Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i5rIkJaWhdbpyFDH3nvHLAUgYrA.roa
File: i5rIkJaWhdbpyFDH3nvHLAUgYrA.roa (raw, json)
Hash identifier: GEvTMPN6atMXFFmj4ZT/PMbVnZRsDcUZ9GRRjeRrVN4=
Subject key identifier: 8B:9A:C8:90:96:96:85:D6:E9:C8:50:C7:DE:7B:C7:2C:05:20:62:B0
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 1578F942
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i5rIkJaWhdbpyFDH3nvHLAUgYrA.roa
Signing time: Wed 22 Jun 2022 10:43:33 +0000
ROA not before: Wed 22 Jun 2022 10:43:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 19120
IP address blocks: 5.180.4.0/22 maxlen: 22
45.145.40.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 360249666 (0x1578f942)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Jun 22 10:43:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8b9ac890969685d6e9c850c7de7bc72c052062b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:34:b3:37:0d:10:d5:20:b0:63:e6:05:c2:66:
67:0c:8a:19:5f:65:c4:37:eb:b3:a3:04:2e:22:4e:
86:91:13:25:5a:ba:d7:93:56:60:81:3e:bf:c2:76:
e0:16:8d:45:a2:ee:1f:8c:17:d7:b6:a3:cd:f9:58:
78:99:ad:9a:4f:e6:6e:5c:c4:ab:e7:86:00:f2:9f:
91:0d:11:22:91:c5:68:da:b9:3c:82:7c:be:73:cb:
4a:ab:c5:78:cd:ac:85:19:ec:b0:f7:4e:b8:83:3e:
06:b7:73:3c:48:fc:12:84:0a:1c:cf:77:fe:07:40:
4d:20:26:a9:1a:63:f8:f5:0e:8f:02:fc:32:e3:dc:
db:db:9a:5c:93:02:54:78:60:28:55:da:17:51:11:
55:35:87:5a:0d:87:a2:81:f5:a9:62:2a:9c:b0:ef:
eb:35:2f:cc:47:cd:a4:96:d1:36:f2:c6:65:c1:a9:
c2:dd:48:ed:a4:49:64:ea:fa:1d:f1:68:22:f0:19:
61:4a:73:fc:d6:59:e2:b6:22:66:88:0f:36:c0:2c:
aa:eb:8d:fd:be:39:3a:7e:74:a5:fa:0f:71:6a:72:
f9:f9:22:da:10:bf:51:31:36:78:a3:e6:2c:25:54:
5c:a4:db:17:7f:47:35:1f:a9:a5:f9:66:86:2f:11:
7a:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:9A:C8:90:96:96:85:D6:E9:C8:50:C7:DE:7B:C7:2C:05:20:62:B0
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i5rIkJaWhdbpyFDH3nvHLAUgYrA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.4.0/22
45.145.40.0/22
Signature Algorithm: sha256WithRSAEncryption
31:94:be:e9:85:50:48:47:55:61:7e:ae:07:69:8e:58:57:92:
9b:3e:9e:51:9b:c9:1f:72:ec:49:3c:c4:16:cf:2b:e6:63:31:
38:0f:38:ea:df:51:51:93:ff:4b:95:2c:1c:d5:70:98:bf:53:
95:4f:83:aa:d0:f5:a2:15:a2:fe:42:21:11:62:4c:f1:e9:db:
f9:cf:8a:0c:c8:e4:f3:5e:87:3b:51:bc:5d:5c:8a:b5:35:d8:
bb:76:fb:96:ec:d9:96:61:c9:ce:e9:1b:44:8a:3c:ea:fc:d3:
0a:c1:05:4e:1e:1f:6c:0e:1a:fc:38:24:dd:22:62:19:80:39:
18:fb:87:81:d9:00:ca:1c:9e:9c:c9:2d:1f:6b:57:70:ed:df:
b8:a2:fd:07:95:ec:7e:37:c1:a8:66:3c:9e:51:62:91:e8:06:
9e:54:0b:77:82:4d:e3:ec:37:7c:81:dc:a1:00:43:8f:46:d5:
93:a0:ae:d0:9e:3c:f5:33:73:d1:ac:9b:f3:f5:1d:af:76:96:
00:1c:c3:a8:ef:c5:84:dc:5a:55:53:1d:ac:3f:0e:42:ac:33:
52:31:3a:17:f5:09:79:70:83:36:dd:78:ec:2c:10:2b:0c:d7:
b3:a4:b9:3d:c7:af:69:d8:c5:7b:ac:77:9d:91:0f:7c:77:d3:
7a:15:c1:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:41 2024 by rpki-client on console-fra.rpki-client.org