Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/b49202-6904-42fb-86f7-746400ae2f5e/1/YhSZP3_RGIKYdk5Qtxu--269eto.roa
File: YhSZP3_RGIKYdk5Qtxu--269eto.roa (raw, json)
Hash identifier: KiAYAHfosHY7pWHdEhd2nL9ZfSseUCXHdOF14InUQuM=
Subject key identifier: 62:14:99:3F:7F:D1:18:82:98:76:4E:50:B7:1B:BE:FB:6E:BD:7A:DA
Certificate issuer: /CN=b5bba209d4b1956b956569d72a43154448d4dc03
Certificate serial: 01850559D95A3837BA33D8FEF06A4851CFED
Authority key identifier: B5:BB:A2:09:D4:B1:95:6B:95:65:69:D7:2A:43:15:44:48:D4:DC:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tbuiCdSxlWuVZWnXKkMVREjU3AM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/b49202-6904-42fb-86f7-746400ae2f5e/1/YhSZP3_RGIKYdk5Qtxu--269eto.roa
Signing time: Mon 12 Dec 2022 08:00:52 +0000
ROA not before: Mon 12 Dec 2022 08:00:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58142
IP address blocks: 5.34.192.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:05:59:d9:5a:38:37:ba:33:d8:fe:f0:6a:48:51:cf:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5bba209d4b1956b956569d72a43154448d4dc03
Validity
Not Before: Dec 12 08:00:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6214993f7fd1188298764e50b71bbefb6ebd7ada
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:48:c3:ae:1d:7f:97:30:44:9c:53:14:49:a7:
97:c0:0a:db:e3:42:f7:f4:a8:e0:e1:61:65:9d:31:
f1:c4:6d:aa:aa:ee:13:93:f1:a9:ae:61:1d:11:7e:
a7:eb:e0:16:14:b7:7c:d4:81:9c:be:0d:20:ec:5b:
02:b0:dc:b3:1a:e4:5c:2a:58:1a:06:c1:ea:c9:00:
89:80:2d:17:18:98:c9:bf:c7:88:f6:0f:80:6c:38:
08:0f:54:3f:ae:1f:9e:1c:77:95:75:f2:2b:19:87:
9d:dd:48:8f:ca:b7:a8:72:93:bf:c8:29:9a:ed:bc:
f6:3d:82:b6:f7:59:ff:c8:bf:3f:50:aa:13:b1:f4:
43:58:f4:cd:ad:b5:01:64:ff:b8:73:2b:36:54:dc:
83:27:a1:59:a3:01:7f:7b:d1:3d:b5:73:c7:e4:c6:
1c:eb:1a:c2:c1:63:37:2f:85:54:df:b9:88:1d:52:
97:f3:94:16:27:19:0d:63:7f:43:f2:80:d7:6c:05:
4b:cd:34:e3:39:a6:1a:20:45:2c:45:d7:5c:bc:a3:
dd:5c:20:63:1a:3f:26:8d:4e:cd:ab:62:ab:11:4c:
8b:13:e5:95:ed:41:f9:7b:86:89:49:e0:8a:fe:01:
47:8c:99:a7:cb:28:22:b8:27:b1:8a:98:9b:19:ca:
e5:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:14:99:3F:7F:D1:18:82:98:76:4E:50:B7:1B:BE:FB:6E:BD:7A:DA
X509v3 Authority Key Identifier:
keyid:B5:BB:A2:09:D4:B1:95:6B:95:65:69:D7:2A:43:15:44:48:D4:DC:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tbuiCdSxlWuVZWnXKkMVREjU3AM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/b49202-6904-42fb-86f7-746400ae2f5e/1/YhSZP3_RGIKYdk5Qtxu--269eto.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/b49202-6904-42fb-86f7-746400ae2f5e/1/tbuiCdSxlWuVZWnXKkMVREjU3AM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.34.192.0/20
