Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/5Ovh2xbcTt6t0bRs-mGeaoFTa5g.roa
File: 5Ovh2xbcTt6t0bRs-mGeaoFTa5g.roa (raw, json)
Hash identifier: Ezitptms40AP7nVxUxIUvRkc6NdmSUqw4MjZXT1ZFFE=
Subject key identifier: E4:EB:E1:DB:16:DC:4E:DE:AD:D1:B4:6C:FA:61:9E:6A:81:53:6B:98
Certificate issuer: /CN=0c4579a4028829d37acac65f66c056063251e57e
Certificate serial: 018DFECC746488E94BB18ABFAC2C81DB416B
Authority key identifier: 0C:45:79:A4:02:88:29:D3:7A:CA:C6:5F:66:C0:56:06:32:51:E5:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DEV5pAKIKdN6ysZfZsBWBjJR5X4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/5Ovh2xbcTt6t0bRs-mGeaoFTa5g.roa
Signing time: Sat 02 Mar 2024 10:53:48 +0000
ROA not before: Sat 02 Mar 2024 10:53:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6424
IP address blocks: 82.215.71.0/24 maxlen: 24
2001:b18::/32 maxlen: 48
2001:b18:1031::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:fe:cc:74:64:88:e9:4b:b1:8a:bf:ac:2c:81:db:41:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c4579a4028829d37acac65f66c056063251e57e
Validity
Not Before: Mar 2 10:53:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e4ebe1db16dc4edeadd1b46cfa619e6a81536b98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d5:e3:04:f4:7d:36:4a:42:fb:06:ec:df:1b:
4d:eb:69:f8:b5:dc:79:b9:00:36:2d:cd:65:36:d5:
9d:33:95:02:fa:a7:2e:70:07:ff:74:2b:58:54:75:
2a:67:a2:91:0b:de:ae:19:d1:90:25:a2:71:74:0e:
f8:01:45:42:1e:b3:20:6b:90:9c:5f:4c:b2:41:88:
9b:ca:f5:50:48:65:18:4a:c1:84:31:99:c1:11:61:
e0:3a:6b:bf:74:6a:f9:70:35:4a:6a:81:af:ea:e1:
8f:da:32:76:07:08:fd:c2:2d:9f:9e:f7:36:3a:c5:
43:38:80:99:35:52:2e:9c:77:c8:59:bd:b1:7b:61:
2b:25:27:b5:70:8f:86:40:cc:d5:31:81:b6:a5:72:
c7:00:7f:d6:13:2f:e6:c2:df:af:5f:42:72:0f:a0:
34:a6:85:f8:59:5d:59:44:51:18:9a:5f:7b:52:01:
a5:c2:d1:3a:cc:65:e4:e8:99:0d:8e:51:6e:32:76:
69:ee:7a:0e:e5:7a:d7:77:1c:af:74:59:05:2f:16:
31:df:c7:e7:7f:e1:20:6d:12:07:33:61:f6:b7:13:
b5:e7:d5:37:52:6e:b0:5e:6f:7b:53:45:eb:47:81:
57:e8:80:65:00:fd:04:a3:cb:f5:39:f9:44:2d:99:
82:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:EB:E1:DB:16:DC:4E:DE:AD:D1:B4:6C:FA:61:9E:6A:81:53:6B:98
X509v3 Authority Key Identifier:
keyid:0C:45:79:A4:02:88:29:D3:7A:CA:C6:5F:66:C0:56:06:32:51:E5:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DEV5pAKIKdN6ysZfZsBWBjJR5X4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/5Ovh2xbcTt6t0bRs-mGeaoFTa5g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/DEV5pAKIKdN6ysZfZsBWBjJR5X4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.215.71.0/24
IPv6:
2001:b18::/32
Signature Algorithm: sha256WithRSAEncryption
21:40:0c:7a:97:50:5d:d2:ca:db:c1:51:42:7d:7d:9e:83:06:
f3:ee:9d:87:e2:f5:ae:86:e5:99:35:ad:9c:71:00:6d:9c:3a:
e2:48:4f:8d:6e:24:9b:36:58:b6:63:6c:45:d7:ef:5f:d1:67:
60:16:a3:71:26:64:6d:bf:5f:db:2f:fe:43:2d:87:68:d6:ed:
45:1b:77:39:36:7f:36:18:75:26:78:2b:94:57:0d:cc:46:cf:
8b:a4:cf:48:17:ad:bd:0a:62:c7:29:9d:b7:3e:70:a3:ef:02:
d1:56:fd:2d:b2:5b:7b:ce:4f:33:cf:08:37:fe:ad:48:51:eb:
b9:00:5b:cb:d5:5e:cd:5c:af:f0:a5:d4:49:e5:7f:50:53:b6:
0a:b4:7a:eb:71:36:7a:32:c1:03:f8:c1:a8:f6:51:3c:91:03:
ed:c7:5a:40:00:6c:c3:ec:2d:89:ab:d4:2b:a4:43:96:06:e0:
8a:12:a5:df:c5:bd:fd:18:78:23:0c:73:f0:46:8c:1c:15:16:
a0:56:21:d2:ae:55:f8:d7:b9:f5:a9:be:11:2c:f2:15:09:b2:
5e:91:ad:d5:79:e1:07:ab:62:5d:0c:01:6d:13:24:ea:c6:ec:
ea:a4:cb:68:1d:6e:79:46:b5:d7:11:1f:8e:f8:5d:45:13:73:
ed:ae:cc:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:20:20 2025 by rpki-client