Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/ieMXNEEX6hGSxvRQFXKg396A7gU.roa
File: ieMXNEEX6hGSxvRQFXKg396A7gU.roa (raw, json)
Hash identifier: mbIPRH6UMK98ZOasCIgByCFr9Kw47Db6Ow90H5hdExE=
Subject key identifier: 89:E3:17:34:41:17:EA:11:92:C6:F4:50:15:72:A0:DF:DE:80:EE:05
Certificate issuer: /CN=9e55320077696944b1613c2e8c9c606a1e06eb79
Certificate serial: 018767CBCCFB0195DAFF10B532B1F356691E
Authority key identifier: 9E:55:32:00:77:69:69:44:B1:61:3C:2E:8C:9C:60:6A:1E:06:EB:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nlUyAHdpaUSxYTwujJxgah4G63k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/ieMXNEEX6hGSxvRQFXKg396A7gU.roa
Signing time: Sun 09 Apr 2023 20:53:42 +0000
ROA not before: Sun 09 Apr 2023 20:53:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208972
IP address blocks: 5.182.247.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:67:cb:cc:fb:01:95:da:ff:10:b5:32:b1:f3:56:69:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e55320077696944b1613c2e8c9c606a1e06eb79
Validity
Not Before: Apr 9 20:53:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=89e317344117ea1192c6f4501572a0dfde80ee05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:7d:b8:95:43:b5:27:81:bf:01:63:8c:e1:47:
89:ef:5d:b3:1a:bd:c4:87:a1:f0:13:f2:37:fb:2b:
cb:95:58:ff:cd:68:b8:f5:03:ac:d1:42:e9:cb:4a:
aa:d6:fe:f5:0d:c3:11:12:09:00:ea:b6:44:8e:6d:
83:b5:dd:e0:74:33:48:e0:d5:ca:1e:73:e8:fe:50:
5f:65:4c:98:91:b5:fa:da:cf:85:f7:27:f6:19:69:
a4:79:a3:52:d7:d8:2f:d5:53:79:e8:bc:e7:c8:51:
ba:26:d7:71:9b:f6:e7:67:a6:2e:6a:eb:62:d1:3c:
56:38:fe:e4:4d:d8:14:b1:03:04:23:e7:a0:6a:dd:
40:6b:98:a2:f6:bd:48:4e:a4:60:ac:f3:15:7c:f6:
e2:a7:ad:8c:92:aa:8d:8f:94:2b:5b:92:25:12:13:
92:35:20:79:a3:5e:58:a3:cd:7e:52:bb:3d:8e:d9:
88:65:69:8c:fc:54:85:ee:be:fd:b9:db:70:74:bc:
b1:a4:9e:9b:31:f0:d7:f9:c2:2d:0f:3d:71:6e:09:
e7:2f:be:82:6f:f9:c0:1f:de:81:ee:16:fa:b1:ed:
af:27:04:40:27:08:29:38:c3:05:a9:0a:21:77:d1:
aa:e3:c4:e0:ee:46:5b:1b:f6:78:9a:0a:b0:87:95:
ab:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:E3:17:34:41:17:EA:11:92:C6:F4:50:15:72:A0:DF:DE:80:EE:05
X509v3 Authority Key Identifier:
keyid:9E:55:32:00:77:69:69:44:B1:61:3C:2E:8C:9C:60:6A:1E:06:EB:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nlUyAHdpaUSxYTwujJxgah4G63k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/ieMXNEEX6hGSxvRQFXKg396A7gU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.247.0/24
Signature Algorithm: sha256WithRSAEncryption
00:8d:9f:66:2a:9c:a9:b1:4f:81:a5:75:57:08:53:89:55:51:
8f:33:e0:28:26:3d:2b:40:db:2a:ef:9d:e6:49:ab:60:ff:c0:
43:e2:b2:7d:5f:e4:12:b3:f3:45:48:fe:ee:a0:0f:72:f4:a7:
44:ac:26:60:aa:c8:99:16:93:9d:6c:5d:09:54:a9:f9:64:58:
78:0f:1a:03:35:e0:e1:2f:8a:02:8e:de:02:42:88:23:9b:ed:
0c:b5:85:fc:46:52:ad:57:43:aa:95:3f:2e:13:ef:5e:5a:04:
2e:fb:4d:7e:cf:93:cf:08:f1:f0:24:9a:20:61:9f:31:21:c8:
da:b1:96:2f:8a:7b:08:42:dd:9d:18:f6:db:f9:80:5b:8b:d2:
ed:5f:64:cd:fb:5d:b4:7a:12:da:0c:39:ca:51:3d:9f:fd:3c:
16:69:2a:a4:ce:da:f5:27:72:83:62:07:12:ba:a9:92:fb:67:
19:54:8a:cb:33:c2:dd:3f:53:96:f9:d1:5d:c0:8d:da:78:46:
f1:89:75:ac:d1:10:8d:6c:82:77:5f:d3:21:1e:fc:f4:7e:c1:
83:93:ed:eb:c3:3e:2f:10:5b:d1:e0:cd:39:14:57:03:ad:f1:
a7:f4:d3:fd:be:72:d0:62:ab:c0:f7:95:41:42:be:96:bb:01:
d8:2a:5d:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:43 2024 by rpki-client on console-ams.rpki-client.org