Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/b49202-6904-42fb-86f7-746400ae2f5e/1/Z0QUylVYNL7TjyzG20Rr-o6oByw.roa
File: Z0QUylVYNL7TjyzG20Rr-o6oByw.roa (raw, json)
Hash identifier: GY0t0z+fdHD/k/5z6TtV8AKrHL1D0gZ4cYXBSD6emJg=
Subject key identifier: 67:44:14:CA:55:58:34:BE:D3:8F:2C:C6:DB:44:6B:FA:8E:A8:07:2C
Certificate issuer: /CN=b5bba209d4b1956b956569d72a43154448d4dc03
Certificate serial: 01827DEC1B67E960B7978B9917429FD9852C
Authority key identifier: B5:BB:A2:09:D4:B1:95:6B:95:65:69:D7:2A:43:15:44:48:D4:DC:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tbuiCdSxlWuVZWnXKkMVREjU3AM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/b49202-6904-42fb-86f7-746400ae2f5e/1/Z0QUylVYNL7TjyzG20Rr-o6oByw.roa
Signing time: Mon 08 Aug 2022 14:46:41 +0000
ROA not before: Mon 08 Aug 2022 14:46:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58142
IP address blocks: 5.34.192.0/21 maxlen: 24
5.34.200.0/22 maxlen: 24
5.34.204.0/24 maxlen: 24
5.34.206.0/24 maxlen: 24
5.34.205.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:7d:ec:1b:67:e9:60:b7:97:8b:99:17:42:9f:d9:85:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5bba209d4b1956b956569d72a43154448d4dc03
Validity
Not Before: Aug 8 14:46:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=674414ca555834bed38f2cc6db446bfa8ea8072c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:9f:ca:18:14:14:4d:59:23:ae:10:c2:6f:76:
29:cd:20:91:18:59:76:01:62:f4:7a:74:ca:fb:ec:
88:8e:ee:d0:7a:ac:f4:43:6d:62:bf:b9:c7:6a:76:
1c:ed:4b:65:19:2d:19:9f:64:88:f9:a5:a6:e5:64:
5c:6b:22:1f:71:7d:c0:3a:93:a9:72:1f:92:8e:7a:
89:0b:ee:29:bd:cb:79:05:eb:0b:bb:19:fe:44:72:
3a:d7:5e:40:6a:9b:98:ed:1e:a5:8f:6b:37:14:14:
56:d9:6d:1a:0a:69:81:21:bb:e6:1a:81:ba:ce:4c:
7e:ca:2b:ac:bd:92:7d:10:15:74:74:4d:f2:58:04:
4e:7a:0e:94:44:76:ed:7d:4a:95:18:00:9f:7a:19:
e0:23:bd:13:66:c2:6a:47:46:e2:bb:5f:0b:52:d3:
75:8f:df:7e:08:8e:a5:da:88:d2:49:2f:6c:3f:a8:
75:4e:b4:e8:45:d5:06:01:53:b6:fe:c2:73:ce:ff:
cb:10:a2:32:bd:a2:91:00:9b:0c:80:e9:ea:d8:d8:
63:8b:0a:95:84:2a:25:75:e1:af:ea:54:19:bb:6e:
e0:58:7c:97:d1:2f:8d:dc:04:82:40:68:12:da:7b:
90:26:48:fc:68:c5:c6:f0:89:b9:e3:91:00:d9:34:
4c:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:44:14:CA:55:58:34:BE:D3:8F:2C:C6:DB:44:6B:FA:8E:A8:07:2C
X509v3 Authority Key Identifier:
keyid:B5:BB:A2:09:D4:B1:95:6B:95:65:69:D7:2A:43:15:44:48:D4:DC:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tbuiCdSxlWuVZWnXKkMVREjU3AM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/b49202-6904-42fb-86f7-746400ae2f5e/1/Z0QUylVYNL7TjyzG20Rr-o6oByw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/b49202-6904-42fb-86f7-746400ae2f5e/1/tbuiCdSxlWuVZWnXKkMVREjU3AM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.34.192.0-5.34.206.255
Signature Algorithm: sha256WithRSAEncryption
18:25:9c:b9:e7:b8:33:77:fd:70:8d:50:80:02:79:44:26:a9:
ea:51:7e:82:35:e1:72:9c:41:d3:f0:47:71:06:8f:43:03:e0:
36:1a:10:7a:f0:60:ba:a7:df:27:90:0c:a0:76:1a:5a:17:8e:
a7:7d:71:11:3a:53:f7:30:00:11:c4:59:41:62:a7:ed:88:30:
31:75:8c:5a:e5:21:d1:c3:fc:3c:20:fb:f1:8c:70:39:b0:84:
84:c7:05:54:20:05:f8:c8:54:f4:1e:ab:18:bf:52:7b:12:db:
9a:53:92:c2:c0:61:d6:2a:7a:a8:b5:69:77:24:ae:56:82:3d:
73:55:09:7c:56:c4:21:12:c4:e3:4a:cc:dc:4e:51:bc:5e:fb:
cc:a3:e2:f5:7c:dc:37:8e:69:b9:3e:3b:28:73:08:88:cc:7b:
14:a9:92:ba:ea:48:6a:f9:e6:45:b0:73:2d:ab:d3:9b:7d:09:
34:d4:2a:44:d2:0d:7b:bc:7c:fb:90:6b:2e:6e:21:be:b0:81:
2b:b2:5f:43:d1:38:e2:ac:c6:63:cc:8f:dd:50:a5:ba:e3:d5:
fb:2c:5a:20:c0:69:32:30:8e:05:db:3e:56:be:0c:6c:70:86:
94:ca:33:45:83:43:18:15:07:1e:91:1e:77:c2:47:44:4a:ff:
4c:b3:e6:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:52 2024 by rpki-client on console-ams.rpki-client.org