Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/O_ownSh0F8merILc5AfeHeWl59E.roa
File: O_ownSh0F8merILc5AfeHeWl59E.roa (raw, json)
Hash identifier: 6YGNFlTcQW3D/vLpzQrVMdNrmkFi0ktiR31D3f4+z50=
Subject key identifier: 3B:FA:30:9D:28:74:17:C9:9E:AC:82:DC:E4:07:DE:1D:E5:A5:E7:D1
Certificate issuer: /CN=9e55320077696944b1613c2e8c9c606a1e06eb79
Certificate serial: 01856FA6FC55364DAF763C11E0C746AA1129
Authority key identifier: 9E:55:32:00:77:69:69:44:B1:61:3C:2E:8C:9C:60:6A:1E:06:EB:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nlUyAHdpaUSxYTwujJxgah4G63k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/O_ownSh0F8merILc5AfeHeWl59E.roa
Signing time: Sun 01 Jan 2023 23:24:52 +0000
ROA not before: Sun 01 Jan 2023 23:24:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208972
IP address blocks: 5.182.247.0/24 maxlen: 24
185.233.244.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:a6:fc:55:36:4d:af:76:3c:11:e0:c7:46:aa:11:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e55320077696944b1613c2e8c9c606a1e06eb79
Validity
Not Before: Jan 1 23:24:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3bfa309d287417c99eac82dce407de1de5a5e7d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:27:51:1e:bb:8a:67:0a:20:c6:16:61:f3:a4:
83:f7:91:1d:87:c2:c9:82:29:9e:06:1e:7c:5c:2e:
c5:27:d5:c6:f1:93:57:15:5c:7c:d0:0c:e8:17:89:
cd:91:b1:c7:59:1e:f8:43:7d:1f:5e:b5:c8:b3:b3:
46:e0:b6:b4:9d:aa:16:0a:03:d6:c2:fd:16:fc:0b:
0e:50:40:95:53:ce:c0:67:09:f8:62:f7:6e:df:b7:
57:8d:1c:ce:e6:fa:ab:da:35:49:8d:43:1a:91:c6:
78:6b:6d:67:4d:a1:81:40:18:57:0b:52:2a:6c:f5:
ba:f3:fb:65:06:ae:a5:0a:d4:fb:f1:a4:bd:db:3c:
52:35:84:cd:50:5a:c8:11:25:81:08:02:72:61:5b:
a6:70:e3:94:59:f1:d8:7b:f0:a7:d1:dd:e8:78:be:
2d:dc:bd:e6:c0:a7:cc:5f:6d:34:50:ea:57:dd:b8:
6f:07:ad:81:3e:1b:da:e9:c0:64:21:39:32:4e:4c:
76:62:e9:30:84:6d:31:d9:bf:c3:87:4b:ed:49:43:
46:c3:12:e7:af:35:4c:07:be:53:39:75:5e:47:25:
a7:24:1f:fa:2c:4d:16:21:ce:51:d2:ed:61:ac:87:
35:da:a2:1e:d5:cb:9f:0d:c6:8b:bf:34:b5:60:30:
a1:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:FA:30:9D:28:74:17:C9:9E:AC:82:DC:E4:07:DE:1D:E5:A5:E7:D1
X509v3 Authority Key Identifier:
keyid:9E:55:32:00:77:69:69:44:B1:61:3C:2E:8C:9C:60:6A:1E:06:EB:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nlUyAHdpaUSxYTwujJxgah4G63k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/O_ownSh0F8merILc5AfeHeWl59E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.247.0/24
185.233.244.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:3c:d8:9b:77:71:00:a3:12:7e:26:54:94:0f:25:45:14:97:
91:0c:56:3b:f8:82:be:7c:e2:fe:c6:98:da:ae:df:c4:49:72:
4f:16:d0:e6:33:18:b3:7d:30:75:e8:33:94:9a:f7:db:51:08:
f3:46:fa:69:94:50:8b:85:61:b2:1b:32:4a:bb:b6:13:61:eb:
e2:4d:0a:a5:f1:c7:b9:ff:42:a5:de:f6:02:eb:52:28:49:be:
50:9f:66:ad:7c:4f:03:67:2e:d6:20:6b:78:ad:b4:80:a7:09:
c5:c6:87:70:1e:32:5f:5a:f8:b1:9a:8c:03:6f:f4:75:9b:bd:
5d:6b:60:8a:16:3a:cc:c2:9b:5f:44:56:ee:e7:35:45:d3:40:
f5:03:5a:37:db:62:5e:9c:98:89:8c:c2:6e:25:c1:e1:72:61:
de:a4:f5:47:b3:b5:c9:18:98:e1:54:be:f5:3e:d3:91:c1:77:
af:94:61:2e:f6:39:64:ba:b2:6e:c5:3c:d8:2f:8e:b8:b1:44:
a7:71:92:2f:59:15:d5:fd:ab:01:ee:e3:53:1f:50:84:95:7d:
83:25:1e:30:a5:c7:95:5e:d0:f7:81:36:b1:e4:6b:73:fd:53:
c0:be:0b:36:7a:4b:a9:98:3d:95:6f:70:67:75:d9:3e:bb:f2:
b6:2d:d3:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:43 2024 by rpki-client on console-ams.rpki-client.org