Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/89ec25-72dc-4f0f-8b2f-ad7890c2e752/1/LRg1tnMjIWf2Xc9QTUyUE-vAvOo.roa
File: LRg1tnMjIWf2Xc9QTUyUE-vAvOo.roa (raw, json)
Hash identifier: cx+os175e3g4BJPBWx4kBVTtrFdasyj7DFolFol45zA=
Subject key identifier: 2D:18:35:B6:73:23:21:67:F6:5D:CF:50:4D:4C:94:13:EB:C0:BC:EA
Certificate issuer: /CN=5bd74e39dda400d136126e6c3efb1cf9344277ef
Certificate serial: 018E3243C6B4691BBD25DE91AB977C13AEE3
Authority key identifier: 5B:D7:4E:39:DD:A4:00:D1:36:12:6E:6C:3E:FB:1C:F9:34:42:77:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W9dOOd2kANE2Em5sPvsc-TRCd-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/89ec25-72dc-4f0f-8b2f-ad7890c2e752/1/LRg1tnMjIWf2Xc9QTUyUE-vAvOo.roa
Signing time: Tue 12 Mar 2024 10:44:46 +0000
ROA not before: Tue 12 Mar 2024 10:44:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202656
IP address blocks: 83.138.51.0/24 maxlen: 24
88.151.8.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:32:43:c6:b4:69:1b:bd:25:de:91:ab:97:7c:13:ae:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bd74e39dda400d136126e6c3efb1cf9344277ef
Validity
Not Before: Mar 12 10:44:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2d1835b673232167f65dcf504d4c9413ebc0bcea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:64:27:42:e7:9c:36:f4:8f:ef:fb:24:4b:96:
00:d9:15:ce:5e:f7:57:d9:44:e4:76:36:62:3a:e4:
66:8d:2e:6f:86:a9:5d:00:39:f0:e0:86:20:9e:9f:
4e:62:e5:68:34:ca:52:59:10:41:d5:34:7a:62:5c:
1e:f0:a1:1d:85:22:e8:d0:e2:18:ef:7a:c8:50:ff:
7e:f6:87:95:b4:81:89:42:fd:16:44:e7:7f:e8:69:
6a:0c:9d:73:2b:24:d0:4a:3c:d2:40:da:32:22:36:
51:fa:5a:3a:fd:04:cf:c0:f2:29:0a:77:37:77:62:
51:73:4a:28:32:82:d3:03:52:21:5b:85:9b:8d:4c:
c3:87:b6:35:c0:1c:4f:dc:12:a6:fc:5b:75:9a:c0:
4a:1c:4a:5e:ba:36:7d:57:17:01:6f:a8:8f:1b:a4:
66:ac:38:fa:50:13:4c:64:00:30:73:1b:51:5c:bd:
f3:3b:81:d4:fe:72:5b:f2:f2:66:d7:cb:2e:bc:a5:
61:0d:1c:aa:27:3f:d3:f7:9c:ed:9a:bc:c7:a9:df:
40:a1:35:0a:b3:a6:0a:c5:9d:0f:11:e0:6e:e3:7d:
7d:e2:46:d1:cc:64:e1:53:70:2f:59:82:26:db:a2:
0f:98:ff:8e:91:fe:62:5b:6a:6d:ed:cb:cd:94:19:
2e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:18:35:B6:73:23:21:67:F6:5D:CF:50:4D:4C:94:13:EB:C0:BC:EA
X509v3 Authority Key Identifier:
keyid:5B:D7:4E:39:DD:A4:00:D1:36:12:6E:6C:3E:FB:1C:F9:34:42:77:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W9dOOd2kANE2Em5sPvsc-TRCd-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/89ec25-72dc-4f0f-8b2f-ad7890c2e752/1/LRg1tnMjIWf2Xc9QTUyUE-vAvOo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/89ec25-72dc-4f0f-8b2f-ad7890c2e752/1/W9dOOd2kANE2Em5sPvsc-TRCd-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.138.51.0/24
88.151.8.0/24
Signature Algorithm: sha256WithRSAEncryption
34:76:b9:f2:7e:8a:ee:6b:91:6a:3d:6e:f4:a3:29:6e:bb:a4:
85:ae:e1:8a:52:ed:5e:9d:e3:29:e0:d2:c2:99:59:3e:bf:8e:
e3:06:d9:10:d8:ab:eb:7c:0e:d1:1b:cd:d3:6d:c1:bc:96:c2:
30:c6:b4:58:6b:53:0d:c2:83:04:3d:54:1d:34:37:59:57:43:
da:84:73:b9:a1:5e:e1:ad:57:cf:58:e0:ca:c6:8a:2b:18:aa:
a4:c0:2f:e2:3e:56:af:60:fa:74:00:2d:60:b2:80:f6:95:0e:
66:e5:b3:46:12:72:00:06:2a:ef:85:10:d1:38:d8:71:92:9e:
e9:36:c3:a8:76:3e:23:a7:c4:2a:3a:02:dc:8a:32:82:66:29:
56:4d:06:4d:c7:4f:01:87:19:a5:c1:87:3b:8b:da:de:c3:b3:
e6:1e:ea:b8:7e:36:04:3c:51:e7:7a:d5:c8:25:6d:78:59:fb:
d0:ce:33:c7:a0:95:27:93:15:2a:d6:4c:0c:bb:63:a4:47:12:
69:14:f1:29:49:07:1d:d2:16:f1:b7:c8:e2:d8:49:4d:ac:47:
1d:a9:64:9b:01:0e:1d:b0:5c:12:d9:22:29:65:b3:4a:b1:f9:
25:8b:40:55:25:2e:24:20:11:6e:94:4c:04:a5:73:9c:d4:52:
07:d6:82:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:14 2024 by rpki-client on console-ams.rpki-client.org