM5V2t4VG1tQWtwQ01TRWI0azRxYW5vcy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmEv
YjQ5MjAyLTY5MDQtNDJmYi04NmY3LTc0NjQwMGFlMmY1ZS8xL3RidWlDZFN4bFd1
VlpXblhLa01WUkVqVTNBTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAwUiwDANBgkqhkiG9w0BAQsFAAOC
AQEAE5Zy/BzsTvup1ONpX2s8xjWs+ZopAIYwMW9E/+YYB+OmtJyW54qaG5zvHgsz
a5nXis2QsvT86l7sIJROcbWAY23KUYgOcoomrv3HIBycwGPv0ck70zo1rkn198a/
ADtnAoHy15a6+xdSLiLxt1sivLHhTm2EcyGA6nB6QMDv4tPnMMYGtmLI4FCsPY13
LmNe77Xfajaj1qbpVlpQZ0azBAzAO2PcP24RzcCqSEJgIyWowXbstjLwgEXrkQQZ
ON70Qw2IkOw3PXDIc0VrvGXZqMXiNEej9PS6ldTb0Nws21uzTIjj+SI7CxFdlH9J
7KvG5SHygx8kKQk4diY9SSvUQQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:32 2024 by rpki-client on console-fra.rpki-client.org