Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/b49202-6904-42fb-86f7-746400ae2f5e/1/UQlCIo75uNWZlrBkuL59h-pwNYg.roa
File: UQlCIo75uNWZlrBkuL59h-pwNYg.roa (raw, json)
Hash identifier: +5Q9Ff31HsqJGgVaBHh8u88L+cEe/HOgYrEuPAA+d/k=
Subject key identifier: 51:09:42:22:8E:F9:B8:D5:99:96:B0:64:B8:BE:7D:87:EA:70:35:88
Certificate issuer: /CN=b5bba209d4b1956b956569d72a43154448d4dc03
Certificate serial: 0181EDE5837DB6E89BDD782059D53B7B772F
Authority key identifier: B5:BB:A2:09:D4:B1:95:6B:95:65:69:D7:2A:43:15:44:48:D4:DC:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tbuiCdSxlWuVZWnXKkMVREjU3AM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/b49202-6904-42fb-86f7-746400ae2f5e/1/UQlCIo75uNWZlrBkuL59h-pwNYg.roa
Signing time: Mon 11 Jul 2022 15:34:10 +0000
ROA not before: Mon 11 Jul 2022 15:34:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58142
IP address blocks: 5.34.192.0/21 maxlen: 24
5.34.200.0/22 maxlen: 24
5.34.206.0/24 maxlen: 24
5.34.205.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:ed:e5:83:7d:b6:e8:9b:dd:78:20:59:d5:3b:7b:77:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5bba209d4b1956b956569d72a43154448d4dc03
Validity
Not Before: Jul 11 15:34:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=510942228ef9b8d59996b064b8be7d87ea703588
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:50:6a:bf:8e:47:b0:3f:23:c8:18:76:e7:4c:
45:b8:29:73:ef:39:43:ba:b6:12:e7:2b:b2:2a:8d:
ea:00:28:10:57:a6:1a:0c:f7:ce:15:d6:bb:98:ba:
28:16:18:7e:b1:ea:5f:d0:cd:3e:14:fb:d3:91:ba:
00:8c:db:54:5d:84:76:9f:e4:be:c5:fc:5a:e2:15:
fd:2c:1f:63:36:de:be:95:aa:64:8e:a1:60:88:a4:
b2:5f:6c:25:09:3e:60:ca:d7:71:f6:b8:07:94:9b:
25:3f:13:17:4d:f6:9b:fa:bc:0d:5a:da:65:79:3b:
b4:8b:1f:fe:6f:e3:db:0f:31:c5:af:25:fa:05:e2:
f0:c8:1f:6f:2e:2d:49:f9:c7:b1:19:b3:40:21:d5:
52:33:0d:c7:c5:22:7a:1b:1d:92:03:50:31:47:1a:
b7:62:33:a4:a8:02:31:a9:d6:8f:38:7a:3e:bc:81:
51:5d:54:d4:0c:9b:1a:08:1b:be:50:f6:f0:16:d8:
b0:bb:31:ba:9b:95:1a:04:27:aa:2a:66:44:97:d1:
dd:e4:35:7d:93:10:8b:47:99:ec:21:e4:dc:6f:06:
f8:db:35:ce:ab:3f:68:d7:6c:55:4b:10:8f:70:2b:
c3:12:50:80:d6:65:d5:46:0f:df:e4:89:3d:93:42:
89:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:09:42:22:8E:F9:B8:D5:99:96:B0:64:B8:BE:7D:87:EA:70:35:88
X509v3 Authority Key Identifier:
keyid:B5:BB:A2:09:D4:B1:95:6B:95:65:69:D7:2A:43:15:44:48:D4:DC:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tbuiCdSxlWuVZWnXKkMVREjU3AM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/b49202-6904-42fb-86f7-746400ae2f5e/1/UQlCIo75uNWZlrBkuL59h-pwNYg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/b49202-6904-42fb-86f7-746400ae2f5e/1/tbuiCdSxlWuVZWnXKkMVREjU3AM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.34.192.0-5.34.203.255
5.34.205.0-5.34.206.255
Signature Algorithm: sha256WithRSAEncryption
31:64:e6:37:c7:ff:c3:7f:a9:31:e8:6b:c2:b3:78:50:67:d9:
06:1c:11:20:c2:a3:8a:3f:2b:65:d1:6e:6e:71:78:73:09:8b:
eb:d7:c9:8f:cf:62:70:64:67:93:83:5e:bf:90:85:17:b9:b1:
6b:97:3c:54:23:9d:30:e1:df:8c:6c:60:f2:db:1f:70:ab:5f:
8c:13:b2:e1:8a:f8:da:84:85:75:8d:16:99:59:d5:41:37:8b:
1d:dc:b2:ad:a4:5c:c3:4d:35:28:9f:be:99:f4:c0:92:7e:30:
10:c5:cf:a7:8c:93:9f:fb:66:f5:d6:72:1e:2e:32:8a:37:b8:
11:5b:7e:b8:84:51:f3:d5:73:09:93:f7:3f:68:90:75:6e:bc:
8a:9c:6e:19:19:1a:2b:64:54:ff:75:3a:98:a2:d0:b1:1b:3d:
ad:cf:8b:76:c4:49:f1:34:30:bc:60:d4:42:df:71:7b:4f:a9:
f8:1f:d6:0a:d8:e7:7d:52:93:4c:f6:c2:1a:e7:5a:08:66:8d:
a3:5b:7e:6f:57:c4:60:3c:15:33:d7:6b:9c:40:ad:c3:0e:32:
4e:c5:ab:24:d0:48:ec:71:dc:f7:4a:9b:0b:09:e5:fd:44:24:
d4:23:b8:0e:4b:a5:69:9c:8c:47:a7:4e:23:06:46:13:18:8b:
5e:85:9f:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:32 2024 by rpki-client on console-fra.rpki-client.org