Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/b49202-6904-42fb-86f7-746400ae2f5e/1/o14EPAFToEh9whIM3bWZNFH5rzA.roa
File: o14EPAFToEh9whIM3bWZNFH5rzA.roa (raw, json)
Hash identifier: 3/gsg+wdK2F0srZ4K0Wd3ct2sQmBRuKEOfjoruhzKR0=
Subject key identifier: A3:5E:04:3C:01:53:A0:48:7D:C2:12:0C:DD:B5:99:34:51:F9:AF:30
Certificate issuer: /CN=b5bba209d4b1956b956569d72a43154448d4dc03
Certificate serial: 0183C58082D726E73C6CBD8050B2DCE18768
Authority key identifier: B5:BB:A2:09:D4:B1:95:6B:95:65:69:D7:2A:43:15:44:48:D4:DC:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tbuiCdSxlWuVZWnXKkMVREjU3AM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/b49202-6904-42fb-86f7-746400ae2f5e/1/o14EPAFToEh9whIM3bWZNFH5rzA.roa
Signing time: Tue 11 Oct 2022 05:24:37 +0000
ROA not before: Tue 11 Oct 2022 05:24:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15828
IP address blocks: 5.34.192.0/21 maxlen: 24
5.34.204.0/23 maxlen: 24
5.34.200.0/22 maxlen: 24
5.34.206.0/24 maxlen: 24
5.34.207.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:c5:80:82:d7:26:e7:3c:6c:bd:80:50:b2:dc:e1:87:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5bba209d4b1956b956569d72a43154448d4dc03
Validity
Not Before: Oct 11 05:24:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a35e043c0153a0487dc2120cddb5993451f9af30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:fc:01:53:fe:cd:3e:c8:60:ba:56:a2:0f:cc:
d9:ec:55:eb:e9:4a:24:f0:4e:5d:ec:0d:c7:c3:d6:
10:f9:f4:d1:51:98:d2:98:82:9f:72:f6:f8:5d:92:
a2:e1:b4:23:4f:cd:57:b3:5c:7e:93:80:fd:15:10:
07:16:2f:39:57:35:6e:7f:e9:b3:a2:7e:4e:70:e2:
f8:fe:c3:fa:17:08:7d:ce:67:22:6b:e6:77:b7:26:
ed:2d:eb:70:5d:81:79:e2:6e:fb:3a:b8:0b:36:01:
92:fb:5b:0c:d2:41:df:0a:cf:a2:d5:65:bb:88:5e:
02:57:f7:44:92:26:09:07:ee:99:8b:7a:89:13:ed:
e8:4c:aa:64:9b:b9:ad:6c:e0:16:a5:26:0f:94:31:
66:00:3e:6e:a4:70:88:93:de:1c:f8:6a:f8:b2:20:
99:09:1c:e4:6b:6a:18:19:2e:6d:c0:2e:d5:78:61:
fe:e9:f3:07:46:2d:ba:9d:50:77:53:4e:fd:c1:c1:
25:fa:88:b6:31:a8:86:be:41:07:0e:06:65:62:8f:
6d:b8:11:0e:3c:92:d1:5a:d9:0f:d4:e4:58:4d:6d:
23:8f:12:c4:d3:f2:7d:ce:d3:26:79:79:ae:71:4d:
34:1a:01:15:67:02:2d:65:5c:7d:52:88:3a:94:6b:
e9:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:5E:04:3C:01:53:A0:48:7D:C2:12:0C:DD:B5:99:34:51:F9:AF:30
X509v3 Authority Key Identifier:
keyid:B5:BB:A2:09:D4:B1:95:6B:95:65:69:D7:2A:43:15:44:48:D4:DC:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tbuiCdSxlWuVZWnXKkMVREjU3AM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/b49202-6904-42fb-86f7-746400ae2f5e/1/o14EPAFToEh9whIM3bWZNFH5rzA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/b49202-6904-42fb-86f7-746400ae2f5e/1/tbuiCdSxlWuVZWnXKkMVREjU3AM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.34.192.0/20
