Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/uEbwm2xPeGXcIbDFe0uo67DNss4.roa
File: uEbwm2xPeGXcIbDFe0uo67DNss4.roa (raw, json)
Hash identifier: qf1MWQuhHXH9sTSc6FomRg61KBevcSjqa9R0ZClvBCM=
Subject key identifier: B8:46:F0:9B:6C:4F:78:65:DC:21:B0:C5:7B:4B:A8:EB:B0:CD:B2:CE
Certificate issuer: /CN=9e55320077696944b1613c2e8c9c606a1e06eb79
Certificate serial: 0A271469
Authority key identifier: 9E:55:32:00:77:69:69:44:B1:61:3C:2E:8C:9C:60:6A:1E:06:EB:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nlUyAHdpaUSxYTwujJxgah4G63k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/uEbwm2xPeGXcIbDFe0uo67DNss4.roa
Signing time: Sat 01 Jan 2022 11:56:15 +0000
ROA not before: Sat 01 Jan 2022 11:56:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212905
IP address blocks: 5.182.247.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 170333289 (0xa271469)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e55320077696944b1613c2e8c9c606a1e06eb79
Validity
Not Before: Jan 1 11:56:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b846f09b6c4f7865dc21b0c57b4ba8ebb0cdb2ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:42:e6:36:6e:5c:0e:73:43:c7:59:35:8d:44:
3a:3d:ce:66:6a:4b:50:7b:ac:a5:7d:e6:a2:37:f6:
b5:f5:99:8c:1e:1a:52:82:a9:c4:92:34:bd:aa:f2:
31:89:74:1b:37:17:c6:b6:f4:07:df:4b:34:66:52:
0e:5c:1b:6c:71:7e:79:d3:3a:a3:01:84:d1:93:15:
69:8c:f7:b1:b0:1f:95:a0:b1:53:ce:31:ec:4b:0f:
2a:a0:ca:46:f1:2c:f6:31:d4:78:1c:37:79:ee:10:
f3:a6:1e:8a:3b:3d:3a:1d:bd:bc:d7:4b:d7:07:a7:
5c:d4:e3:37:63:be:7e:30:b2:bd:02:cd:16:8e:6c:
de:e5:84:19:99:34:44:8b:c7:6b:88:12:e4:c9:14:
7c:8d:4b:ef:9c:6f:82:c5:74:ac:58:44:72:2a:ae:
24:49:95:84:93:21:71:9a:8e:29:17:7b:fc:2c:6b:
12:74:5e:d5:42:14:51:a4:cc:ed:da:97:5d:0e:93:
b7:2c:bb:db:38:52:ea:53:4f:7d:40:d4:79:bb:a1:
09:c3:40:80:9d:e8:b0:0d:f5:e8:33:2f:1e:fe:67:
07:bf:29:5a:04:6d:1b:d5:48:84:65:84:2d:d2:d2:
13:d1:9e:0d:85:6f:1f:01:d7:20:1a:c0:a5:92:90:
39:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:46:F0:9B:6C:4F:78:65:DC:21:B0:C5:7B:4B:A8:EB:B0:CD:B2:CE
X509v3 Authority Key Identifier:
keyid:9E:55:32:00:77:69:69:44:B1:61:3C:2E:8C:9C:60:6A:1E:06:EB:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nlUyAHdpaUSxYTwujJxgah4G63k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/uEbwm2xPeGXcIbDFe0uo67DNss4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.247.0/24
Signature Algorithm: sha256WithRSAEncryption
70:c2:04:b5:0a:2d:49:bd:77:29:fe:82:c1:37:7d:2f:db:18:
00:1a:7f:ca:86:4e:ae:48:f9:ab:5b:38:7e:92:26:b0:56:7a:
ab:c0:e5:85:60:84:4a:f5:f7:71:33:24:e4:5b:58:c8:04:18:
ac:6d:5b:1a:f9:d5:b8:47:58:3e:26:ce:b4:9c:1a:04:15:13:
11:68:cd:48:f5:5e:9f:40:9a:76:66:d9:78:d3:09:d8:c3:95:
82:12:a5:f6:54:ed:23:02:ec:2e:9f:31:99:de:54:57:94:7e:
47:11:17:4e:15:fc:6a:b8:f2:08:3a:e5:f4:94:5e:7b:47:98:
69:e6:20:c6:5f:94:13:9a:31:49:51:ed:a2:d5:1d:38:8c:ee:
b1:44:db:86:23:22:39:4e:1a:90:ff:e5:da:b9:57:21:a8:91:
b1:16:b4:d1:e4:ea:2d:7f:66:53:fb:51:a1:f4:a7:52:63:64:
60:40:7a:ed:95:85:f7:45:4c:1d:b6:a5:eb:10:6b:22:a4:0e:
10:79:e0:c3:7b:da:c9:8a:74:a2:99:b9:2d:8b:da:fd:4f:c6:
72:ea:5a:c5:a5:c4:fd:6d:b7:2c:e1:c4:52:66:e0:92:5a:c0:
47:4d:76:60:81:1e:f8:22:b6:4d:70:06:c1:6d:99:c3:7b:04:
bb:d1:34:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:43 2024 by rpki-client on console-ams.rpki-client.org