Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/b49202-6904-42fb-86f7-746400ae2f5e/1/cimpmx7cchxAAtDpSzFkoi8Akoo.roa
File: cimpmx7cchxAAtDpSzFkoi8Akoo.roa (raw, json)
Hash identifier: zZihMUPpv00QkMFfsrSWyTFXl0J/zP+UxHkxvRbpEaA=
Subject key identifier: 72:29:A9:9B:1E:DC:72:1C:40:02:D0:E9:4B:31:64:A2:2F:00:92:8A
Certificate issuer: /CN=b5bba209d4b1956b956569d72a43154448d4dc03
Certificate serial: 34A674CF
Authority key identifier: B5:BB:A2:09:D4:B1:95:6B:95:65:69:D7:2A:43:15:44:48:D4:DC:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tbuiCdSxlWuVZWnXKkMVREjU3AM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/b49202-6904-42fb-86f7-746400ae2f5e/1/cimpmx7cchxAAtDpSzFkoi8Akoo.roa
Signing time: Mon 18 Apr 2022 09:29:15 +0000
ROA not before: Mon 18 Apr 2022 09:29:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12679
IP address blocks: 5.34.192.0/21 maxlen: 24
5.34.200.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 883324111 (0x34a674cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5bba209d4b1956b956569d72a43154448d4dc03
Validity
Not Before: Apr 18 09:29:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7229a99b1edc721c4002d0e94b3164a22f00928a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:dd:3d:30:83:e9:e3:ee:a6:d3:b8:b6:7f:51:
0f:c2:c2:76:7e:fe:1c:09:91:31:1b:84:34:91:90:
a4:dc:db:6f:f4:44:44:00:93:a2:47:39:b6:e3:a7:
06:cb:7e:7a:07:7c:1a:96:e7:95:d4:17:84:be:29:
ee:0a:db:22:45:7d:dc:f8:d1:ad:2b:12:f7:94:8d:
3d:6f:67:15:b4:91:8c:e2:23:e0:4a:22:fa:82:f6:
f1:d3:b4:72:98:43:30:bf:0e:f6:ca:c1:6d:e4:7a:
20:48:cd:1d:1a:2a:7f:f0:48:9e:e9:ce:49:9d:0a:
0a:02:ba:61:54:6a:98:ab:23:01:53:4e:ff:ee:d8:
75:88:96:bd:fd:c6:9b:85:ba:92:49:11:ad:78:3d:
95:53:2b:11:0d:ca:f8:8d:90:16:46:2c:e2:f8:71:
81:36:5b:65:c4:f6:ce:46:3f:b5:0c:c8:12:df:4e:
71:07:10:19:48:a5:cf:5b:80:4d:25:0d:09:ff:90:
ab:2c:74:12:6b:27:1e:e4:e6:b6:6c:3e:5e:4b:56:
21:ae:7a:10:9d:71:00:0e:a9:08:5f:b8:8a:7a:e7:
3b:04:46:b0:f4:52:dd:ed:9b:dc:c3:29:50:04:14:
c9:cc:0a:09:ea:4f:52:91:0d:5d:83:6b:7e:96:55:
7d:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:29:A9:9B:1E:DC:72:1C:40:02:D0:E9:4B:31:64:A2:2F:00:92:8A
X509v3 Authority Key Identifier:
keyid:B5:BB:A2:09:D4:B1:95:6B:95:65:69:D7:2A:43:15:44:48:D4:DC:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tbuiCdSxlWuVZWnXKkMVREjU3AM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/b49202-6904-42fb-86f7-746400ae2f5e/1/cimpmx7cchxAAtDpSzFkoi8Akoo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/b49202-6904-42fb-86f7-746400ae2f5e/1/tbuiCdSxlWuVZWnXKkMVREjU3AM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.34.192.0-5.34.203.255
Signature Algorithm: sha256WithRSAEncryption
3f:f3:0c:eb:99:01:54:83:62:52:68:4c:45:00:f0:bd:67:6a:
0e:41:25:0d:dc:43:e4:34:b6:86:78:4b:ff:76:46:ae:f6:8e:
0c:50:6a:0d:a7:8b:df:7f:f1:f2:40:42:e4:7a:c1:58:f9:64:
e5:11:d6:38:44:f5:11:97:5d:8e:3e:b4:48:c4:34:7b:98:25:
d3:80:c4:64:7f:a8:c6:24:37:0c:c6:d4:e7:94:d8:78:03:5a:
04:c1:19:06:40:94:ad:22:86:bf:20:d1:73:9c:d8:a3:7f:e0:
ab:be:62:02:82:40:b2:49:d1:de:00:5f:4a:71:16:f6:e4:b5:
95:43:af:7f:bf:95:17:36:fe:c3:bf:0c:ca:e0:f7:93:e5:24:
2e:f4:34:a8:a8:af:15:5a:36:f9:a8:f5:47:40:a7:03:0d:0f:
54:e1:c9:11:5d:b2:0e:08:56:56:f7:97:f1:07:9b:36:26:5f:
7f:03:6d:5c:48:d5:47:65:85:25:b4:93:4c:4a:0a:1d:78:68:
52:3e:7a:a7:1f:f7:dd:00:5e:8a:8d:aa:10:02:88:1f:21:a0:
84:f9:db:b0:06:e9:b5:16:10:f8:d7:55:dd:fa:ee:06:5f:9f:
e0:bd:f1:14:98:1b:e7:bc:d7:01:d1:bc:fc:6d:5c:2d:61:84:
3d:0c:c7:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:52 2024 by rpki-client on console-ams.rpki-client.org