Signature Algorithm: sha256WithRSAEncryption
ad:67:15:a8:4b:bb:6d:e2:01:5e:73:22:f8:e6:d7:d5:d0:68:
44:3b:81:4e:36:0d:fe:11:1f:55:31:dc:7b:7b:d6:d8:8f:a5:
c7:f8:06:dd:e3:ca:60:92:7a:d3:0c:ad:32:38:e3:4b:f4:67:
71:6a:ea:0a:f0:d6:46:1b:fb:b9:19:4b:f1:f6:84:9c:35:5a:
2f:79:20:42:4d:be:c7:73:71:71:8d:d4:a0:e7:1b:5f:11:88:
20:2e:fe:0f:94:4f:7c:32:ea:58:e0:91:17:07:30:32:1e:4e:
b8:4e:d6:0b:1c:9d:5f:dc:7a:08:37:de:f0:18:34:55:71:1b:
e1:57:43:64:ed:50:cb:85:df:0b:a3:3f:94:b7:dd:3e:89:78:
de:62:a7:6b:59:d2:7c:ed:69:50:2b:2f:2a:cd:06:67:3d:33:
78:ea:30:8a:ec:11:31:b0:f7:69:6a:ae:ea:d1:64:80:76:05:
ba:ab:9b:8f:6e:f4:45:89:f7:da:fe:f3:af:75:29:ad:b2:7b:
1a:6d:7b:f5:47:84:0c:a7:97:35:6d:39:36:46:90:73:da:df:
bc:9e:2d:a9:85:e3:a4:a2:4b:ff:a7:ce:f5:73:64:e8:ad:d3:
c9:57:d5:ad:b9:4f:78:f8:26:50:4e:e9:46:5e:95:cf:7d:50:
9c:f6:23:2a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYPFgILXJuc8bL2AULLc4YdoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1YmJhMjA5ZDRiMTk1NmI5NTY1NjlkNzJhNDMxNTQ0NDhk
NGRjMDMwHhcNMjIxMDExMDUyNDM3WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMzVlMDQzYzAxNTNhMDQ4N2RjMjEyMGNkZGI1OTkzNDUxZjlhZjMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnvwBU/7NPshgulaiD8zZ7FXr6Uok
8E5d7A3Hw9YQ+fTRUZjSmIKfcvb4XZKi4bQjT81Xs1x+k4D9FRAHFi85VzVuf+mz
on5OcOL4/sP6Fwh9zmcia+Z3tybtLetwXYF54m77OrgLNgGS+1sM0kHfCs+i1WW7
iF4CV/dEkiYJB+6Zi3qJE+3oTKpkm7mtbOAWpSYPlDFmAD5upHCIk94c+Gr4siCZ
CRzka2oYGS5twC7VeGH+6fMHRi26nVB3U079wcEl+oi2MaiGvkEHDgZlYo9tuBEO
PJLRWtkP1ORYTW0jjxLE0/J9ztMmeXmucU00GgEVZwItZVx9Uog6lGvpqQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKNeBDwBU6BIfcISDN21mTRR+a8wMB8GA1UdIwQY
MBaAFLW7ognUsZVrlWVp1ypDFURI1NwDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGJ1aUNkU3hsV3VWWlduWEtrTVZSRWpVM0FNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9iNDkyMDItNjkwNC00MmZiLTg2Zjct
NzQ2NDAwYWUyZjVlLzEvbzE0RVBBRlRvRWg5d2hJTTNiV1pORkg1cnpBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS9iNDkyMDItNjkwNC00MmZiLTg2ZjctNzQ2NDAwYWUyZjVl
LzEvdGJ1aUNkU3hsV3VWWlduWEtrTVZSRWpVM0FNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEBSLAMA0G
CSqGSIb3DQEBCwUAA4IBAQCtZxWoS7tt4gFecyL45tfV0GhEO4FONg3+ER9VMdx7
e9bYj6XH+Abd48pgknrTDK0yOONL9GdxauoK8NZGG/u5GUvx9oScNVoveSBCTb7H
c3FxjdSg5xtfEYggLv4PlE98MupY4JEXBzAyHk64TtYLHJ1f3HoIN97wGDRVcRvh
V0Nk7VDLhd8Loz+Ut90+iXjeYqdrWdJ87WlQKy8qzQZnPTN46jCK7BExsPdpaq7q
0WSAdgW6q5uPbvRFiffa/vOvdSmtsnsabXv1R4QMp5c1bTk2RpBz2t+8ni2pheOk
okv/p871c2TordPJV9WtuU94+CZQTulGXpXPfVCc9iMq
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:52 2024 by rpki-client on console-ams.rpki-client.org