Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/XY90sy-ohucBTpkcwcgIo88giQM.roa
File: XY90sy-ohucBTpkcwcgIo88giQM.roa (raw, json)
Hash identifier: BX9xpqJThZLL6oIkAu9Rdn3sRw8yt/xmaClmPzuY44c=
Subject key identifier: 5D:8F:74:B3:2F:A8:86:E7:01:4E:99:1C:C1:C8:08:A3:CF:20:89:03
Certificate issuer: /CN=260b2bc45477c81d774daa0c28ab44b774ba0920
Certificate serial: 0181F46C5B207327B7579DA6171D1B1223E7
Authority key identifier: 26:0B:2B:C4:54:77:C8:1D:77:4D:AA:0C:28:AB:44:B7:74:BA:09:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JgsrxFR3yB13TaoMKKtEt3S6CSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/XY90sy-ohucBTpkcwcgIo88giQM.roa
Signing time: Tue 12 Jul 2022 21:59:10 +0000
ROA not before: Tue 12 Jul 2022 21:59:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58061
IP address blocks: 45.11.213.0/24 maxlen: 24
31.40.250.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:f4:6c:5b:20:73:27:b7:57:9d:a6:17:1d:1b:12:23:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=260b2bc45477c81d774daa0c28ab44b774ba0920
Validity
Not Before: Jul 12 21:59:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5d8f74b32fa886e7014e991cc1c808a3cf208903
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:32:1d:05:64:fc:94:18:6b:bc:47:50:d1:a1:
1f:c0:97:c7:fb:7d:a5:40:b1:1d:3f:6a:ea:55:34:
71:35:c9:5e:5b:7f:37:e5:59:b8:17:e9:ab:21:55:
af:03:0c:fa:8e:9c:42:8f:6f:90:15:7b:18:7b:12:
fa:2b:eb:df:5f:bb:46:a0:7e:b5:20:c7:ac:3c:9b:
d1:a6:b4:90:a8:04:9a:6e:db:77:16:f0:5f:c4:eb:
00:39:e7:e5:fe:a2:f7:48:a4:db:12:65:7d:79:79:
12:85:c4:1e:b9:ae:51:2f:a7:4b:a5:d0:1c:8b:80:
1d:0f:22:22:c4:1a:b0:32:e0:95:54:cc:8e:d6:34:
2b:e8:2b:10:9a:49:d3:7e:8b:91:8c:88:b1:75:4e:
06:b4:6a:dd:e2:70:20:cd:b7:6e:84:ee:b4:c3:6a:
ce:a5:11:0c:3a:ce:52:8f:1c:7a:39:69:86:b5:f0:
18:f7:fd:1a:3a:73:9e:4d:bd:35:95:e8:8d:92:89:
88:83:7d:12:d5:4a:61:c0:77:a2:8f:78:95:5c:fa:
41:5c:e6:b3:9e:d8:42:0d:28:dc:d6:71:ca:e3:71:
a4:62:cd:85:51:67:ec:a3:d2:2d:31:4c:62:d5:41:
64:22:71:07:b3:bf:4d:68:51:a0:44:6c:ab:c5:bd:
35:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:8F:74:B3:2F:A8:86:E7:01:4E:99:1C:C1:C8:08:A3:CF:20:89:03
X509v3 Authority Key Identifier:
keyid:26:0B:2B:C4:54:77:C8:1D:77:4D:AA:0C:28:AB:44:B7:74:BA:09:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JgsrxFR3yB13TaoMKKtEt3S6CSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/XY90sy-ohucBTpkcwcgIo88giQM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/JgsrxFR3yB13TaoMKKtEt3S6CSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.250.0/24
45.11.213.0/24
Signature Algorithm: sha256WithRSAEncryption
32:c9:cc:01:fe:23:cb:c8:d4:be:8c:c2:7f:07:21:9f:80:43:
a1:59:55:8c:69:8f:94:15:94:8b:48:6a:0c:8d:ab:d7:ef:2d:
fd:c0:bd:d2:16:3c:47:13:f5:a8:73:fb:d2:9e:d1:f8:5b:c4:
f9:ad:48:15:e7:92:28:11:cd:8d:6d:e4:27:eb:8f:56:b4:71:
4a:18:07:52:be:ab:22:fc:f2:0e:7e:77:2c:bc:be:3e:87:6b:
f2:f8:98:98:87:d8:a6:08:96:f5:41:81:a0:d7:e3:44:08:80:
59:dd:30:82:15:c5:d7:00:e6:fd:da:07:af:ad:9d:34:9b:31:
f3:81:d6:e5:ed:52:8d:00:f3:1f:b3:96:01:f8:f0:c4:dc:18:
2c:c1:ba:2a:e9:c7:60:f8:5a:00:bc:4e:af:7c:5a:36:a2:f4:
5a:4c:c2:c0:d6:4d:33:c0:1a:d3:5d:2a:f1:76:38:fb:57:df:
3a:30:7f:de:f4:b9:95:57:db:1a:4f:98:5a:bb:ed:53:8a:05:
ec:ed:da:3b:de:02:6d:7e:1a:06:36:de:46:6a:bb:3e:42:24:
f9:ec:ca:05:d1:9f:7c:56:83:d5:b5:3c:1b:cc:41:70:03:12:
c6:80:0e:d9:e3:f2:4e:cf:65:b3:70:87:0f:97:f5:46:dd:ca:
d9:08:9a:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:02 2024 by rpki-client on console-fra.rpki-client.org