Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/41f6f5-cef0-4a57-8e47-0a85986208a9/1/XIDmp3DK2rlvhsJDvtK92RXr1a8.roa
File: XIDmp3DK2rlvhsJDvtK92RXr1a8.roa (raw, json)
Hash identifier: cFR2ii96/JN70w4hb/kvRbo/fcEQ5zPG25wc6e3mbdc=
Subject key identifier: 5C:80:E6:A7:70:CA:DA:B9:6F:86:C2:43:BE:D2:BD:D9:15:EB:D5:AF
Certificate issuer: /CN=5f51bcd89eb7f5b3ab08806ef51a7c2f6eb98efc
Certificate serial: 018CC801C5CCB344FBD3EC325B244E2A9BBA
Authority key identifier: 5F:51:BC:D8:9E:B7:F5:B3:AB:08:80:6E:F5:1A:7C:2F:6E:B9:8E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X1G82J639bOrCIBu9Rp8L265jvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/41f6f5-cef0-4a57-8e47-0a85986208a9/1/XIDmp3DK2rlvhsJDvtK92RXr1a8.roa
Signing time: Tue 02 Jan 2024 02:30:08 +0000
ROA not before: Tue 02 Jan 2024 02:30:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48359
IP address blocks: 109.95.62.0/24 maxlen: 24
109.95.61.0/24 maxlen: 24
109.95.63.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:c5:cc:b3:44:fb:d3:ec:32:5b:24:4e:2a:9b:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f51bcd89eb7f5b3ab08806ef51a7c2f6eb98efc
Validity
Not Before: Jan 2 02:30:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5c80e6a770cadab96f86c243bed2bdd915ebd5af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:94:7a:35:da:aa:76:69:77:7b:40:11:5c:b6:
56:c8:46:bf:40:6e:90:be:22:13:f3:d8:22:03:19:
5a:54:ef:6c:bc:a0:1c:37:60:74:e0:61:4e:72:fb:
99:98:eb:20:9f:ac:21:09:b0:8e:52:e1:52:1c:4b:
0e:85:0a:cd:81:7d:3a:49:37:1f:df:f2:db:b2:f3:
e9:b6:13:80:d2:5f:cf:f8:c2:d4:16:4d:91:5b:cd:
64:bb:7f:6f:90:c5:8e:6a:de:31:e1:3d:d6:69:58:
d7:4c:e7:94:ea:4e:e4:50:78:c8:eb:60:06:7b:79:
79:3d:32:f5:f5:05:b7:44:48:26:42:03:90:5a:9a:
43:80:f4:60:ee:c1:a5:25:67:6d:be:99:54:54:ed:
05:2f:5e:d0:69:22:85:80:8a:af:da:95:2f:1e:4d:
1e:63:fd:b1:3a:c3:45:b4:53:1b:10:b5:70:09:1e:
4a:15:19:7d:aa:65:a2:ab:d6:d9:b5:e5:5a:a8:13:
c9:0e:9b:20:30:1a:f7:5a:ea:cc:e9:3a:b0:6b:11:
3c:09:2b:40:74:12:41:04:e0:51:9d:11:80:50:3b:
94:68:80:2b:6b:c5:96:90:f3:e9:f6:85:bf:cc:85:
34:0f:d1:b9:63:ad:fa:2b:b0:7d:c4:3c:7c:91:b7:
84:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:80:E6:A7:70:CA:DA:B9:6F:86:C2:43:BE:D2:BD:D9:15:EB:D5:AF
X509v3 Authority Key Identifier:
keyid:5F:51:BC:D8:9E:B7:F5:B3:AB:08:80:6E:F5:1A:7C:2F:6E:B9:8E:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X1G82J639bOrCIBu9Rp8L265jvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/41f6f5-cef0-4a57-8e47-0a85986208a9/1/XIDmp3DK2rlvhsJDvtK92RXr1a8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/41f6f5-cef0-4a57-8e47-0a85986208a9/1/X1G82J639bOrCIBu9Rp8L265jvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.95.61.0-109.95.63.255
Signature Algorithm: sha256WithRSAEncryption
25:03:ce:57:8f:86:8e:70:94:a1:f9:4b:83:71:c2:3c:7b:f0:
83:2c:d0:b2:44:64:b7:68:b3:9a:4d:15:4d:dc:9a:c5:e1:21:
9d:a3:67:48:48:26:a0:0f:55:29:3f:26:f5:40:96:04:15:2c:
4f:3d:4f:65:b9:e7:dc:f2:f0:55:24:dc:15:34:35:81:9a:bf:
c5:eb:b7:8e:52:7c:53:ae:9e:77:a4:6f:a2:ee:1f:4f:02:78:
10:04:c4:a6:08:a4:bc:e5:47:9b:a0:04:6b:12:5f:b4:6f:6c:
62:cf:3c:be:54:f2:68:41:a6:54:00:0e:49:ed:dd:36:65:9a:
26:a4:35:4a:db:53:0a:e5:3b:2b:b6:b8:e7:1d:87:34:88:76:
8b:43:79:b2:3b:61:b4:00:32:8f:74:ef:4b:53:f5:c4:c9:f8:
9c:cc:5f:d6:47:b0:5e:14:fc:b9:2d:2e:29:6e:20:b0:c0:a0:
f3:62:43:93:a0:e5:35:de:1c:9c:0d:c3:cf:30:83:24:f6:89:
e9:ea:b9:24:0d:f8:62:72:81:99:68:9f:8c:55:79:45:97:c8:
66:32:3b:c2:af:ee:82:81:4a:1b:22:f6:ab:13:ad:e3:05:b6:
8e:71:78:45:5e:4e:e6:b6:c5:a0:fe:88:1a:8d:63:55:ab:fe:
66:b8:99:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:03 2024 by rpki-client on console-fra.rpki-client.org