Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/sbux2OT3x0JjWEP7ICHa7RIjqXI.roa
File: sbux2OT3x0JjWEP7ICHa7RIjqXI.roa (raw, json)
Hash identifier: Usn5iePKfVyobJuHrMo3lCsxtGWJUJ6sEi3ZLiMPJ3o=
Subject key identifier: B1:BB:B1:D8:E4:F7:C7:42:63:58:43:FB:20:21:DA:ED:12:23:A9:72
Certificate issuer: /CN=306d618355bd8937f75bb4650bb5c1af70f9a12e
Certificate serial: 0299A284
Authority key identifier: 30:6D:61:83:55:BD:89:37:F7:5B:B4:65:0B:B5:C1:AF:70:F9:A1:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MG1hg1W9iTf3W7RlC7XBr3D5oS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/sbux2OT3x0JjWEP7ICHa7RIjqXI.roa
Signing time: Sat 01 Jan 2022 12:54:05 +0000
ROA not before: Sat 01 Jan 2022 12:54:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29119
IP address blocks: 2.57.227.0/24 maxlen: 24
185.155.207.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43623044 (0x299a284)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=306d618355bd8937f75bb4650bb5c1af70f9a12e
Validity
Not Before: Jan 1 12:54:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b1bbb1d8e4f7c742635843fb2021daed1223a972
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:49:39:da:20:c1:b3:f6:fb:a9:95:3e:f6:02:
18:28:e9:f0:8e:ec:fc:71:1c:2c:6f:ac:c1:c3:b1:
23:b1:71:48:b7:c5:13:63:40:8b:bb:18:6c:f4:31:
8e:f5:07:a3:f9:b8:d7:e9:a4:8a:de:15:0a:00:b5:
36:f1:6b:a4:b8:a3:00:4d:de:4e:66:19:20:e6:5e:
fd:68:66:a3:0c:5f:e6:e7:2d:dc:35:fd:48:6e:2d:
d4:03:cc:fe:9b:e6:ab:02:07:01:42:ea:d8:35:46:
72:3d:2c:55:ed:ac:6c:bc:57:cf:e1:db:30:43:83:
7a:a0:36:f1:43:d4:9d:03:47:3b:06:c6:a2:15:e1:
2b:84:6f:3b:ce:6f:8e:58:e6:2b:8e:79:89:dd:9d:
90:3c:68:cd:06:99:68:84:ec:00:ff:6a:0c:c4:74:
12:e2:a7:81:5d:e7:df:64:f1:0a:af:ae:9f:eb:de:
fd:ce:12:69:c6:16:91:ea:e9:07:7d:e3:c2:7e:3b:
cc:cd:01:ca:2d:f9:b7:4f:3f:55:d0:7d:94:39:08:
7d:87:b3:7c:3a:e4:74:84:6b:e7:07:d9:06:36:5b:
de:fb:52:a4:bd:91:71:e6:13:11:22:f7:20:0d:3e:
fe:da:c8:6b:71:da:f0:a6:f7:1c:c5:69:3f:35:11:
d4:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:BB:B1:D8:E4:F7:C7:42:63:58:43:FB:20:21:DA:ED:12:23:A9:72
X509v3 Authority Key Identifier:
keyid:30:6D:61:83:55:BD:89:37:F7:5B:B4:65:0B:B5:C1:AF:70:F9:A1:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MG1hg1W9iTf3W7RlC7XBr3D5oS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/sbux2OT3x0JjWEP7ICHa7RIjqXI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.227.0/24
185.155.207.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:d7:83:9f:e8:f3:65:2e:9b:d2:08:7e:19:56:ec:c4:61:7f:
4a:de:81:e3:9f:68:27:db:c3:53:25:8b:75:46:7f:71:17:84:
93:01:bc:78:bb:63:64:a4:32:5c:c2:94:27:b5:b5:9b:72:d4:
76:c6:6f:81:11:66:82:dd:26:a9:34:7f:bf:25:a0:9c:32:cc:
83:60:46:d9:8e:46:1c:d5:27:34:63:ee:f2:99:65:45:c5:4e:
c4:0a:e2:24:12:b6:e4:e3:93:1f:e6:78:b1:9a:72:76:f8:48:
c2:92:66:9f:0b:ab:04:61:82:f5:2c:e1:fc:32:a8:95:ab:d1:
c9:62:cc:88:a5:2a:57:84:ad:bd:8d:ed:93:ab:76:22:2a:94:
1b:c1:05:66:63:84:a3:a8:d1:73:4e:b6:c4:ee:52:9e:22:ba:
c7:c6:0b:e3:8e:4b:c1:e2:d3:71:cf:78:d8:72:7e:18:47:7c:
26:11:b4:71:20:ec:85:3d:9c:a6:cf:e0:73:c9:60:63:28:ce:
18:bd:ad:f1:1f:56:26:8e:1c:59:76:77:d1:5b:7b:74:08:77:
33:b5:89:7c:9e:df:eb:e3:2b:1b:a2:a1:ef:c5:aa:ae:dc:4b:
f4:91:dd:d0:ec:5c:4b:be:07:c7:85:b3:ba:8b:6f:83:98:5a:
69:39:c5:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:08 2024 by rpki-client on console-ams.rpki-client.org