Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/b49202-6904-42fb-86f7-746400ae2f5e/1/ItFce7IYOcUPnoBWquMoeHh6iXI.roa
File: ItFce7IYOcUPnoBWquMoeHh6iXI.roa (raw, json)
Hash identifier: 8suRmixLmBqoCGBU0Za/QjLQl/FQV1sUKSIhm/Jf7t8=
Subject key identifier: 22:D1:5C:7B:B2:18:39:C5:0F:9E:80:56:AA:E3:28:78:78:7A:89:72
Certificate issuer: /CN=b5bba209d4b1956b956569d72a43154448d4dc03
Certificate serial: 354F204B
Authority key identifier: B5:BB:A2:09:D4:B1:95:6B:95:65:69:D7:2A:43:15:44:48:D4:DC:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tbuiCdSxlWuVZWnXKkMVREjU3AM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/b49202-6904-42fb-86f7-746400ae2f5e/1/ItFce7IYOcUPnoBWquMoeHh6iXI.roa
Signing time: Tue 28 Jun 2022 09:02:02 +0000
ROA not before: Tue 28 Jun 2022 09:02:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58142
IP address blocks: 5.34.192.0/21 maxlen: 21
5.34.206.0/24 maxlen: 24
5.34.200.0/22 maxlen: 22
5.34.205.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 894378059 (0x354f204b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5bba209d4b1956b956569d72a43154448d4dc03
Validity
Not Before: Jun 28 09:02:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=22d15c7bb21839c50f9e8056aae32878787a8972
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:9c:8a:c5:ba:ee:c2:c3:1f:1b:9b:23:cb:7f:
55:e2:f4:ea:1c:6e:0f:9a:82:21:99:9a:d4:53:34:
48:99:78:4d:89:27:b1:65:6b:d3:6e:dc:49:79:76:
56:4b:52:ed:7f:b7:1b:79:58:da:e3:cd:ea:70:da:
ad:95:e1:d1:6a:57:ba:d6:10:5e:3c:d3:1c:6d:f6:
66:b9:33:71:02:62:1f:02:cf:4e:13:4a:bd:a5:ed:
f4:61:28:76:1e:46:94:61:17:65:3e:45:f4:36:6d:
dc:1f:41:21:8d:81:b9:89:1e:35:6f:1e:f2:eb:88:
95:15:c4:b3:b1:2f:f7:54:78:a0:0d:a0:cb:ec:2b:
78:df:f9:74:03:75:f1:29:72:d2:27:bc:e8:d6:a4:
1d:45:91:5d:9b:e9:5d:38:54:fa:a1:ad:d5:c8:91:
89:37:8d:b2:e1:46:4b:33:98:64:2e:c6:58:5a:f7:
d4:60:52:f9:82:52:aa:25:22:3f:e2:fa:c3:53:cf:
71:3d:15:59:25:e2:a9:5a:73:c9:7b:32:ec:8e:c4:
a6:c9:d1:11:8a:97:fd:1c:a4:ed:11:fb:a5:9b:b9:
89:a6:a6:7a:2f:9e:3d:9e:9e:62:d2:22:62:e0:fd:
72:2a:3c:d9:c0:ca:cb:01:da:94:e9:95:38:5b:f9:
02:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:D1:5C:7B:B2:18:39:C5:0F:9E:80:56:AA:E3:28:78:78:7A:89:72
X509v3 Authority Key Identifier:
keyid:B5:BB:A2:09:D4:B1:95:6B:95:65:69:D7:2A:43:15:44:48:D4:DC:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tbuiCdSxlWuVZWnXKkMVREjU3AM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/b49202-6904-42fb-86f7-746400ae2f5e/1/ItFce7IYOcUPnoBWquMoeHh6iXI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/b49202-6904-42fb-86f7-746400ae2f5e/1/tbuiCdSxlWuVZWnXKkMVREjU3AM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.34.192.0-5.34.203.255
5.34.205.0-5.34.206.255
Signature Algorithm: sha256WithRSAEncryption
a8:2c:49:34:ff:52:6c:5c:2f:1d:f0:cd:51:fc:f7:91:56:74:
e0:dc:77:4e:e7:13:ae:02:97:5c:15:db:bb:f9:35:2b:8d:bd:
31:c9:74:16:72:83:c8:a5:73:98:9c:b3:3f:9e:3e:3e:da:92:
c6:f7:ec:ea:02:25:d8:41:9f:43:4f:04:13:9b:17:55:d4:8f:
06:e1:62:97:17:3d:62:e1:e6:0e:00:62:29:d5:d1:6a:75:56:
e1:bc:0f:42:89:c1:9c:17:f2:06:75:f1:84:93:09:8f:f0:20:
9c:50:77:9e:02:a0:ec:32:5b:b5:eb:cc:56:0f:7e:c6:e6:7f:
db:4e:e8:15:4a:ba:d1:ce:aa:48:7f:87:1c:f9:aa:e2:32:d5:
1e:e6:28:e5:23:9c:cd:8d:06:d1:3c:67:46:8b:bc:fa:3b:54:
33:67:d7:d5:75:3f:cc:41:f5:ed:f5:8c:3d:91:da:3c:e6:32:
c4:47:ea:e9:94:c0:4b:8f:00:37:5a:b9:10:7d:b1:94:2d:97:
36:4e:f1:bd:cc:de:e0:84:24:89:87:f5:63:ac:cf:0c:1c:f3:
2c:1b:b2:a6:ee:db:8d:28:09:65:2c:fe:2f:50:2b:60:a6:6d:
25:52:20:42:01:b0:40:81:40:4e:20:9a:c9:a3:a0:fc:d7:97:
48:90:23:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:32 2024 by rpki-client on console-fra.rpki-client.org