Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/becd16-a9e9-4cd6-800e-f008dd83e32a/1/beWx_gvJiq4RhEa4eC1POYQB3pw.roa
File: beWx_gvJiq4RhEa4eC1POYQB3pw.roa (raw, json)
Hash identifier: VzTEsc6lhbMkC/rrtyQiQD5SBmzXiXOVkHRy7nqcWGY=
Subject key identifier: 6D:E5:B1:FE:0B:C9:8A:AE:11:84:46:B8:78:2D:4F:39:84:01:DE:9C
Certificate issuer: /CN=e9be181aabdb195513a26c67b621e2986818d03d
Certificate serial: 018D1CB441578502258DFA6BEF1A2004F697
Authority key identifier: E9:BE:18:1A:AB:DB:19:55:13:A2:6C:67:B6:21:E2:98:68:18:D0:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6b4YGqvbGVUTomxntiHimGgY0D0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/becd16-a9e9-4cd6-800e-f008dd83e32a/1/beWx_gvJiq4RhEa4eC1POYQB3pw.roa
Signing time: Thu 18 Jan 2024 13:13:11 +0000
ROA not before: Thu 18 Jan 2024 13:13:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58061
IP address blocks: 45.15.252.0/24 maxlen: 24
194.34.251.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:1c:b4:41:57:85:02:25:8d:fa:6b:ef:1a:20:04:f6:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9be181aabdb195513a26c67b621e2986818d03d
Validity
Not Before: Jan 18 13:13:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6de5b1fe0bc98aae118446b8782d4f398401de9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:a0:52:0a:79:c6:c7:d1:24:94:1b:e5:cb:a5:
03:2c:4d:38:c9:a3:74:8d:a4:8a:45:7b:31:cf:75:
eb:4d:cc:90:f5:3f:0d:5f:bc:7e:76:d2:a1:40:35:
95:f1:bb:8d:26:89:8d:e0:2d:fb:41:e6:ad:13:30:
78:4b:30:0e:4b:cc:18:02:6d:0f:a4:77:b2:6d:2b:
06:bb:bd:97:0f:20:4f:c9:35:92:8d:36:c1:0a:b7:
39:92:d6:d5:53:72:49:7e:0b:68:b1:b8:d5:d1:a5:
39:12:21:b6:81:43:96:65:6c:c1:b8:54:04:6d:10:
f2:19:48:c4:90:34:7e:53:4b:71:3a:e7:99:85:85:
e1:4b:bf:ac:b2:d1:13:f3:dd:5a:b5:2b:7c:ff:27:
1b:b0:4c:e5:35:ce:21:cf:fb:e3:b9:ac:73:33:06:
8f:68:2e:42:88:a3:e2:c6:74:53:b9:dd:a5:b7:81:
ee:a2:6b:f3:11:05:89:34:03:91:87:ae:ac:fb:58:
7b:d8:01:b4:b6:ba:cb:29:bd:ce:80:d7:64:81:2d:
73:4a:7a:fd:2f:e3:fa:78:eb:83:4b:b1:19:a3:81:
ae:ff:d9:39:80:ef:ad:da:5f:f9:13:fe:3b:e1:26:
bc:5d:a7:86:68:8c:82:7e:4d:c8:0c:ca:85:8b:5f:
7d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:E5:B1:FE:0B:C9:8A:AE:11:84:46:B8:78:2D:4F:39:84:01:DE:9C
X509v3 Authority Key Identifier:
keyid:E9:BE:18:1A:AB:DB:19:55:13:A2:6C:67:B6:21:E2:98:68:18:D0:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b4YGqvbGVUTomxntiHimGgY0D0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/becd16-a9e9-4cd6-800e-f008dd83e32a/1/beWx_gvJiq4RhEa4eC1POYQB3pw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/becd16-a9e9-4cd6-800e-f008dd83e32a/1/6b4YGqvbGVUTomxntiHimGgY0D0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.252.0/24
194.34.251.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:d5:3b:da:94:0b:58:d0:21:87:ae:10:87:b2:ae:ec:25:36:
0c:12:59:50:90:9a:27:fd:e0:7e:75:37:55:cb:e3:b6:3a:d0:
9f:6e:20:03:8e:32:3f:20:47:e4:2f:3c:2f:41:96:5d:d0:90:
a5:34:9b:b5:53:ee:0d:35:6c:b8:f5:fa:0e:87:81:6d:9f:59:
05:60:c4:ad:c1:81:c2:0c:e2:1d:26:3a:95:5c:73:29:86:86:
8f:50:f1:12:96:62:38:e4:39:fc:43:f2:f3:1d:fd:e8:2d:28:
9c:55:88:b4:81:60:ff:a5:8d:3a:7c:0d:f2:96:66:b9:e3:d6:
c9:3d:68:2b:61:99:b2:31:91:50:02:27:07:e1:15:72:76:ca:
b3:8a:ef:f9:a8:eb:60:63:a6:49:44:a9:4c:54:9e:d2:2d:cd:
94:96:36:67:c1:d7:bf:96:72:df:ae:94:98:49:80:9b:f5:af:
ef:f8:d7:78:25:de:8b:12:53:88:99:ea:b5:01:9f:f8:eb:dd:
9d:c1:ca:3e:8d:da:b7:c8:93:9c:83:6b:0b:8b:ce:73:51:23:
0f:ad:84:2f:65:86:af:52:3f:ab:d1:03:2b:22:0e:c8:25:2f:
53:f8:ae:b8:68:2b:b2:1e:d9:b0:d2:48:0e:2f:3d:29:c5:46:
4e:b5:b1:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 9 21:14:25 2024 by rpki-client on console-ams.rpki-client.org