Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/be0715-3bb2-44f4-bbf6-240698fbddff/1/06Dxujy3mjKpuIn155KKJja1G0o.roa
File: 06Dxujy3mjKpuIn155KKJja1G0o.roa (raw, json)
Hash identifier: G99swSXxLmndpeH74XXbabjWC6+kMSWuDPZ/a7+xQA0=
Subject key identifier: D3:A0:F1:BA:3C:B7:9A:32:A9:B8:89:F5:E7:92:8A:26:36:B5:1B:4A
Certificate issuer: /CN=5ac3e2bdb63296d5f0f3afe95bd1545117a5b149
Certificate serial: 018CC64B31A86290761A551627A0ECF952D9
Authority key identifier: 5A:C3:E2:BD:B6:32:96:D5:F0:F3:AF:E9:5B:D1:54:51:17:A5:B1:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WsPivbYyltXw86_pW9FUURelsUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/be0715-3bb2-44f4-bbf6-240698fbddff/1/06Dxujy3mjKpuIn155KKJja1G0o.roa
Signing time: Mon 01 Jan 2024 18:31:05 +0000
ROA not before: Mon 01 Jan 2024 18:31:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5400
IP address blocks: 192.109.52.0/24 maxlen: 24
2a0c:8480::/30 maxlen: 30
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:31:a8:62:90:76:1a:55:16:27:a0:ec:f9:52:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ac3e2bdb63296d5f0f3afe95bd1545117a5b149
Validity
Not Before: Jan 1 18:31:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d3a0f1ba3cb79a32a9b889f5e7928a2636b51b4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d6:d6:28:91:2f:09:58:f8:f1:7f:96:88:2c:
08:c0:ce:7a:d1:96:ab:b6:c3:7a:54:6f:c5:4e:d6:
fb:76:5d:fc:11:46:3b:96:5e:fb:ff:fd:04:10:6d:
98:04:e3:e8:59:bd:bf:5f:d3:b3:34:5c:13:fa:19:
53:da:22:80:e7:32:63:dc:dd:8b:11:1b:31:ef:c5:
22:5f:fd:14:37:ad:06:68:dd:03:a6:9e:fd:74:6d:
b8:80:fa:d5:00:59:d6:39:d1:e0:97:12:6b:0d:38:
da:14:55:ad:cc:3b:fc:3f:9f:4f:d3:07:83:03:03:
b3:a2:b9:83:f2:0c:5b:90:5a:43:f5:74:d7:0c:29:
d5:9e:47:f4:51:76:82:3b:4a:49:0d:34:72:b3:9e:
82:66:6a:b9:f3:e5:09:03:34:a5:27:5f:13:23:45:
c0:76:c5:0b:ce:e9:a1:cf:67:8f:e1:d6:90:f6:58:
06:e3:30:63:ce:e3:fa:24:21:dc:cf:ec:39:2a:a3:
48:38:e5:f2:89:b4:64:35:43:70:51:38:ca:4e:c3:
f9:97:e7:35:97:5f:0f:52:08:7a:ca:50:3a:d6:5a:
9a:41:5c:10:41:10:1a:07:2d:22:1e:d0:29:f4:e1:
c5:65:54:84:29:39:69:4c:61:b1:30:e9:2a:40:5a:
18:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:A0:F1:BA:3C:B7:9A:32:A9:B8:89:F5:E7:92:8A:26:36:B5:1B:4A
X509v3 Authority Key Identifier:
keyid:5A:C3:E2:BD:B6:32:96:D5:F0:F3:AF:E9:5B:D1:54:51:17:A5:B1:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WsPivbYyltXw86_pW9FUURelsUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/be0715-3bb2-44f4-bbf6-240698fbddff/1/06Dxujy3mjKpuIn155KKJja1G0o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/be0715-3bb2-44f4-bbf6-240698fbddff/1/WsPivbYyltXw86_pW9FUURelsUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.109.52.0/24
