Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/59a3aa-4eae-44e7-acc1-6f16834bc847/1/_bY8Z-Va1O-dW1xRt1qUHRYwEkY.roa
File: _bY8Z-Va1O-dW1xRt1qUHRYwEkY.roa (raw, json)
Hash identifier: ikae6b+Y4u5c2pViHmHiLW5r64DYR9IMCmCtzxbAZoo=
Subject key identifier: FD:B6:3C:67:E5:5A:D4:EF:9D:5B:5C:51:B7:5A:94:1D:16:30:12:46
Certificate issuer: /CN=7803558ea6e5165b3876097af75bf1e92a142cf2
Certificate serial: 018D2D6E2CBB5C191F3E76F87DB96166C1D1
Authority key identifier: 78:03:55:8E:A6:E5:16:5B:38:76:09:7A:F7:5B:F1:E9:2A:14:2C:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eANVjqblFls4dgl691vx6SoULPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/59a3aa-4eae-44e7-acc1-6f16834bc847/1/_bY8Z-Va1O-dW1xRt1qUHRYwEkY.roa
Signing time: Sun 21 Jan 2024 19:10:11 +0000
ROA not before: Sun 21 Jan 2024 19:10:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212667
IP address blocks: 5.182.116.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:2d:6e:2c:bb:5c:19:1f:3e:76:f8:7d:b9:61:66:c1:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7803558ea6e5165b3876097af75bf1e92a142cf2
Validity
Not Before: Jan 21 19:10:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fdb63c67e55ad4ef9d5b5c51b75a941d16301246
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:12:53:b4:9a:90:70:3d:73:5f:63:7f:eb:c2:
fb:2f:b2:63:62:9f:74:f0:6f:e9:6b:4f:15:c5:87:
f2:65:ac:18:da:ce:82:aa:79:fc:59:f4:39:f0:44:
27:b5:72:95:d8:d6:77:16:80:11:58:65:28:87:61:
bf:b9:a0:1c:e0:9a:62:d4:f3:0a:cc:4f:3f:e1:76:
85:42:6b:30:87:c7:14:d4:40:15:4c:96:4e:70:ad:
f5:9e:d9:52:a1:61:37:5d:b5:89:65:83:9a:0b:09:
13:d6:e3:7c:7d:52:be:92:6e:f5:cb:06:3f:cc:ea:
bc:12:dd:61:4e:e2:d4:17:6c:31:8f:8c:59:9a:ef:
bf:4a:55:b5:8a:0b:f5:ba:ba:57:fb:60:27:8d:4a:
72:4a:5d:70:fe:3f:58:5a:52:51:1f:42:5e:78:e0:
4f:ac:ee:7e:d4:a4:0c:35:07:b0:ef:91:1a:bb:20:
fa:47:f6:f0:4c:35:b6:40:47:53:48:cf:d1:89:e1:
e6:58:57:a2:d7:6c:d9:01:fc:88:9f:20:4c:b5:e7:
ba:c9:f0:91:09:30:b7:ef:f6:aa:f6:ae:d1:71:f4:
cc:e7:f4:63:70:4b:15:9a:df:7b:67:dd:a8:c4:e6:
1e:a3:e1:61:bd:bf:f2:c6:f2:66:00:07:a6:88:b2:
87:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:B6:3C:67:E5:5A:D4:EF:9D:5B:5C:51:B7:5A:94:1D:16:30:12:46
X509v3 Authority Key Identifier:
keyid:78:03:55:8E:A6:E5:16:5B:38:76:09:7A:F7:5B:F1:E9:2A:14:2C:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eANVjqblFls4dgl691vx6SoULPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/59a3aa-4eae-44e7-acc1-6f16834bc847/1/_bY8Z-Va1O-dW1xRt1qUHRYwEkY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/59a3aa-4eae-44e7-acc1-6f16834bc847/1/eANVjqblFls4dgl691vx6SoULPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.116.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:47:b0:4b:43:9a:00:e0:31:9f:4b:f4:21:83:07:d6:96:f6:
c7:91:1b:45:c7:62:d9:2b:4a:78:ff:25:c1:c5:d2:dd:f6:62:
ce:8d:3a:5a:32:11:2c:8a:a7:1c:0d:8e:40:af:46:dd:a8:e5:
ae:31:40:b4:17:1d:b5:c0:14:e6:70:c7:fc:28:74:9f:4b:ab:
69:42:f9:00:65:4f:37:aa:b5:fd:69:af:d3:64:11:e4:3e:48:
b1:87:24:0e:2f:39:3b:80:11:6a:33:ef:0e:bb:8b:7c:11:55:
bc:26:5a:de:76:cd:cd:6c:f6:3d:54:03:0b:ac:ae:e4:e4:b9:
2d:ce:99:40:5b:e0:02:fd:f4:77:08:84:fc:45:95:81:cb:71:
8e:91:0d:49:8b:e8:c9:38:73:5e:4a:7a:cc:24:6f:a7:57:48:
9e:80:c6:9c:74:a5:e5:0a:5f:e1:43:d5:9c:ad:f3:79:ec:5a:
15:b7:7d:c8:e0:7a:94:5a:21:8c:e9:8e:15:28:93:c7:9f:b3:
6d:bd:4f:6f:ce:e1:3f:35:8e:c2:27:d7:60:88:dc:71:90:d2:
09:6b:d6:a9:e4:c0:95:38:89:a7:68:bb:36:b3:cc:e0:e2:24:
b5:df:4e:c5:79:e9:6b:38:e2:47:4a:63:37:a1:3a:4e:99:38:
8a:d2:b0:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:05:13 2024 by rpki-client on console-ams.rpki-client.org