Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/tljzl0fEsbaKzvgl4hhfzl_ZUz8.roa
File: tljzl0fEsbaKzvgl4hhfzl_ZUz8.roa (raw, json)
Hash identifier: agnxdVsogK07I4uyY9qt/q0/KVdivYy2RLHoz4wg+n4=
Subject key identifier: B6:58:F3:97:47:C4:B1:B6:8A:CE:F8:25:E2:18:5F:CE:5F:D9:53:3F
Certificate issuer: /CN=260b2bc45477c81d774daa0c28ab44b774ba0920
Certificate serial: 018CC26D0A38719B300889606A973F9EF7FE
Authority key identifier: 26:0B:2B:C4:54:77:C8:1D:77:4D:AA:0C:28:AB:44:B7:74:BA:09:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JgsrxFR3yB13TaoMKKtEt3S6CSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/tljzl0fEsbaKzvgl4hhfzl_ZUz8.roa
Signing time: Mon 01 Jan 2024 00:29:35 +0000
ROA not before: Mon 01 Jan 2024 00:29:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202656
IP address blocks: 45.128.128.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:0a:38:71:9b:30:08:89:60:6a:97:3f:9e:f7:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=260b2bc45477c81d774daa0c28ab44b774ba0920
Validity
Not Before: Jan 1 00:29:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b658f39747c4b1b68acef825e2185fce5fd9533f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:36:09:cf:2d:01:50:b4:d5:26:0d:9b:48:44:
60:1b:21:82:fb:04:4b:ce:86:76:62:5c:a8:fa:94:
0c:2f:1e:f4:4e:81:63:2e:42:76:21:c6:e3:33:8f:
2c:18:23:df:8f:9b:38:0e:e6:14:82:da:ba:20:10:
e8:87:a4:5f:6d:5e:29:4d:ef:48:ea:9c:b3:cc:44:
34:b9:83:c2:00:4d:0f:0b:ea:14:fa:6c:c0:b0:4f:
90:94:4d:dc:11:bf:66:1b:4b:52:41:c3:7b:16:c8:
91:39:fa:b9:ec:47:0c:63:3b:33:67:fc:1e:2a:eb:
a3:da:81:0c:90:32:95:da:d5:03:23:62:b1:1d:e9:
c7:12:a1:86:d9:a0:fc:c9:3a:8d:ec:64:3f:bf:5f:
be:c6:37:be:cd:5e:b6:7a:8f:14:19:5a:9a:15:c9:
12:27:8e:9a:06:7f:8d:70:ec:0c:88:02:36:80:14:
51:1c:0f:f2:85:c3:9d:c3:1d:ae:51:e5:a5:57:06:
30:03:85:59:91:e5:3f:ae:e9:34:96:cd:55:a2:d1:
36:73:55:07:d2:07:7d:6a:98:41:c9:8d:52:32:1c:
1e:3a:ec:e1:20:16:4c:cb:2c:5a:91:70:58:06:ad:
3c:4d:59:e5:b4:54:59:96:97:34:40:2f:e6:eb:a2:
1d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:58:F3:97:47:C4:B1:B6:8A:CE:F8:25:E2:18:5F:CE:5F:D9:53:3F
X509v3 Authority Key Identifier:
keyid:26:0B:2B:C4:54:77:C8:1D:77:4D:AA:0C:28:AB:44:B7:74:BA:09:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JgsrxFR3yB13TaoMKKtEt3S6CSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/tljzl0fEsbaKzvgl4hhfzl_ZUz8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/JgsrxFR3yB13TaoMKKtEt3S6CSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.128.0/24
Signature Algorithm: sha256WithRSAEncryption
51:14:19:23:b7:86:e5:0b:cd:db:f9:7e:2c:64:80:f3:19:8f:
15:83:f1:51:6c:b5:72:54:2e:3d:89:0f:b3:c9:f9:9e:3d:db:
9a:0d:1b:93:4b:66:7f:62:6d:10:a9:89:80:ed:fe:db:75:76:
fb:40:30:f9:a0:61:c3:cb:76:7d:d4:c5:ca:ea:e6:b2:bc:15:
65:1d:ba:6f:48:e9:f1:c1:2c:b5:1a:66:2f:5a:a8:f0:b3:65:
2b:39:9a:7c:88:f7:63:63:dc:e0:60:5f:84:fe:08:9e:62:75:
f5:88:ba:f1:d3:87:e3:96:15:84:c4:ab:8e:e1:59:ac:e7:20:
98:00:fe:29:ea:3b:ab:1f:d5:97:ed:60:f9:91:4d:fc:31:ad:
35:fe:f2:1c:f1:33:44:2b:98:45:65:46:a5:5d:c9:a0:39:b0:
54:32:e9:45:f6:73:10:68:bb:0c:67:4e:38:04:e2:c2:2a:08:
f1:99:55:cd:c0:f3:26:30:f5:19:ed:b5:d0:e1:5d:cd:0a:4e:
4d:4b:c0:2f:5f:be:6f:07:a2:2f:08:dc:cb:b0:ce:0f:56:7d:
13:32:6e:94:2d:a1:7f:43:4d:e7:a4:2e:3c:78:56:c1:81:89:
e3:5a:8c:a3:4f:e0:ec:ab:8d:be:9c:58:9f:c3:66:77:3c:72:
ed:0d:23:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:02 2024 by rpki-client on console-fra.rpki-client.org