Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/8c9495-e709-4a3d-babd-76ad54bfaaab/1/e5XtyFwVrEknY0Rzf5gBKa3jh8Q.roa
File: e5XtyFwVrEknY0Rzf5gBKa3jh8Q.roa (raw, json)
Hash identifier: hgUdq0lC8loniBFN7b4xJgLLe4FzEWw0LoOVWaHsJCM=
Subject key identifier: 7B:95:ED:C8:5C:15:AC:49:27:63:44:73:7F:98:01:29:AD:E3:87:C4
Certificate issuer: /CN=47c87cf93dc67baa74dacf242cde6c797fa840eb
Certificate serial: 018CC349299A3DCB5B29BB7D9B22468311E5
Authority key identifier: 47:C8:7C:F9:3D:C6:7B:AA:74:DA:CF:24:2C:DE:6C:79:7F:A8:40:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R8h8-T3Ge6p02s8kLN5seX-oQOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/8c9495-e709-4a3d-babd-76ad54bfaaab/1/e5XtyFwVrEknY0Rzf5gBKa3jh8Q.roa
Signing time: Mon 01 Jan 2024 04:30:01 +0000
ROA not before: Mon 01 Jan 2024 04:30:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20648
IP address blocks: 146.19.2.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:29:9a:3d:cb:5b:29:bb:7d:9b:22:46:83:11:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47c87cf93dc67baa74dacf242cde6c797fa840eb
Validity
Not Before: Jan 1 04:30:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7b95edc85c15ac49276344737f980129ade387c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:03:ba:28:bb:92:c3:74:e9:61:33:ba:3f:f3:
e1:51:58:a3:06:59:37:80:8e:cf:7e:ac:73:31:82:
70:f4:f2:f9:13:72:34:6f:30:52:f7:e2:a5:4a:23:
44:c4:1b:14:39:30:62:79:e1:31:ab:57:22:2a:ea:
53:63:f2:e8:15:e5:da:a0:2e:46:66:c2:1b:d7:36:
1e:07:a0:72:ef:c5:12:8c:21:ab:50:c0:d6:f9:b7:
94:fe:5c:ed:89:f2:e6:f8:f8:c0:18:ef:bc:18:71:
ea:f9:53:80:95:42:f8:2a:37:dd:28:c4:81:19:8c:
6f:fd:2f:6d:61:48:ee:fb:56:c7:e6:15:60:87:ce:
a7:2e:87:88:26:b8:08:ca:06:d1:51:67:8e:77:17:
a0:07:97:85:fb:99:5c:4a:df:d5:2f:50:4f:15:cc:
a4:64:73:30:a3:46:c0:6b:9c:71:e4:14:2f:59:5f:
a9:38:74:b9:1f:87:1c:49:cf:b8:c7:2b:87:c6:d6:
04:26:f7:a0:1b:f8:56:e6:3c:56:98:59:c9:30:00:
0e:7c:e5:10:23:f7:2d:fb:eb:1f:ca:d2:12:81:d1:
2d:38:75:42:16:b7:33:8b:f9:3d:36:3e:c0:8a:14:
b7:89:81:c3:63:4d:1a:8a:f0:f3:20:c1:07:6b:1e:
f5:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:95:ED:C8:5C:15:AC:49:27:63:44:73:7F:98:01:29:AD:E3:87:C4
X509v3 Authority Key Identifier:
keyid:47:C8:7C:F9:3D:C6:7B:AA:74:DA:CF:24:2C:DE:6C:79:7F:A8:40:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R8h8-T3Ge6p02s8kLN5seX-oQOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/8c9495-e709-4a3d-babd-76ad54bfaaab/1/e5XtyFwVrEknY0Rzf5gBKa3jh8Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/8c9495-e709-4a3d-babd-76ad54bfaaab/1/R8h8-T3Ge6p02s8kLN5seX-oQOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.2.0/24
Signature Algorithm: sha256WithRSAEncryption
03:b7:39:02:10:2d:1f:a4:83:c1:72:88:05:d6:4a:74:83:ed:
3f:a2:85:d3:ed:c0:25:aa:66:d2:90:bf:41:29:29:a0:0b:83:
3d:45:6d:c2:ef:d0:a2:a7:32:d1:df:d0:1b:3e:60:d8:8c:0c:
68:dd:61:8e:63:35:b9:6c:a0:a8:85:2b:89:07:99:43:69:df:
4f:fd:dd:82:c0:37:41:81:85:1a:72:94:e8:6f:59:4c:bb:c0:
69:76:f1:c3:b7:ed:af:ef:eb:19:6f:1a:24:23:7a:e4:10:4f:
f3:b1:60:66:96:31:05:92:06:7d:6a:68:63:8f:6d:38:58:c5:
86:5f:1c:1b:c4:47:2b:9b:1f:40:77:93:92:c6:4c:a4:3b:2d:
f7:6a:ea:cc:5f:89:b4:3d:ac:46:7a:fd:6b:d3:1d:f4:57:67:
3b:28:08:54:14:21:fd:b2:2f:af:fb:48:13:0c:da:b5:f2:90:
eb:77:53:99:de:f0:2c:07:80:98:b2:67:2e:ff:84:2b:66:df:
7a:4c:9b:25:c5:59:36:bb:90:b1:b8:63:6a:6c:7f:27:6d:95:
73:15:9a:aa:d4:a2:d9:3a:22:dc:81:aa:77:31:a8:6b:69:2e:
b4:e6:f7:db:55:63:8c:88:fb:a6:a8:1c:02:c8:6c:6c:49:24:
e1:36:35:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 18:43:33 2024 by rpki-client on console-ams.rpki-client.org