Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/89ec25-72dc-4f0f-8b2f-ad7890c2e752/1/ORjEXYKcf4OlzQ3px-Sfv-fDnT4.roa
File: ORjEXYKcf4OlzQ3px-Sfv-fDnT4.roa (raw, json)
Hash identifier: Dc9YhKJF4tci+hdqIeJ02TlkjQZFK6CQcKAG7Uzbe8E=
Subject key identifier: 39:18:C4:5D:82:9C:7F:83:A5:CD:0D:E9:C7:E4:9F:BF:E7:C3:9D:3E
Certificate issuer: /CN=5bd74e39dda400d136126e6c3efb1cf9344277ef
Certificate serial: 018ECC45E893F97140FBE3597EA6DB60DC26
Authority key identifier: 5B:D7:4E:39:DD:A4:00:D1:36:12:6E:6C:3E:FB:1C:F9:34:42:77:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W9dOOd2kANE2Em5sPvsc-TRCd-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/89ec25-72dc-4f0f-8b2f-ad7890c2e752/1/ORjEXYKcf4OlzQ3px-Sfv-fDnT4.roa
Signing time: Thu 11 Apr 2024 08:28:37 +0000
ROA not before: Thu 11 Apr 2024 08:28:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202656
IP address blocks: 83.138.51.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:cc:45:e8:93:f9:71:40:fb:e3:59:7e:a6:db:60:dc:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bd74e39dda400d136126e6c3efb1cf9344277ef
Validity
Not Before: Apr 11 08:28:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3918c45d829c7f83a5cd0de9c7e49fbfe7c39d3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:35:2c:c6:59:f9:28:a4:19:e6:cc:35:a7:86:
a2:65:b2:16:f9:60:b2:71:f5:e3:9a:16:4b:29:ae:
53:01:37:b2:cd:76:07:00:e9:b8:5b:75:cd:f9:fd:
86:ce:f6:fd:75:c8:d1:a3:4e:d6:36:29:f0:3f:77:
72:62:fd:80:63:59:6c:2f:4f:7a:dd:db:39:df:02:
8e:1e:9c:70:7e:6e:b0:da:c5:b8:dd:e3:b9:7a:81:
a1:71:df:87:68:a9:1b:01:eb:f4:d5:af:fa:aa:7e:
34:cd:cf:0d:e8:8f:73:74:71:09:23:ea:13:3e:c9:
4b:1f:46:cc:54:b8:97:a8:fd:af:85:26:ff:56:bc:
0b:9f:48:1e:6f:9c:f4:db:56:ab:a7:d9:2c:71:10:
44:e7:70:67:ea:50:7d:77:61:3c:e1:f9:2f:b8:dd:
33:bb:db:8d:ed:e7:45:7f:62:4f:3a:ab:f7:5b:4e:
04:9b:af:d6:52:fa:f4:22:1c:05:2b:73:68:4a:47:
2c:ea:6e:6c:36:30:ea:5a:52:00:c3:05:35:84:ae:
56:25:5a:54:54:4e:91:c1:ef:64:4e:ab:59:2c:55:
be:fb:1f:03:9f:ab:02:56:a2:9a:0f:2f:75:7b:49:
2b:af:80:63:f5:cc:30:57:31:22:7a:d0:37:bf:03:
44:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:18:C4:5D:82:9C:7F:83:A5:CD:0D:E9:C7:E4:9F:BF:E7:C3:9D:3E
X509v3 Authority Key Identifier:
keyid:5B:D7:4E:39:DD:A4:00:D1:36:12:6E:6C:3E:FB:1C:F9:34:42:77:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W9dOOd2kANE2Em5sPvsc-TRCd-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/89ec25-72dc-4f0f-8b2f-ad7890c2e752/1/ORjEXYKcf4OlzQ3px-Sfv-fDnT4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/89ec25-72dc-4f0f-8b2f-ad7890c2e752/1/W9dOOd2kANE2Em5sPvsc-TRCd-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.138.51.0/24
