Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/b49202-6904-42fb-86f7-746400ae2f5e/1/Tld94Zrd1P2u_PBOGFvMMnTWRpk.roa
File: Tld94Zrd1P2u_PBOGFvMMnTWRpk.roa (raw, json)
Hash identifier: jRNtGR+oNs+7qTiuqywb9hGIHSWnOr+XGo9aYIQ0maY=
Subject key identifier: 4E:57:7D:E1:9A:DD:D4:FD:AE:FC:F0:4E:18:5B:CC:32:74:D6:46:99
Certificate issuer: /CN=b5bba209d4b1956b956569d72a43154448d4dc03
Certificate serial: 0183CBE5776AECA6AAA48C9D9E7A23B877A5
Authority key identifier: B5:BB:A2:09:D4:B1:95:6B:95:65:69:D7:2A:43:15:44:48:D4:DC:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tbuiCdSxlWuVZWnXKkMVREjU3AM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/b49202-6904-42fb-86f7-746400ae2f5e/1/Tld94Zrd1P2u_PBOGFvMMnTWRpk.roa
Signing time: Wed 12 Oct 2022 11:12:36 +0000
ROA not before: Wed 12 Oct 2022 11:12:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 133398
IP address blocks: 5.34.192.0/21 maxlen: 24
5.34.204.0/23 maxlen: 24
5.34.206.0/24 maxlen: 24
5.34.200.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:cb:e5:77:6a:ec:a6:aa:a4:8c:9d:9e:7a:23:b8:77:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5bba209d4b1956b956569d72a43154448d4dc03
Validity
Not Before: Oct 12 11:12:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4e577de19addd4fdaefcf04e185bcc3274d64699
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:0f:ce:c3:dd:f3:d4:67:25:d5:dc:9f:87:0b:
96:c9:a0:bf:4c:b6:e6:ef:d2:14:ad:31:32:71:fb:
89:43:7a:7b:87:93:79:75:db:bb:72:30:2d:6b:59:
b1:6e:59:ed:8a:3d:fc:93:68:81:e2:51:f0:14:7b:
fc:ec:b1:cb:e1:34:3b:ee:ce:a9:d9:1e:1c:31:03:
8d:00:d8:6c:e7:0b:e7:59:43:1e:1e:d1:be:4f:0e:
9b:27:2f:29:3b:8b:9f:ef:cf:db:9a:c1:a3:05:2d:
a3:bb:69:01:0a:44:c5:21:14:8c:7f:ba:82:69:dd:
37:f1:72:9d:77:ca:c7:d9:ae:79:d6:10:d2:05:3c:
40:7e:6b:69:b1:85:80:2f:1e:65:62:5d:0f:1f:74:
fc:20:ad:2b:de:61:c8:5d:6b:4c:1b:e6:1c:5c:2f:
02:91:b3:c7:8f:9d:19:a5:45:a5:57:30:af:e2:23:
5b:df:86:0d:f1:65:2a:07:04:e4:71:34:c2:6f:1a:
3d:6c:8c:91:0e:1a:75:d1:54:c6:08:38:5c:0b:84:
cf:dd:b8:df:e5:bc:e3:5e:2a:e7:f1:a8:93:fa:ca:
65:da:ec:94:0c:5e:40:ba:9f:91:a4:f2:1e:ef:4c:
14:87:10:06:e6:1f:da:ba:13:53:ff:b5:26:de:6d:
a0:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:57:7D:E1:9A:DD:D4:FD:AE:FC:F0:4E:18:5B:CC:32:74:D6:46:99
X509v3 Authority Key Identifier:
keyid:B5:BB:A2:09:D4:B1:95:6B:95:65:69:D7:2A:43:15:44:48:D4:DC:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tbuiCdSxlWuVZWnXKkMVREjU3AM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/b49202-6904-42fb-86f7-746400ae2f5e/1/Tld94Zrd1P2u_PBOGFvMMnTWRpk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/b49202-6904-42fb-86f7-746400ae2f5e/1/tbuiCdSxlWuVZWnXKkMVREjU3AM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.34.192.0-5.34.206.255
Signature Algorithm: sha256WithRSAEncryption
4b:48:e7:69:be:8b:74:b1:98:bf:1a:1e:fb:7d:81:3f:66:c4:
d6:11:e1:3b:91:7b:6f:b1:77:0c:03:e5:3a:b3:45:18:fe:89:
19:86:a0:66:0e:6f:00:36:fb:c4:b9:02:96:c6:03:ae:9c:44:
3b:02:e5:09:1d:cc:3b:62:77:3a:f4:36:3b:31:03:90:0a:4a:
5e:d9:bb:27:b9:fe:23:4b:21:50:29:21:00:fa:55:1a:f7:50:
1c:a3:3f:cd:f9:cd:62:96:c2:69:ce:20:3d:9b:7a:e9:23:5a:
f2:da:b8:5b:c2:20:9c:f8:2c:d5:58:a7:94:b3:54:90:a0:13:
b0:9f:97:09:f7:f0:b6:a6:cd:35:c7:7f:c4:43:d4:e9:82:7a:
ee:84:a1:5d:77:8a:2d:8b:a3:a1:9d:50:7e:f5:6d:29:57:f0:
23:3f:ff:ea:bb:3d:fe:90:f9:b7:e0:9e:e6:d2:5a:71:c0:34:
bd:e3:51:1b:ed:a8:36:33:72:d3:f4:a7:13:fb:5c:18:6e:9a:
08:0d:4c:99:1a:8e:fb:b4:37:31:28:85:d4:61:e2:e9:ab:e7:
3c:8e:c8:b8:90:48:16:64:1e:cd:0f:0c:fb:81:1a:a9:c9:23:
d3:26:45:6e:e9:d2:be:cc:d5:3a:60:ec:0d:1c:e0:89:34:3e:
8e:4e:ea:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:32 2024 by rpki-client on console-fra.rpki-client.org