Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/b49202-6904-42fb-86f7-746400ae2f5e/1/ZKAnU7hqBGECuuqgeF0Mzj2CgTk.roa
File: ZKAnU7hqBGECuuqgeF0Mzj2CgTk.roa (raw, json)
Hash identifier: seKPXWzPP+vu2SLo6jeMhE/p4LUSUM6cZMH3RtYrfTE=
Subject key identifier: 64:A0:27:53:B8:6A:04:61:02:BA:EA:A0:78:5D:0C:CE:3D:82:81:39
Certificate issuer: /CN=b5bba209d4b1956b956569d72a43154448d4dc03
Certificate serial: 01856C9CA591EF208F255703AE5FA0A8317F
Authority key identifier: B5:BB:A2:09:D4:B1:95:6B:95:65:69:D7:2A:43:15:44:48:D4:DC:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tbuiCdSxlWuVZWnXKkMVREjU3AM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/b49202-6904-42fb-86f7-746400ae2f5e/1/ZKAnU7hqBGECuuqgeF0Mzj2CgTk.roa
Signing time: Sun 01 Jan 2023 09:14:43 +0000
ROA not before: Sun 01 Jan 2023 09:14:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58142
IP address blocks: 5.34.192.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:9c:a5:91:ef:20:8f:25:57:03:ae:5f:a0:a8:31:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5bba209d4b1956b956569d72a43154448d4dc03
Validity
Not Before: Jan 1 09:14:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=64a02753b86a046102baeaa0785d0cce3d828139
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a1:a4:f4:05:7d:a3:c2:8d:79:89:d4:8e:bb:
5b:c3:9c:58:b9:da:01:18:73:38:01:fa:11:d3:ba:
8c:a8:11:09:1a:73:de:77:d0:26:63:12:6d:99:62:
db:8e:96:9e:85:0f:ba:b7:24:4c:b8:4b:5e:46:5d:
09:88:9a:e7:46:14:e0:42:84:21:95:78:a7:8d:c3:
01:f9:1d:b2:9d:9f:3d:d1:d1:4a:00:13:6c:b5:45:
89:b0:24:78:65:ad:8b:9e:6e:4f:94:80:b1:e0:1b:
b0:95:76:0b:b0:54:47:7a:6c:bf:e5:60:28:eb:c8:
0a:a7:50:21:ec:ea:38:9a:29:00:83:a9:4d:77:98:
28:ae:f5:4b:2c:cb:69:cd:70:3b:1c:33:7a:b5:37:
43:97:c5:70:64:2c:da:0f:9b:5c:4a:9b:c0:d0:5b:
8c:e9:60:3b:e5:f5:2b:a7:e3:e9:1c:ab:88:7a:02:
52:bc:2b:bc:41:f7:69:0d:c0:66:c4:54:c2:56:c1:
dd:6f:7f:61:26:6f:40:0d:64:ed:dc:21:cc:b4:c3:
34:da:47:c6:ee:02:63:8a:fa:d6:ba:23:1e:19:29:
60:75:3d:3e:9a:d4:8d:0a:ca:3d:c4:ba:d7:11:9a:
1a:45:b9:29:39:e9:99:62:20:2a:26:9b:aa:56:8b:
9d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:A0:27:53:B8:6A:04:61:02:BA:EA:A0:78:5D:0C:CE:3D:82:81:39
X509v3 Authority Key Identifier:
keyid:B5:BB:A2:09:D4:B1:95:6B:95:65:69:D7:2A:43:15:44:48:D4:DC:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tbuiCdSxlWuVZWnXKkMVREjU3AM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/b49202-6904-42fb-86f7-746400ae2f5e/1/ZKAnU7hqBGECuuqgeF0Mzj2CgTk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/b49202-6904-42fb-86f7-746400ae2f5e/1/tbuiCdSxlWuVZWnXKkMVREjU3AM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.34.192.0/20
Signature Algorithm: sha256WithRSAEncryption
43:f3:eb:13:4c:55:dc:63:90:5a:05:ad:3b:83:8f:ae:be:41:
4a:fa:73:0c:fb:8c:c1:0f:8b:04:ac:0e:24:9d:30:bd:13:3d:
1d:fd:9a:a6:0c:58:f9:d7:10:2a:79:14:3f:0e:26:40:04:af:
2b:51:96:7a:64:5e:9c:92:7b:b9:4a:a9:26:e3:3d:19:82:3b:
f8:8c:35:48:6a:29:98:43:f7:e2:78:46:8f:c0:6d:39:c1:87:
a4:1e:6c:89:ec:3d:6d:f5:86:e9:f3:02:0b:51:59:40:76:d8:
03:bf:e9:92:10:4c:bb:46:3f:28:af:8d:94:cf:4a:43:48:68:
5a:0c:d7:13:64:1c:67:a9:8b:44:06:9d:12:af:6c:ef:08:30:
a4:a7:52:b3:6d:23:05:c3:0a:c8:8f:2f:55:0c:60:eb:61:1b:
9f:19:57:55:92:54:fa:a9:c6:75:9b:06:1a:78:d2:3a:18:15:
93:74:a1:06:33:2d:cd:28:4e:5e:c3:b4:43:fc:76:95:e5:8d:
d9:f0:01:81:ee:77:33:29:5e:b4:4c:da:51:f7:15:e1:26:9e:
77:8c:a0:b7:94:d4:33:4d:b7:e4:bf:da:da:2e:1a:18:f7:33:
00:f2:8e:15:75:67:eb:d0:3b:28:b6:73:8e:85:ec:09:34:fe:
41:59:54:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:52 2024 by rpki-client on console-ams.rpki-client.org