Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/becd16-a9e9-4cd6-800e-f008dd83e32a/1/RKi0LNxAohp0nRbpnYIBJVigPjw.roa
File: RKi0LNxAohp0nRbpnYIBJVigPjw.roa (raw, json)
Hash identifier: YTs9K2zN6jl0iTuS+vqFSWSAxuRaffZ+CCK9KaVW4uI=
Subject key identifier: 44:A8:B4:2C:DC:40:A2:1A:74:9D:16:E9:9D:82:01:25:58:A0:3E:3C
Certificate issuer: /CN=e9be181aabdb195513a26c67b621e2986818d03d
Certificate serial: 018D2D6E2CFACC3B20C757ECA5F752692E57
Authority key identifier: E9:BE:18:1A:AB:DB:19:55:13:A2:6C:67:B6:21:E2:98:68:18:D0:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6b4YGqvbGVUTomxntiHimGgY0D0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/becd16-a9e9-4cd6-800e-f008dd83e32a/1/RKi0LNxAohp0nRbpnYIBJVigPjw.roa
Signing time: Sun 21 Jan 2024 19:10:11 +0000
ROA not before: Sun 21 Jan 2024 19:10:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212667
IP address blocks: 45.15.255.0/24 maxlen: 24
194.34.250.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:2d:6e:2c:fa:cc:3b:20:c7:57:ec:a5:f7:52:69:2e:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9be181aabdb195513a26c67b621e2986818d03d
Validity
Not Before: Jan 21 19:10:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=44a8b42cdc40a21a749d16e99d82012558a03e3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:de:89:83:8d:d7:aa:25:0f:f0:49:30:24:a1:
65:33:98:70:20:62:12:e4:b8:f1:d5:9f:94:7e:47:
62:42:12:f3:6e:34:a6:5e:bd:f1:94:8b:f7:86:0c:
61:f6:ee:f8:6c:1d:7f:b9:f9:d6:4e:0b:f4:c6:91:
c4:d4:8a:dc:ac:9e:86:37:48:9d:a9:25:18:90:01:
cf:ca:00:ee:31:c0:86:65:cc:cd:80:ed:e7:88:3d:
4f:39:25:a4:ac:bb:9e:a8:97:d4:76:bf:32:30:3a:
f6:d4:fd:a8:24:16:ea:36:b0:38:1b:b3:9e:89:3e:
af:e3:cb:e6:ab:08:2f:50:67:33:00:45:3b:5e:f4:
3b:52:37:33:2a:de:60:76:c9:f5:39:ed:5a:be:ca:
29:62:3e:1f:65:5c:8e:f7:aa:58:fc:0f:e8:6d:69:
36:e6:65:04:77:99:4a:12:e6:2d:c2:5a:2a:f0:33:
98:19:ce:b1:de:93:c4:46:a1:b4:cd:d3:dd:e3:e4:
f6:15:12:fc:ea:47:10:bd:77:cd:0d:f4:e7:7d:dd:
7e:5d:71:1f:7f:16:e6:bf:8f:1e:9a:30:7f:00:8e:
db:28:b1:b3:4d:f1:68:06:5c:fb:e7:a8:ab:eb:a2:
41:46:bb:79:21:9a:43:9d:18:c7:26:6b:91:67:c6:
9b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:A8:B4:2C:DC:40:A2:1A:74:9D:16:E9:9D:82:01:25:58:A0:3E:3C
X509v3 Authority Key Identifier:
keyid:E9:BE:18:1A:AB:DB:19:55:13:A2:6C:67:B6:21:E2:98:68:18:D0:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b4YGqvbGVUTomxntiHimGgY0D0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/becd16-a9e9-4cd6-800e-f008dd83e32a/1/RKi0LNxAohp0nRbpnYIBJVigPjw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/becd16-a9e9-4cd6-800e-f008dd83e32a/1/6b4YGqvbGVUTomxntiHimGgY0D0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.255.0/24
194.34.250.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:28:7a:0a:df:4e:f3:c4:eb:0c:da:34:cf:2b:56:6c:da:1f:
1a:cf:dd:40:1c:55:f8:70:03:f2:54:d1:e6:ce:7b:eb:42:63:
c8:38:95:e3:8e:89:64:1f:b3:ec:60:72:b1:43:ab:b2:6d:4b:
91:c0:d1:51:81:4c:b9:8a:d3:6b:84:c1:0b:8e:d5:16:8a:34:
76:29:84:73:28:f9:17:5d:0e:ca:76:0d:36:03:ed:56:96:0d:
04:be:f4:72:e3:a2:d6:09:5f:02:b8:27:77:bb:40:0c:59:91:
3b:71:f7:b5:fb:39:97:8b:3f:41:06:81:76:cb:5d:99:f8:83:
c9:80:64:29:7a:0b:a1:05:33:eb:78:5b:af:9b:49:0f:7f:ee:
4a:c4:8e:a2:e3:c7:82:fc:b7:5e:cb:4b:a2:1c:e7:51:3b:32:
ff:b8:d2:5b:af:c2:78:6e:34:cb:28:31:4f:36:6d:f9:34:3e:
fd:cf:ee:06:85:0c:7f:2f:50:ee:d8:32:49:c2:2b:ab:6c:9c:
d6:67:53:8f:94:41:ae:c0:96:26:b3:97:00:f3:c1:de:a3:00:
0f:83:93:d8:cc:8c:f6:ac:b8:55:d0:a0:7b:cd:1a:8c:ba:46:
b4:fb:21:b9:2a:a8:18:4a:c9:48:23:dd:05:e6:ce:c9:73:5e:
a1:dc:3b:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 9 21:18:00 2024 by rpki-client on console-fra.rpki-client.org