Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/b49202-6904-42fb-86f7-746400ae2f5e/1/ht55bSo_UqCtJSzKFG3Cjoj5-lM.roa
File: ht55bSo_UqCtJSzKFG3Cjoj5-lM.roa (raw, json)
Hash identifier: YSaCPKBfxvs468pp0XVDs4PzPit9z74MwDyZ2RJ6ZVg=
Subject key identifier: 86:DE:79:6D:2A:3F:52:A0:AD:25:2C:CA:14:6D:C2:8E:88:F9:FA:53
Certificate issuer: /CN=b5bba209d4b1956b956569d72a43154448d4dc03
Certificate serial: 3473E550
Authority key identifier: B5:BB:A2:09:D4:B1:95:6B:95:65:69:D7:2A:43:15:44:48:D4:DC:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tbuiCdSxlWuVZWnXKkMVREjU3AM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/b49202-6904-42fb-86f7-746400ae2f5e/1/ht55bSo_UqCtJSzKFG3Cjoj5-lM.roa
Signing time: Tue 29 Mar 2022 06:28:43 +0000
ROA not before: Tue 29 Mar 2022 06:28:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15828
IP address blocks: 5.34.204.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 880010576 (0x3473e550)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5bba209d4b1956b956569d72a43154448d4dc03
Validity
Not Before: Mar 29 06:28:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=86de796d2a3f52a0ad252cca146dc28e88f9fa53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:1e:5e:ab:dd:30:1a:76:0a:87:34:0f:50:b0:
31:f8:eb:cb:45:0c:95:77:28:88:ea:25:21:82:b7:
09:98:6e:75:23:b8:c5:90:4e:dc:b4:10:a2:ba:de:
74:b5:32:29:57:86:1f:ab:ca:b5:70:7e:2d:ec:b7:
9a:60:fe:87:da:9f:96:5d:b5:dc:27:09:5a:a1:87:
c9:d6:9f:c8:3a:c6:1f:4e:00:b7:5d:02:b1:ea:17:
57:99:97:ba:26:f7:a4:fc:bc:ba:e7:5d:e8:ad:11:
da:b9:aa:75:1c:23:c6:73:13:8e:61:66:74:28:45:
8b:c6:3d:9f:bc:be:4c:a9:12:ff:df:08:66:be:56:
7b:52:83:ec:59:ea:97:9a:ea:50:b5:fd:b7:24:c3:
ba:fe:57:c5:93:bc:3a:c9:f9:8c:26:15:58:16:7d:
b7:e9:72:6b:5b:4d:0a:50:df:4b:81:68:4c:ba:1e:
72:9a:ba:50:db:d3:12:f7:a1:d7:3c:5f:d0:90:9b:
b7:39:a1:e2:85:37:6c:4c:77:97:a6:52:f7:79:a8:
0a:cf:53:ad:4b:5f:90:de:c2:b0:77:92:db:66:07:
22:52:84:df:58:24:9a:3d:b9:e4:a8:0c:5b:7f:5d:
c4:c1:0e:02:c5:2a:a1:25:80:31:3e:3d:a8:98:cb:
02:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:DE:79:6D:2A:3F:52:A0:AD:25:2C:CA:14:6D:C2:8E:88:F9:FA:53
X509v3 Authority Key Identifier:
keyid:B5:BB:A2:09:D4:B1:95:6B:95:65:69:D7:2A:43:15:44:48:D4:DC:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tbuiCdSxlWuVZWnXKkMVREjU3AM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/b49202-6904-42fb-86f7-746400ae2f5e/1/ht55bSo_UqCtJSzKFG3Cjoj5-lM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/b49202-6904-42fb-86f7-746400ae2f5e/1/tbuiCdSxlWuVZWnXKkMVREjU3AM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.34.204.0/22
Signature Algorithm: sha256WithRSAEncryption
73:9f:58:c5:3b:b0:4e:a3:bc:0a:71:04:df:7c:e2:a2:1f:f4:
3c:99:28:2c:7b:69:53:41:a5:8a:ca:97:bd:a1:73:84:29:e1:
3c:6d:d4:38:a1:d8:67:ef:7b:95:88:6c:dc:c0:46:f3:0d:df:
b8:c9:24:91:fe:26:de:d0:88:77:27:1f:67:84:9b:64:e7:35:
90:0e:da:71:a1:64:d2:e9:b6:c3:d6:76:41:46:9a:cd:9b:ab:
ee:81:21:ef:53:58:48:e1:22:2d:42:d4:2c:33:7f:3a:67:9a:
9f:c4:53:e5:f4:96:94:d4:98:d2:1b:3f:59:f4:05:2c:02:d9:
c3:c7:cb:1c:ba:45:f5:24:32:9a:45:71:af:53:14:f1:75:f9:
c5:87:23:48:8c:6f:95:60:43:20:6d:27:ad:d4:92:f1:ec:7e:
6d:40:70:72:e0:71:79:ca:e5:9b:8a:2a:fd:a0:3b:2c:37:cd:
7d:8c:d6:07:dd:5e:31:6d:ef:06:df:13:8e:b8:3e:15:0d:c4:
9e:29:2f:74:39:36:10:9b:2a:75:68:80:18:49:8a:48:fd:fd:
2b:23:b3:ef:cb:ef:01:c7:09:57:3a:b6:83:36:e7:a9:76:5f:
74:6b:8e:2e:5e:e4:15:0f:0a:90:0c:25:7e:d8:83:95:3a:10:
bd:28:26:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:52 2024 by rpki-client on console-ams.rpki-client.org