Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/ENox2XUhZVjqK-e7cTuUXeHkslk.roa
File: ENox2XUhZVjqK-e7cTuUXeHkslk.roa (raw, json)
Hash identifier: w853HUfAnbybcV9U5vr3EercDwV22n07X/Tr7XlIcuA=
Subject key identifier: 10:DA:31:D9:75:21:65:58:EA:2B:E7:BB:71:3B:94:5D:E1:E4:B2:59
Certificate issuer: /CN=e501815c6f98f3a2b6184afebf18ea341be882ea
Certificate serial: 0185729ED57DD0D767B6C153979DDEA86031
Authority key identifier: E5:01:81:5C:6F:98:F3:A2:B6:18:4A:FE:BF:18:EA:34:1B:E8:82:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5QGBXG-Y86K2GEr-vxjqNBvoguo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/ENox2XUhZVjqK-e7cTuUXeHkslk.roa
Signing time: Mon 02 Jan 2023 13:14:49 +0000
ROA not before: Mon 02 Jan 2023 13:14:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60721
IP address blocks: 87.251.3.0/24 maxlen: 24
87.251.6.0/24 maxlen: 24
87.251.30.0/24 maxlen: 24
87.251.31.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:9e:d5:7d:d0:d7:67:b6:c1:53:97:9d:de:a8:60:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e501815c6f98f3a2b6184afebf18ea341be882ea
Validity
Not Before: Jan 2 13:14:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=10da31d975216558ea2be7bb713b945de1e4b259
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:79:12:b7:25:eb:2b:54:c1:69:08:5c:23:91:
fa:55:bd:5e:e7:1a:46:87:5b:f9:2d:2c:65:fa:da:
e1:c8:12:7d:e7:e1:ed:7b:11:0e:01:38:00:b7:d0:
72:d8:82:c3:6e:4c:54:81:12:54:6f:1f:ab:c9:f5:
c4:20:2e:29:68:33:8d:34:02:dc:84:76:db:d0:e7:
2c:9d:c0:10:bc:07:34:78:a4:be:09:f4:67:17:5f:
c7:39:fe:0c:be:23:63:9a:89:e5:2d:c0:1c:aa:72:
c1:62:0a:3a:ac:f0:78:02:72:00:72:ae:96:2b:ab:
83:68:3e:35:be:8a:71:43:96:6e:76:aa:0d:93:c1:
1f:8d:17:33:09:f3:10:c4:07:ee:f3:b6:b6:72:f5:
24:cb:99:10:e6:36:2a:59:dc:85:e7:a7:08:fc:71:
7f:9d:d7:28:0e:48:fb:16:20:3d:89:0a:ee:73:9d:
3c:84:45:fc:7a:41:c5:d0:fa:64:e5:2e:68:6e:2e:
26:2e:1e:19:7f:47:38:5f:2d:f0:3b:bf:f6:9d:4a:
33:a0:c9:e9:62:fb:19:ac:e1:ed:c3:78:a8:65:fd:
12:9e:55:2e:bb:1d:53:14:69:55:92:3e:15:6d:8b:
ea:7f:1c:cd:0b:80:e9:4b:d3:32:db:0c:61:32:ee:
5e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:DA:31:D9:75:21:65:58:EA:2B:E7:BB:71:3B:94:5D:E1:E4:B2:59
X509v3 Authority Key Identifier:
keyid:E5:01:81:5C:6F:98:F3:A2:B6:18:4A:FE:BF:18:EA:34:1B:E8:82:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5QGBXG-Y86K2GEr-vxjqNBvoguo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/ENox2XUhZVjqK-e7cTuUXeHkslk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/5QGBXG-Y86K2GEr-vxjqNBvoguo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.251.3.0/24
87.251.6.0/24
87.251.30.0/23
Signature Algorithm: sha256WithRSAEncryption
13:56:5e:0e:02:f8:99:18:9a:da:8a:82:7c:32:22:db:aa:61:
7b:4e:b1:c4:5e:40:5a:3d:26:8f:db:2c:29:b1:db:9f:58:bb:
51:45:4f:8a:b2:a2:d7:67:c2:d4:4b:a0:26:6a:e3:c9:c3:12:
e9:fa:0f:81:a8:44:54:05:d8:b5:fb:12:80:7e:dd:e1:34:c1:
02:7b:33:7b:ce:94:67:27:7b:87:9b:68:fd:26:35:2f:ee:3f:
d1:fb:67:79:13:3f:27:82:fa:a5:d5:29:f0:64:23:db:a9:e7:
02:b7:6d:0b:c6:38:82:59:26:48:ec:3d:1f:2c:3f:6c:0f:b7:
b9:fc:9a:bc:41:00:0b:4a:63:9c:f6:64:02:08:db:dd:eb:dd:
30:fe:0e:4b:0a:8a:da:03:c4:2b:2f:18:85:71:af:67:6a:da:
51:d4:7f:fb:a3:83:51:a4:d1:06:9f:14:3f:66:ee:98:e6:30:
1a:6b:9e:45:6d:5d:94:e8:9a:82:1f:4b:e0:47:4d:6d:07:96:
71:ec:f5:b0:77:c1:fa:39:d7:9b:40:03:f3:dd:20:4b:e4:21:
d0:65:94:aa:6e:5f:84:35:12:53:22:f2:e7:7d:e0:3f:50:c9:
81:16:4c:65:b3:0e:90:a0:4a:a6:87:91:50:68:06:5d:96:7f:
33:b8:94:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 2 10:59:40 2023 by rpki-client on console-ams.rpki-client.org