Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/b49202-6904-42fb-86f7-746400ae2f5e/1/faqtSlC95gNV6sF1KKV5RJriG4E.roa
File: faqtSlC95gNV6sF1KKV5RJriG4E.roa (raw, json)
Hash identifier: v3iOPq60rbPVTpD0Uu4ifNA0Bs+dV0fKtQo8jivMaRg=
Subject key identifier: 7D:AA:AD:4A:50:BD:E6:03:55:EA:C1:75:28:A5:79:44:9A:E2:1B:81
Certificate issuer: /CN=b5bba209d4b1956b956569d72a43154448d4dc03
Certificate serial: 34D640F8
Authority key identifier: B5:BB:A2:09:D4:B1:95:6B:95:65:69:D7:2A:43:15:44:48:D4:DC:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tbuiCdSxlWuVZWnXKkMVREjU3AM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/b49202-6904-42fb-86f7-746400ae2f5e/1/faqtSlC95gNV6sF1KKV5RJriG4E.roa
Signing time: Sat 07 May 2022 10:27:16 +0000
ROA not before: Sat 07 May 2022 10:27:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1
IP address blocks: 5.34.192.0/21 maxlen: 21
5.34.200.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 886456568 (0x34d640f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5bba209d4b1956b956569d72a43154448d4dc03
Validity
Not Before: May 7 10:27:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7daaad4a50bde60355eac17528a579449ae21b81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:08:a3:b4:7e:09:a4:b2:d3:f7:f6:61:91:f1:
1f:c1:cd:7b:52:7f:45:28:10:5e:74:91:a9:1b:68:
26:9d:ae:94:eb:28:25:46:ae:02:05:09:f0:f3:ed:
4d:ed:49:61:5c:89:a9:a5:58:09:00:0d:80:9f:53:
d9:fd:58:ed:e9:48:04:b7:88:d6:c2:e0:84:96:71:
67:da:e1:e0:ed:bf:cb:88:0d:32:cd:2d:be:e7:59:
0f:10:c9:b9:69:b1:ea:a9:63:f6:f9:9a:f5:fe:43:
f2:07:78:c4:6d:d0:42:85:2e:f9:6b:6e:40:fc:6c:
95:09:dd:7a:1f:bd:7b:9d:b2:97:01:b1:22:ef:95:
4d:04:50:86:61:92:a7:a1:c6:46:bd:a5:63:0b:3d:
0d:a5:cc:c6:3b:38:46:da:d2:99:e8:55:b5:5e:fb:
31:ec:99:5c:39:cc:ce:b4:b9:87:a2:56:e9:a1:51:
9b:ce:91:42:b0:10:ef:69:77:ac:d6:f5:0a:38:17:
87:2f:5c:8a:4d:d7:bf:c6:8c:5c:87:f0:89:55:f3:
72:4f:8e:20:fb:f4:e8:2d:b1:35:77:7c:fa:17:f6:
9f:e3:3e:f9:4d:4c:f2:8e:78:9d:2f:7f:18:4d:1f:
70:d3:2a:5d:ba:56:5f:1a:5c:e1:86:c8:42:84:1b:
ff:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:AA:AD:4A:50:BD:E6:03:55:EA:C1:75:28:A5:79:44:9A:E2:1B:81
X509v3 Authority Key Identifier:
keyid:B5:BB:A2:09:D4:B1:95:6B:95:65:69:D7:2A:43:15:44:48:D4:DC:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tbuiCdSxlWuVZWnXKkMVREjU3AM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/b49202-6904-42fb-86f7-746400ae2f5e/1/faqtSlC95gNV6sF1KKV5RJriG4E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/b49202-6904-42fb-86f7-746400ae2f5e/1/tbuiCdSxlWuVZWnXKkMVREjU3AM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.34.192.0-5.34.203.255