Signature Algorithm: sha256WithRSAEncryption
35:20:8e:7e:2f:a3:48:e2:5b:45:92:ce:7e:93:a6:37:00:fc:
18:bf:d0:1c:16:56:76:ad:f7:0f:36:22:ae:5e:39:77:fb:dd:
b2:f7:4f:bb:86:c4:e4:e3:81:28:b8:84:11:47:5c:0d:48:de:
cd:a8:6d:cf:42:65:99:90:af:f6:1a:3f:93:ef:e1:ba:7e:c6:
9c:23:28:ab:7d:64:65:b8:4e:ba:b7:08:25:b9:07:7c:ce:8c:
ec:ab:41:23:07:34:3c:69:83:d7:84:04:a5:5a:c9:02:b4:08:
e5:0e:03:59:71:5a:33:d5:26:46:fe:01:f5:cc:4f:01:e0:49:
6c:5e:e9:44:f8:1a:40:9e:35:2f:3a:c3:28:16:b5:19:46:38:
30:0c:1c:b9:8b:9f:8c:bf:8d:20:b0:b2:64:0b:f6:1b:24:3f:
df:f4:10:8f:8d:ee:a6:16:98:17:0a:2c:97:e8:68:3b:cb:e7:
ca:d8:e5:df:4d:c9:20:b1:dc:2b:c3:31:af:60:00:27:bb:29:
51:41:1a:ca:7a:36:6e:37:43:7c:77:81:65:9d:f4:90:1b:b7:
36:c8:01:26:fc:28:9f:21:65:d5:aa:24:17:65:1b:39:5d:d2:
f9:2e:47:c8:e0:a8:f8:ff:59:99:25:86:57:4f:86:38:09:09:
48:27:d8:20
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYUFWdlaODe6M9j+8GpIUc/tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1YmJhMjA5ZDRiMTk1NmI5NTY1NjlkNzJhNDMxNTQ0NDhk
NGRjMDMwHhcNMjIxMjEyMDgwMDUyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MjE0OTkzZjdmZDExODgyOTg3NjRlNTBiNzFiYmVmYjZlYmQ3YWRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0jDrh1/lzBEnFMUSaeXwArb40L3
9Kjg4WFlnTHxxG2qqu4Tk/GprmEdEX6n6+AWFLd81IGcvg0g7FsCsNyzGuRcKlga
BsHqyQCJgC0XGJjJv8eI9g+AbDgID1Q/rh+eHHeVdfIrGYed3UiPyreocpO/yCma
7bz2PYK291n/yL8/UKoTsfRDWPTNrbUBZP+4cys2VNyDJ6FZowF/e9E9tXPH5MYc
6xrCwWM3L4VU37mIHVKX85QWJxkNY39D8oDXbAVLzTTjOaYaIEUsRddcvKPdXCBj
Gj8mjU7Nq2KrEUyLE+WV7UH5e4aJSeCK/gFHjJmnyygiuCexipibGcrl/wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGIUmT9/0RiCmHZOULcbvvtuvXraMB8GA1UdIwQY
MBaAFLW7ognUsZVrlWVp1ypDFURI1NwDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGJ1aUNkU3hsV3VWWlduWEtrTVZSRWpVM0FNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9iNDkyMDItNjkwNC00MmZiLTg2Zjct
NzQ2NDAwYWUyZjVlLzEvWWhTWlAzX1JHSUtZZGs1UXR4dS0tMjY5ZXRvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS9iNDkyMDItNjkwNC00MmZiLTg2ZjctNzQ2NDAwYWUyZjVl
LzEvdGJ1aUNkU3hsV3VWWlduWEtrTVZSRWpVM0FNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEBSLAMA0G
CSqGSIb3DQEBCwUAA4IBAQA1II5+L6NI4ltFks5+k6Y3APwYv9AcFlZ2rfcPNiKu
Xjl3+92y90+7hsTk44EouIQRR1wNSN7NqG3PQmWZkK/2Gj+T7+G6fsacIyirfWRl
uE66twgluQd8zozsq0EjBzQ8aYPXhASlWskCtAjlDgNZcVoz1SZG/gH1zE8B4Els
XulE+BpAnjUvOsMoFrUZRjgwDBy5i5+Mv40gsLJkC/YbJD/f9BCPje6mFpgXCiyX
6Gg7y+fK2OXfTckgsdwrwzGvYAAnuylRQRrKejZuN0N8d4FlnfSQG7c2yAEm/Cif
IWXVqiQXZRs5XdL5LkfI4Kj4/1mZJYZXT4Y4CQlIJ9gg
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:52 2024 by rpki-client on console-ams.rpki-client.org