Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/47f445-5ea9-437d-a59a-5900a5947b8d/1/ZL0UZ0Oe0BugISraLmdZMB9vo_Q.roa
File: ZL0UZ0Oe0BugISraLmdZMB9vo_Q.roa (raw, json)
Hash identifier: Mqht5v1aQSxRxnWiIWLDEK7zNA1xYxalV9L5efbFsmI=
Subject key identifier: 64:BD:14:67:43:9E:D0:1B:A0:21:2A:DA:2E:67:59:30:1F:6F:A3:F4
Certificate issuer: /CN=2864bb34fb5d16ca9d1fa3f9794cb48d4bed8473
Certificate serial: 055808EE
Authority key identifier: 28:64:BB:34:FB:5D:16:CA:9D:1F:A3:F9:79:4C:B4:8D:4B:ED:84:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KGS7NPtdFsqdH6P5eUy0jUvthHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/47f445-5ea9-437d-a59a-5900a5947b8d/1/ZL0UZ0Oe0BugISraLmdZMB9vo_Q.roa
Signing time: Sat 01 Jan 2022 15:05:24 +0000
ROA not before: Sat 01 Jan 2022 15:05:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212416
IP address blocks: 45.131.19.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89655534 (0x55808ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2864bb34fb5d16ca9d1fa3f9794cb48d4bed8473
Validity
Not Before: Jan 1 15:05:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=64bd1467439ed01ba0212ada2e6759301f6fa3f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:5b:03:48:42:68:ea:98:0b:ca:50:8b:71:4b:
b6:49:c0:bb:12:ee:13:0c:a8:55:94:60:71:ca:5d:
11:53:12:88:ed:25:75:94:61:c5:99:3b:98:5c:1d:
15:5a:58:a0:e5:cf:3a:12:82:c0:20:cb:ef:ed:4d:
8d:01:47:e2:61:e9:df:8e:24:3d:3c:f2:5c:cc:ab:
be:50:6d:02:59:38:e5:a1:ad:c9:bc:fa:5e:46:b5:
3c:99:ee:47:5b:63:65:05:78:7d:61:99:f1:51:a1:
67:e0:4f:1f:5d:4a:ab:05:af:cb:f8:b1:5d:0a:a0:
eb:e5:dd:22:23:99:40:a0:7f:68:fc:7b:d5:73:50:
87:43:a8:b8:3f:5f:44:28:0c:bc:52:96:cc:e5:2e:
c2:fa:1f:fb:7b:0f:74:c8:99:d2:38:42:a3:03:19:
6f:8e:0a:14:07:b4:91:96:36:d1:37:7e:ba:f0:dd:
89:fb:e8:c8:ab:6e:c0:36:2b:64:9d:f1:2e:07:de:
12:d9:ee:e7:7a:aa:57:41:ea:45:29:35:d0:12:ad:
80:ae:d5:e2:08:ef:dd:62:69:88:9a:24:8d:40:76:
88:c7:9c:5b:26:2f:3f:ae:8d:bf:07:ab:2b:55:6e:
70:ce:f8:de:23:72:9e:b8:f6:cd:e6:be:74:49:7c:
4d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:BD:14:67:43:9E:D0:1B:A0:21:2A:DA:2E:67:59:30:1F:6F:A3:F4
X509v3 Authority Key Identifier:
keyid:28:64:BB:34:FB:5D:16:CA:9D:1F:A3:F9:79:4C:B4:8D:4B:ED:84:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KGS7NPtdFsqdH6P5eUy0jUvthHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/47f445-5ea9-437d-a59a-5900a5947b8d/1/ZL0UZ0Oe0BugISraLmdZMB9vo_Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/47f445-5ea9-437d-a59a-5900a5947b8d/1/KGS7NPtdFsqdH6P5eUy0jUvthHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.19.0/24
Signature Algorithm: sha256WithRSAEncryption
34:73:13:f9:fe:8f:19:9b:4b:c5:aa:a1:2a:a1:e3:b4:d7:7a:
53:a8:2a:1b:54:23:10:54:5d:b9:e8:2a:32:ca:be:77:cc:82:
f3:bd:89:7c:98:59:d7:ff:3c:59:62:a6:84:65:69:f6:55:dd:
34:4e:fe:40:36:71:62:00:be:35:02:5e:c2:6a:92:56:17:cd:
fa:68:d4:c0:c1:d6:23:fb:b9:75:3d:04:06:68:fd:9d:b9:2a:
2f:9f:bb:56:6e:15:39:e5:96:38:ec:55:96:cc:e1:af:c9:f7:
48:5c:55:e0:dc:21:c7:5a:24:a1:ab:51:9f:56:10:ec:3a:51:
34:bb:33:56:82:ab:65:29:dc:f2:14:30:5f:44:37:83:df:5c:
b7:bb:7d:f3:2e:f9:14:b1:a4:20:26:65:ad:c2:31:74:02:7c:
94:47:7e:b5:8e:56:b0:ea:b3:16:3a:18:f7:a5:d0:3e:04:8e:
44:4b:b1:01:5f:7f:f7:43:61:e5:3c:79:88:a8:6b:a0:16:4f:
f8:5e:16:22:50:12:4a:91:2f:4c:40:b9:3a:6f:f9:8b:e1:46:
84:d9:0a:22:96:e3:93:3b:52:d5:e7:47:be:ec:9e:bf:9f:dd:
52:fd:71:ad:9f:15:ad:82:01:1d:6f:36:30:ce:da:a9:d9:20:
93:27:fa:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:02 2023 by rpki-client on console-ams.rpki-client.org