Signature Algorithm: sha256WithRSAEncryption
00:bc:5d:42:70:ca:90:59:a0:93:f8:c9:ef:f1:ce:31:db:5a:
a8:29:fe:18:61:37:e8:81:f9:24:34:37:18:4a:bf:2b:93:a7:
16:fe:59:2c:e7:81:1d:b3:09:45:22:8d:4e:32:b5:02:3c:30:
8e:01:57:31:f8:13:78:93:cf:f8:0a:5b:91:bd:ef:68:4e:b9:
fe:d2:ea:3d:2a:75:db:bf:5c:0c:9b:a5:10:fc:0b:c5:95:20:
64:2b:08:55:88:2b:23:12:f2:a6:7d:6a:bd:19:8e:1e:e9:71:
9b:c3:76:fe:50:46:90:82:cf:3f:d7:96:59:1f:40:d4:ee:3f:
2f:59:59:19:83:59:2e:f6:97:53:f7:d9:e4:e3:0a:a0:b7:17:
42:f2:73:07:d9:6e:32:9d:51:ca:34:7f:54:f1:4d:55:9c:be:
9d:21:da:d9:03:01:e5:72:53:e3:50:b3:7e:8c:45:a3:f4:f6:
b0:9f:af:c5:85:d6:42:cb:18:b9:24:4c:db:87:86:21:6a:09:
39:94:fb:61:50:8e:7e:c3:f3:d1:5d:79:d5:a3:55:21:ef:e9:
96:7c:f8:f5:d0:8c:cf:10:1e:b3:5b:ca:66:f2:95:c8:f1:56:
a8:b0:3d:44:90:59:08:74:13:ac:2c:f4:0c:07:88:de:6e:3f:
a7:1e:b8:21
-----BEGIN CERTIFICATE-----
MIIE9zCCA9+gAwIBAgIENNZA+DANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
NWJiYTIwOWQ0YjE5NTZiOTU2NTY5ZDcyYTQzMTU0NDQ4ZDRkYzAzMB4XDTIyMDUw
NzEwMjcxNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoN2RhYWFkNGE1MGJk
ZTYwMzU1ZWFjMTc1MjhhNTc5NDQ5YWUyMWI4MTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANMIo7R+CaSy0/f2YZHxH8HNe1J/RSgQXnSRqRtoJp2ulOso
JUauAgUJ8PPtTe1JYVyJqaVYCQANgJ9T2f1Y7elIBLeI1sLghJZxZ9rh4O2/y4gN
Ms0tvudZDxDJuWmx6qlj9vma9f5D8gd4xG3QQoUu+WtuQPxslQndeh+9e52ylwGx
Iu+VTQRQhmGSp6HGRr2lYws9DaXMxjs4RtrSmehVtV77MeyZXDnMzrS5h6JW6aFR
m86RQrAQ72l3rNb1CjgXhy9cik3Xv8aMXIfwiVXzck+OIPv06C2xNXd8+hf2n+M+
+U1M8o54nS9/GE0fcNMqXbpWXxpc4YbIQoQb/wECAwEAAaOCAhEwggINMB0GA1Ud
DgQWBBR9qq1KUL3mA1XqwXUopXlEmuIbgTAfBgNVHSMEGDAWgBS1u6IJ1LGVa5Vl
adcqQxVESNTcAzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3RidWlDZFN4bFd1VlpXblhLa01WUkVqVTNBTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZmEvYjQ5MjAyLTY5MDQtNDJmYi04NmY3LTc0NjQwMGFlMmY1ZS8x
L2ZhcXRTbEM5NWdOVjZzRjFLS1Y1UkpyaUc0RS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmEv
YjQ5MjAyLTY5MDQtNDJmYi04NmY3LTc0NjQwMGFlMmY1ZS8xL3RidWlDZFN4bFd1
VlpXblhLa01WUkVqVTNBTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAn
BggrBgEFBQcBBwEB/wQYMBYwFAQCAAEwDjAMAwQGBSLAAwQCBSLIMA0GCSqGSIb3
DQEBCwUAA4IBAQAAvF1CcMqQWaCT+Mnv8c4x21qoKf4YYTfogfkkNDcYSr8rk6cW
/lks54EdswlFIo1OMrUCPDCOAVcx+BN4k8/4CluRve9oTrn+0uo9KnXbv1wMm6UQ
/AvFlSBkKwhViCsjEvKmfWq9GY4e6XGbw3b+UEaQgs8/15ZZH0DU7j8vWVkZg1ku
9pdT99nk4wqgtxdC8nMH2W4ynVHKNH9U8U1VnL6dIdrZAwHlclPjULN+jEWj9Paw
n6/FhdZCyxi5JEzbh4Yhagk5lPthUI5+w/PRXXnVo1Uh7+mWfPj10IzPEB6zW8pm
8pXI8VaosD1EkFkIdBOsLPQMB4jebj+nHrgh
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:52 2024 by rpki-client on console-ams.rpki-client.org