Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/0J0GcVNZ3QJ5S-72MONdBxCpFv0.roa
File: 0J0GcVNZ3QJ5S-72MONdBxCpFv0.roa (raw, json)
Hash identifier: 0xOUH9ytznIeiDc7cIE/AltC8+XJ/qCnz/QhMzeubbc=
Subject key identifier: D0:9D:06:71:53:59:DD:02:79:4B:EE:F6:30:E3:5D:07:10:A9:16:FD
Certificate issuer: /CN=f75d8b52815f3f2613e948992ec9fe660f6949b4
Certificate serial: 018E3243C5B2CCF03DD814C7F8381802A29E
Authority key identifier: F7:5D:8B:52:81:5F:3F:26:13:E9:48:99:2E:C9:FE:66:0F:69:49:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/912LUoFfPyYT6UiZLsn-Zg9pSbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/0J0GcVNZ3QJ5S-72MONdBxCpFv0.roa
Signing time: Tue 12 Mar 2024 10:44:45 +0000
ROA not before: Tue 12 Mar 2024 10:44:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48031
IP address blocks: 91.246.54.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:32:43:c5:b2:cc:f0:3d:d8:14:c7:f8:38:18:02:a2:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f75d8b52815f3f2613e948992ec9fe660f6949b4
Validity
Not Before: Mar 12 10:44:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d09d06715359dd02794beef630e35d0710a916fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:63:4c:a8:bd:e8:fa:44:2f:83:89:96:a0:f2:
ad:ec:04:43:54:51:6a:d6:5d:8c:08:bb:52:1e:a7:
21:a5:7d:09:79:26:24:b8:5d:9f:8a:1c:bd:4f:c5:
54:bf:65:74:17:46:2c:14:9c:af:f9:4e:c5:97:b3:
51:69:be:af:cb:35:b5:91:fa:c6:7e:51:08:57:f3:
4b:14:83:b2:d5:8c:df:1d:66:e5:33:d4:60:53:d6:
7f:8a:0f:a2:57:3d:48:82:a0:3a:ac:0f:0b:a5:6b:
37:cc:e3:06:2e:62:ed:9b:09:33:c3:b0:9d:e3:50:
c9:9c:18:39:16:89:8b:52:6f:0b:c2:c4:9c:44:59:
b6:3b:d4:26:9a:b1:b1:ed:45:4b:51:fb:b9:25:50:
cd:d7:ca:2f:62:e4:27:c7:99:12:5e:7e:97:52:52:
b1:56:88:b4:03:f1:e7:d3:7b:cc:cc:76:b6:02:26:
bc:3b:ff:d4:67:df:0a:8b:71:e8:84:78:91:eb:63:
3b:cb:e3:85:bf:6b:a7:31:4b:8f:bb:bc:7b:97:b4:
38:a8:28:aa:0f:17:3d:ea:ce:ea:da:62:af:7f:da:
82:88:8d:62:16:3f:b7:f1:00:3e:d5:94:b4:61:af:
cc:b6:14:06:5f:bc:5d:86:d5:89:c5:c2:a6:1c:82:
f3:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:9D:06:71:53:59:DD:02:79:4B:EE:F6:30:E3:5D:07:10:A9:16:FD
X509v3 Authority Key Identifier:
keyid:F7:5D:8B:52:81:5F:3F:26:13:E9:48:99:2E:C9:FE:66:0F:69:49:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/912LUoFfPyYT6UiZLsn-Zg9pSbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/0J0GcVNZ3QJ5S-72MONdBxCpFv0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/912LUoFfPyYT6UiZLsn-Zg9pSbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.246.54.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:d4:e5:8d:00:5a:02:9a:17:1b:3a:c8:44:26:9f:08:84:d3:
35:5a:b4:10:45:a5:e6:78:9a:a1:e5:c0:bc:60:23:94:2c:5b:
21:5f:6c:74:74:c7:0b:3a:b3:99:73:13:17:c5:2a:2e:86:99:
6c:7b:77:88:48:d5:ba:c8:89:00:a2:46:25:16:03:39:9a:a5:
0d:44:b1:9d:f1:23:c1:4c:07:d6:ac:1f:1b:f5:15:b8:af:64:
91:33:c5:ae:37:04:0a:5b:80:e4:41:07:de:8e:a8:61:60:c1:
ff:34:c9:20:6d:d7:14:0b:25:3e:51:2a:85:64:18:cc:3d:1d:
06:70:4d:aa:18:26:b5:1e:2c:0b:da:e1:7d:f0:c9:6d:c5:57:
97:2b:ed:88:73:5c:55:30:80:16:13:07:a6:a3:4a:15:80:bc:
a2:55:d7:08:4e:d1:f6:ba:cc:8a:0c:2a:71:d5:4a:d9:e8:c4:
c3:33:52:0b:f7:34:a6:17:72:d9:f5:22:28:52:4f:7e:ec:62:
41:55:90:f6:f6:08:8d:51:8f:46:0f:d7:59:aa:cf:ae:f8:a1:
c1:8e:21:df:9a:f4:c4:c5:99:de:58:a1:85:aa:b0:4d:92:95:
74:93:45:32:95:81:c2:9b:05:1e:bb:b8:f4:a1:14:f3:e1:88:
0f:9c:4a:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 12:58:39 2024 by rpki-client on console-fra.rpki-client.org