Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/viV7zDyqXXUR4ZgRdQbsfOmPK9E.roa
File: viV7zDyqXXUR4ZgRdQbsfOmPK9E.roa (raw, json)
Hash identifier: pGVq7CcmJttuffqoaNV4qavCV4lGNxpVdg6ewNuqEuc=
Subject key identifier: BE:25:7B:CC:3C:AA:5D:75:11:E1:98:11:75:06:EC:7C:E9:8F:2B:D1
Certificate issuer: /CN=9e55320077696944b1613c2e8c9c606a1e06eb79
Certificate serial: 01856FA6FCB3555653EFD43DD33FA3942EFA
Authority key identifier: 9E:55:32:00:77:69:69:44:B1:61:3C:2E:8C:9C:60:6A:1E:06:EB:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nlUyAHdpaUSxYTwujJxgah4G63k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/viV7zDyqXXUR4ZgRdQbsfOmPK9E.roa
Signing time: Sun 01 Jan 2023 23:24:52 +0000
ROA not before: Sun 01 Jan 2023 23:24:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212905
IP address blocks: 5.182.247.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:a6:fc:b3:55:56:53:ef:d4:3d:d3:3f:a3:94:2e:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e55320077696944b1613c2e8c9c606a1e06eb79
Validity
Not Before: Jan 1 23:24:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=be257bcc3caa5d7511e198117506ec7ce98f2bd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:f9:63:2e:c6:15:ac:1b:02:2c:9e:a9:1c:36:
25:ed:85:b7:61:87:f4:7c:2d:81:d3:93:11:5e:ce:
a6:25:9e:f6:81:fc:1b:fa:44:b7:04:d7:31:68:cd:
c2:3b:b7:89:99:c1:0f:e3:5d:09:19:ae:11:c8:b4:
0c:30:86:a8:f4:97:4a:7e:bb:36:18:e8:b7:fb:97:
eb:b1:bd:50:4e:04:ea:05:8d:56:dd:46:26:fb:a2:
64:c3:3a:e1:f6:1f:f0:73:3c:19:83:e5:03:68:42:
93:69:98:10:66:1f:46:f0:31:71:b4:35:d8:6b:2b:
41:53:15:52:42:54:78:4a:48:51:f7:b1:d3:4a:8c:
5d:f9:e9:10:91:ef:53:77:26:3b:3e:7e:0d:c3:85:
6e:b3:90:61:1b:04:24:36:89:7e:08:73:bf:83:25:
dd:3e:ad:39:24:2c:21:a5:60:0c:bc:b2:41:8e:9f:
db:9f:1d:e3:54:76:ff:e3:8b:76:00:59:52:ae:84:
fe:c4:d7:aa:a3:15:4e:3a:c0:6d:52:d3:ac:d9:14:
84:a5:3a:42:6a:57:74:3e:2a:0c:02:69:62:bd:cd:
4f:6d:40:92:83:ce:47:3d:2b:34:48:e3:29:cb:9b:
76:88:c9:e5:35:e6:c5:d1:65:81:a6:61:3e:f1:54:
0b:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:25:7B:CC:3C:AA:5D:75:11:E1:98:11:75:06:EC:7C:E9:8F:2B:D1
X509v3 Authority Key Identifier:
keyid:9E:55:32:00:77:69:69:44:B1:61:3C:2E:8C:9C:60:6A:1E:06:EB:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nlUyAHdpaUSxYTwujJxgah4G63k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/viV7zDyqXXUR4ZgRdQbsfOmPK9E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.247.0/24
Signature Algorithm: sha256WithRSAEncryption
74:28:da:c4:0d:00:7a:46:9e:b0:2d:2e:ad:48:b4:83:ac:76:
c3:9e:86:b1:81:00:84:8e:28:1e:c1:18:16:ce:86:c7:ba:24:
eb:23:2e:fd:c0:06:8e:75:da:25:57:8e:04:6a:d4:36:a5:35:
31:2f:a5:7e:ad:47:4d:ef:1a:23:fe:1a:0b:eb:ee:d8:eb:a8:
ea:9f:5b:fb:ee:f9:d9:36:e0:7a:d2:e4:d2:31:c1:8a:2a:d0:
64:90:8c:f3:d7:a1:83:ab:00:80:54:ae:01:ac:b4:da:fc:7f:
4a:c6:c4:6f:40:25:e2:12:c6:f6:83:50:09:4b:da:39:5e:8a:
6b:df:c7:08:66:fc:44:6d:01:25:2c:56:c9:a7:2a:25:c1:51:
da:1e:cd:e8:d3:4d:14:1c:ea:a1:02:d9:d4:e7:72:c7:74:2c:
bf:68:a7:05:e3:d2:7f:52:ca:e3:22:74:19:60:6e:68:03:72:
c6:4f:00:df:04:96:85:af:00:8b:ef:09:ae:92:83:65:45:07:
14:d0:e5:ce:87:8d:ca:4d:8f:b9:fa:cc:4d:f8:83:37:1f:99:
e5:60:58:c6:ee:96:d5:db:80:6e:8a:ca:c8:8e:d0:b7:a1:ce:
c4:15:0b:c3:95:8d:12:09:0c:1d:3d:b2:3f:c5:29:4d:f0:c8:
9c:ed:f1:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:43 2024 by rpki-client on console-ams.rpki-client.org