Signature Algorithm: sha256WithRSAEncryption
be:d8:51:42:92:ed:a2:49:34:7e:26:8e:e4:48:31:1f:62:53:
5c:cd:05:1d:fa:a5:f7:ae:9b:c8:70:06:27:6a:45:5e:8a:8c:
00:df:8a:88:18:fc:4d:bc:93:e3:7d:55:02:aa:10:78:08:58:
bc:3e:21:1d:42:d0:20:ac:1d:a0:cf:0e:ce:bd:f6:77:c5:e9:
27:bc:85:d5:1b:56:63:4f:23:c6:9b:9a:e1:67:92:19:16:f7:
d6:5f:4f:73:b5:df:02:bf:b1:75:94:40:f5:ef:19:69:89:3e:
86:cc:36:19:f2:e0:78:be:53:33:32:f1:82:40:12:58:2f:0a:
c6:72:2c:81:05:54:b5:c6:1a:34:d1:51:b5:66:0b:e0:dc:cf:
7a:31:dc:c1:84:68:98:73:6f:11:3a:30:8e:5e:83:70:db:63:
39:50:1f:56:2a:e4:64:ab:ea:80:75:f7:44:10:3b:19:70:68:
5b:a8:c9:ac:d0:92:48:24:e0:97:e9:4e:65:d1:f1:ac:10:65:
04:2f:96:f3:dc:b2:ee:05:4f:bb:7e:72:61:e2:ea:2d:a4:f7:
3d:f7:fe:d2:34:b5:8a:b3:ab:2d:1d:d2:70:da:44:78:7e:5c:
64:4a:eb:5b:98:75:d7:0a:c6:08:92:94:31:7c:a0:1d:1e:f3:
d0:1d:df:d2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY7MReiT+XFA++NZfqbbYNwmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViZDc0ZTM5ZGRhNDAwZDEzNjEyNmU2YzNlZmIxY2Y5MzQ0
Mjc3ZWYwHhcNMjQwNDExMDgyODM3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzOTE4YzQ1ZDgyOWM3ZjgzYTVjZDBkZTljN2U0OWZiZmU3YzM5ZDNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4TUsxln5KKQZ5sw1p4aiZbIW+WCy
cfXjmhZLKa5TATeyzXYHAOm4W3XN+f2Gzvb9dcjRo07WNinwP3dyYv2AY1lsL096
3ds53wKOHpxwfm6w2sW43eO5eoGhcd+HaKkbAev01a/6qn40zc8N6I9zdHEJI+oT
PslLH0bMVLiXqP2vhSb/VrwLn0geb5z021arp9kscRBE53Bn6lB9d2E84fkvuN0z
u9uN7edFf2JPOqv3W04Em6/WUvr0IhwFK3NoSkcs6m5sNjDqWlIAwwU1hK5WJVpU
VE6Rwe9kTqtZLFW++x8Dn6sCVqKaDy91e0krr4Bj9cwwVzEietA3vwNEfQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDkYxF2CnH+Dpc0N6cfkn7/nw50+MB8GA1UdIwQY
MBaAFFvXTjndpADRNhJubD77HPk0QnfvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVzlkT09kMmtBTkUyRW01c1B2c2MtVFJDZC04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC84OWVjMjUtNzJkYy00ZjBmLThiMmYt
YWQ3ODkwYzJlNzUyLzEvT1JqRVhZS2NmNE9selEzcHgtU2Z2LWZEblQ0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC84OWVjMjUtNzJkYy00ZjBmLThiMmYtYWQ3ODkwYzJlNzUy
LzEvVzlkT09kMmtBTkUyRW01c1B2c2MtVFJDZC04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAU4ozMA0G
CSqGSIb3DQEBCwUAA4IBAQC+2FFCku2iSTR+Jo7kSDEfYlNczQUd+qX3rpvIcAYn
akVeiowA34qIGPxNvJPjfVUCqhB4CFi8PiEdQtAgrB2gzw7OvfZ3xeknvIXVG1Zj
TyPGm5rhZ5IZFvfWX09ztd8Cv7F1lED17xlpiT6GzDYZ8uB4vlMzMvGCQBJYLwrG
ciyBBVS1xho00VG1Zgvg3M96MdzBhGiYc28ROjCOXoNw22M5UB9WKuRkq+qAdfdE
EDsZcGhbqMms0JJIJOCX6U5l0fGsEGUEL5bz3LLuBU+7fnJh4uotpPc99/7SNLWK
s6stHdJw2kR4flxkSutbmHXXCsYIkpQxfKAdHvPQHd/S
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:42 2024 by rpki-client on console-fra.rpki-client.org