Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/52ELm8BccZCDVAMyw1AxCGTCekE.roa
File: 52ELm8BccZCDVAMyw1AxCGTCekE.roa (raw, json)
Hash identifier: Ji1htkbLemo+kkiTvdCKUeRCMug19WjBPY+BI4e1kiU=
Subject key identifier: E7:61:0B:9B:C0:5C:71:90:83:54:03:32:C3:50:31:08:64:C2:7A:41
Certificate issuer: /CN=260b2bc45477c81d774daa0c28ab44b774ba0920
Certificate serial: 01896498F1AC8DF7DDB516B99573611E286A
Authority key identifier: 26:0B:2B:C4:54:77:C8:1D:77:4D:AA:0C:28:AB:44:B7:74:BA:09:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JgsrxFR3yB13TaoMKKtEt3S6CSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/52ELm8BccZCDVAMyw1AxCGTCekE.roa
Signing time: Mon 17 Jul 2023 16:04:52 +0000
ROA not before: Mon 17 Jul 2023 16:04:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49505
IP address blocks: 45.128.129.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:64:98:f1:ac:8d:f7:dd:b5:16:b9:95:73:61:1e:28:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=260b2bc45477c81d774daa0c28ab44b774ba0920
Validity
Not Before: Jul 17 16:04:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e7610b9bc05c719083540332c350310864c27a41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:af:df:15:54:90:08:86:37:20:5b:c7:74:5b:
66:ae:ac:d0:18:86:3b:69:d4:70:63:6d:e1:e8:8f:
7c:a4:c1:c5:e8:36:97:85:fa:e0:8a:41:75:cf:d7:
ce:9a:54:b2:96:ff:9b:c5:19:72:18:2b:e4:fc:d9:
46:06:19:7e:fb:d4:0d:90:a5:ba:16:d7:47:a7:ae:
45:b4:ab:f7:55:46:93:58:87:68:37:9b:5d:65:d9:
c1:08:12:75:5a:f6:07:68:5f:10:8e:50:09:96:75:
07:f7:c6:a1:7b:46:1c:d2:87:c2:34:f8:61:3f:c7:
fb:df:d2:9b:b1:32:72:83:78:5f:cf:95:8d:69:e5:
54:ce:99:c3:37:e1:d9:88:13:44:2f:4f:a2:b6:3a:
29:53:2a:3d:f8:50:8c:12:04:87:76:98:f0:5a:fa:
39:b2:2a:6c:67:34:33:ee:3c:e9:ea:fc:e0:a8:01:
2f:18:78:82:b4:46:41:7f:fd:2f:eb:3f:7e:4f:86:
43:29:90:3c:f4:13:18:73:0e:6a:d5:10:01:6a:53:
2f:0d:0e:d7:b5:eb:6d:ab:bc:f1:c7:23:c6:bb:95:
24:2b:e6:0b:9c:83:db:df:5b:cb:0a:be:4d:f4:66:
9d:df:c4:6a:89:e9:18:a6:72:41:18:7d:b2:a9:0e:
50:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:61:0B:9B:C0:5C:71:90:83:54:03:32:C3:50:31:08:64:C2:7A:41
X509v3 Authority Key Identifier:
keyid:26:0B:2B:C4:54:77:C8:1D:77:4D:AA:0C:28:AB:44:B7:74:BA:09:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JgsrxFR3yB13TaoMKKtEt3S6CSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/52ELm8BccZCDVAMyw1AxCGTCekE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/JgsrxFR3yB13TaoMKKtEt3S6CSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.129.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:b6:19:63:de:3d:1e:30:64:e8:f7:c0:29:55:83:eb:af:87:
ae:36:cc:90:4d:13:91:00:2d:6a:de:92:f6:02:10:48:6d:b0:
19:65:59:11:a2:37:02:6b:64:36:e1:cb:bf:ec:1b:36:80:d2:
88:ab:bf:36:77:6d:96:f6:d3:ab:6b:79:cf:56:fa:c5:99:19:
64:bd:aa:2a:1a:8e:fc:16:69:05:ae:7b:d1:6d:9c:86:27:d8:
72:ce:ca:dd:5a:03:2f:07:3a:e5:af:a7:37:1d:ef:7f:cd:87:
0b:90:21:d1:75:92:69:d0:8b:41:25:ae:ed:b9:2a:eb:d0:1b:
65:29:de:a0:5d:56:2e:24:bb:17:00:89:64:c1:ac:3c:c1:1d:
3e:fb:b9:fe:48:e4:4b:e4:60:e7:42:5e:a5:e6:d8:01:ac:4e:
65:fb:a4:89:54:8d:de:b7:72:1d:e4:e0:25:da:9c:40:f6:2d:
e4:07:e0:d1:ea:c4:e4:8d:5b:86:88:9a:f3:38:cc:2c:4c:3e:
fe:e0:ec:47:65:3f:82:6c:e3:30:5c:2b:b4:35:92:f4:a0:a5:
11:80:d7:43:13:e3:f4:9f:36:04:22:2c:e1:a4:0d:35:db:69:
03:11:79:cc:69:ec:97:5e:fd:10:0d:e1:a8:75:b8:cb:e1:a6:
c4:c1:43:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:02 2024 by rpki-client on console-fra.rpki-client.org