IPv6:
2a0c:8480::/30
Signature Algorithm: sha256WithRSAEncryption
5f:28:9d:b1:17:91:18:cd:56:98:d2:68:94:a5:25:d8:71:f5:
a6:86:49:6e:d5:38:90:13:15:26:e2:4b:40:70:93:91:e8:71:
bc:d3:3a:70:eb:93:59:87:47:f9:53:63:3a:a4:12:65:af:d6:
d7:77:a2:e4:15:61:d9:83:82:31:3b:b7:dd:f4:81:83:cb:4e:
cd:95:1c:01:6d:30:83:d2:72:ef:28:1f:b3:c2:a6:27:8e:93:
cf:e4:ed:9a:54:77:28:9c:f2:c6:81:a1:eb:19:a1:7e:50:2c:
61:0b:7c:7e:d6:c3:de:7e:a9:87:77:85:fa:bd:e2:23:d8:fc:
85:81:af:74:34:02:a1:e1:17:ea:c4:59:e5:35:1b:17:d2:fb:
0d:fa:d6:20:52:6e:d5:91:cd:ca:d0:93:1a:7f:0c:5a:30:ab:
76:b9:0c:00:30:22:c5:5d:32:93:fd:37:f9:ed:91:6d:a2:8c:
91:5d:bb:3f:74:20:d3:a9:d7:0d:c0:69:e0:d1:5c:1a:d6:4c:
45:2f:a1:66:31:34:74:8d:02:c3:37:56:a2:56:27:d1:29:fc:
cf:0b:59:c7:c8:f4:4b:13:b2:15:cb:2b:b4:1e:e5:b2:57:55:
b4:6a:5b:80:c0:1f:09:c6:a1:66:5f:29:b2:f1:54:42:59:a6:
fb:46:4d:33
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYzGSzGoYpB2GlUWJ6Ds+VLZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhYzNlMmJkYjYzMjk2ZDVmMGYzYWZlOTViZDE1NDUxMTdh
NWIxNDkwHhcNMjQwMTAxMTgzMTA1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkM2EwZjFiYTNjYjc5YTMyYTliODg5ZjVlNzkyOGEyNjM2YjUxYjRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9bWKJEvCVj48X+WiCwIwM560Zar
tsN6VG/FTtb7dl38EUY7ll77//0EEG2YBOPoWb2/X9OzNFwT+hlT2iKA5zJj3N2L
ERsx78UiX/0UN60GaN0Dpp79dG24gPrVAFnWOdHglxJrDTjaFFWtzDv8P59P0weD
AwOzormD8gxbkFpD9XTXDCnVnkf0UXaCO0pJDTRys56CZmq58+UJAzSlJ18TI0XA
dsULzumhz2eP4daQ9lgG4zBjzuP6JCHcz+w5KqNIOOXyibRkNUNwUTjKTsP5l+c1
l18PUgh6ylA61lqaQVwQQRAaBy0iHtAp9OHFZVSEKTlpTGGxMOkqQFoYgwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFNOg8bo8t5oyqbiJ9eeSiiY2tRtKMB8GA1UdIwQY
MBaAFFrD4r22MpbV8POv6VvRVFEXpbFJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3NQaXZiWXlsdFh3ODZfcFc5RlVVUmVsc1VrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9iZTA3MTUtM2JiMi00NGY0LWJiZjYt
MjQwNjk4ZmJkZGZmLzEvMDZEeHVqeTNtaktwdUluMTU1S0tKamExRzBvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy9iZTA3MTUtM2JiMi00NGY0LWJiZjYtMjQwNjk4ZmJkZGZm
LzEvV3NQaXZiWXlsdFh3ODZfcFc5RlVVUmVsc1VrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAwG00MA0E
AgACMAcDBQIqDISAMA0GCSqGSIb3DQEBCwUAA4IBAQBfKJ2xF5EYzVaY0miUpSXY
cfWmhklu1TiQExUm4ktAcJOR6HG80zpw65NZh0f5U2M6pBJlr9bXd6LkFWHZg4Ix
O7fd9IGDy07NlRwBbTCD0nLvKB+zwqYnjpPP5O2aVHconPLGgaHrGaF+UCxhC3x+
1sPefqmHd4X6veIj2PyFga90NAKh4RfqxFnlNRsX0vsN+tYgUm7Vkc3K0JMafwxa
MKt2uQwAMCLFXTKT/Tf57ZFtooyRXbs/dCDTqdcNwGng0Vwa1kxFL6FmMTR0jQLD
N1aiVifRKfzPC1nHyPRLE7IVyyu0HuWyV1W0aluAwB8JxqFmXymy8VRCWab7Rk0z
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:59:12 2024 by rpki-client on console-ams.rpki-client.org