Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/k0s6gNkMYsnL1KBoW0ZKRxkyVDs.roa
File: k0s6gNkMYsnL1KBoW0ZKRxkyVDs.roa (raw, json)
Hash identifier: xdrzNOyyx7F5NJ/wYzhi4Msk2SSOyyPh8Rq4ViCfBL0=
Subject key identifier: 93:4B:3A:80:D9:0C:62:C9:CB:D4:A0:68:5B:46:4A:47:19:32:54:3B
Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Certificate serial: 0190DEC0DA41B9AE33130A311D246F004FE8
Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/k0s6gNkMYsnL1KBoW0ZKRxkyVDs.roa
Signing time: Tue 23 Jul 2024 08:41:39 +0000
ROA not before: Tue 23 Jul 2024 08:41:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39521
IP address blocks: 45.138.2.0/23 maxlen: 23
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:de:c0:da:41:b9:ae:33:13:0a:31:1d:24:6f:00:4f:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Validity
Not Before: Jul 23 08:41:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=934b3a80d90c62c9cbd4a0685b464a471932543b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:3f:fc:11:0f:9a:bd:6b:02:5e:21:dd:c3:f7:
2d:96:60:16:8a:48:ed:01:77:ec:55:eb:4f:7e:3e:
a8:f6:27:8c:82:6d:18:a5:fc:a0:4c:bf:b4:24:45:
20:88:71:df:30:cc:13:09:15:02:36:14:5a:cd:b5:
dd:ff:ed:06:5e:0a:a4:76:a3:62:05:83:71:ba:d2:
16:a1:6a:e0:8e:1b:ea:61:9c:52:7f:e1:33:7f:6c:
4d:3c:59:8a:cb:dc:04:10:99:65:57:fc:d7:f2:49:
db:84:72:58:8d:eb:eb:38:3c:c4:fd:15:3b:41:f5:
94:9e:4b:45:5a:a0:9a:41:79:79:d2:21:2e:5a:fb:
6c:e4:71:23:f7:18:7a:8e:43:46:eb:56:ed:82:6d:
37:26:ca:59:0f:eb:0c:0f:ad:d5:54:af:f0:d5:18:
01:e5:34:d7:55:a2:3a:78:01:b5:51:34:c5:a5:ef:
e1:4b:2f:ca:7d:ec:13:3a:5e:e8:e4:05:da:ac:27:
cc:87:29:df:d3:8e:5e:76:a6:b8:26:db:14:c1:bd:
4a:4f:08:c2:fb:ff:f7:7a:92:d9:5b:05:98:a0:08:
0b:73:f3:21:2e:03:20:0d:58:07:a5:c0:35:9b:1d:
c7:03:54:ea:6b:f8:3f:9e:0f:08:f0:a1:ec:9b:df:
45:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:4B:3A:80:D9:0C:62:C9:CB:D4:A0:68:5B:46:4A:47:19:32:54:3B
X509v3 Authority Key Identifier:
keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/k0s6gNkMYsnL1KBoW0ZKRxkyVDs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.138.2.0/23
Signature Algorithm: sha256WithRSAEncryption
bd:0c:7a:62:3e:d0:97:a2:21:02:1b:3e:d8:04:c1:57:8b:b3:
7a:0a:6e:cf:ec:1c:f8:68:3d:12:26:60:2d:32:8c:42:4d:f1:
80:06:e2:7a:42:e9:b8:2f:ea:3d:5b:99:59:34:c0:39:d3:2f:
34:91:fb:7f:8f:95:8c:fa:2e:67:68:ad:28:e0:81:35:4b:29:
47:83:e3:23:aa:1d:02:b7:01:be:e4:54:bd:2f:a0:90:2b:28:
b1:53:05:a7:01:9f:80:d8:e7:2f:e3:d0:04:07:7b:d7:27:bf:
bd:ba:ed:bf:3b:4b:8f:d3:81:18:10:2e:92:50:c6:d2:96:27:
b1:38:45:d0:71:7f:25:73:72:45:4b:2f:2b:66:1e:b9:56:85:
7a:82:d1:d8:63:c8:ad:ee:30:43:b7:ff:f6:ca:5f:c8:2b:ae:
11:7c:78:f9:11:ea:41:8d:bb:da:ab:85:22:d8:f5:14:22:2c:
98:3f:7d:84:18:d6:90:92:11:bc:f6:cc:7c:77:99:b9:da:48:
a7:8f:9d:f4:94:84:96:76:24:2b:60:d9:d2:bc:f8:44:78:55:
17:82:d7:67:47:b6:93:74:0c:29:24:55:6c:93:56:6c:f9:ee:
22:a3:fd:76:02:e1:a7:8e:09:11:2e:25:3d:61:92:aa:b1:12:
e3:0c:ff:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 28 16:05:30 2024 by rpki-client on console-fra.rpki-client.org