Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/5Ut8vjr5Ktr6uz7-md3u3bQ2efE.roa
File: 5Ut8vjr5Ktr6uz7-md3u3bQ2efE.roa (raw, json)
Hash identifier: tB1/+0Z/N9I8Ov4Ridcfp0AZcO+pL4OUiM4FiuFFmvA=
Subject key identifier: E5:4B:7C:BE:3A:F9:2A:DA:FA:BB:3E:FE:99:DD:EE:DD:B4:36:79:F1
Certificate issuer: /CN=4292b5da4b4ffeaf720649518fbaaa10c5cb2811
Certificate serial: 03E21753
Authority key identifier: 42:92:B5:DA:4B:4F:FE:AF:72:06:49:51:8F:BA:AA:10:C5:CB:28:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/5Ut8vjr5Ktr6uz7-md3u3bQ2efE.roa
Signing time: Tue 18 Jan 2022 12:04:42 +0000
ROA not before: Tue 18 Jan 2022 12:04:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44854
IP address blocks: 185.219.6.0/24 maxlen: 24
103.243.124.0/22 maxlen: 22
93.114.180.0/23 maxlen: 24
2a10:e300:35::/48 maxlen: 48
2a10:e300::/32 maxlen: 48
2a10:e300:26::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65148755 (0x3e21753)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4292b5da4b4ffeaf720649518fbaaa10c5cb2811
Validity
Not Before: Jan 18 12:04:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e54b7cbe3af92adafabb3efe99ddeeddb43679f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:14:bb:23:37:8c:6b:06:ef:35:1a:ed:b4:94:
41:47:1d:61:0c:54:a4:7b:de:b5:2c:0b:2a:3e:0b:
8f:8a:27:1f:a6:5d:2b:9e:b4:6a:72:2b:06:7f:f2:
e8:84:17:6c:1e:cc:be:2b:83:07:fe:af:c7:0f:c2:
98:bd:82:f3:1d:9c:71:cf:e7:13:c9:60:05:5d:fc:
7d:9a:e1:8d:02:27:cb:23:e7:04:e2:81:23:90:8d:
4a:df:7f:59:b7:88:c6:e2:0b:34:18:54:33:33:1f:
18:13:db:5f:65:8a:3c:cc:c8:3e:c4:d2:a9:ab:8a:
b1:f4:65:98:bc:5d:16:cc:21:18:f8:8d:60:60:a6:
42:03:1c:74:55:95:6e:7b:14:87:28:ee:af:3b:b7:
c8:c8:f1:a7:fe:ee:60:eb:cd:aa:02:23:83:11:7e:
c3:29:9f:ac:e2:cd:1f:82:74:16:6a:3a:af:7c:09:
f3:a0:89:97:8c:64:0e:ff:cb:1c:f3:dc:5c:fd:3c:
8c:d5:2b:c3:97:27:e2:7b:7d:2e:00:91:8d:4f:7b:
d1:51:e8:34:bf:a2:6a:2f:ac:9c:e5:fa:9f:40:ed:
08:45:c3:9b:b6:7c:5f:1b:4b:ab:83:d5:b2:df:7b:
32:d0:8d:f2:b2:21:e2:54:cc:79:36:50:f1:e1:b9:
d6:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:4B:7C:BE:3A:F9:2A:DA:FA:BB:3E:FE:99:DD:EE:DD:B4:36:79:F1
X509v3 Authority Key Identifier:
keyid:42:92:B5:DA:4B:4F:FE:AF:72:06:49:51:8F:BA:AA:10:C5:CB:28:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/5Ut8vjr5Ktr6uz7-md3u3bQ2efE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.114.180.0/23
103.243.124.0/22
185.219.6.0/24
IPv6:
2a10:e300::/32
Signature Algorithm: sha256WithRSAEncryption
64:07:d8:26:30:44:28:03:de:0b:a6:49:bb:73:0d:9a:02:45:
ac:da:4f:ff:cd:1a:44:9d:e5:ce:dc:c3:b1:b3:5e:aa:ae:8f:
c1:26:71:66:8c:8b:73:43:fb:4f:be:a4:4c:0b:e1:d4:f9:38:
05:b6:9b:24:07:c0:e6:8b:ad:68:aa:95:b3:11:c7:97:23:39:
09:80:b7:af:51:21:57:db:23:8c:1b:67:36:f4:d7:66:85:2f:
b9:23:00:05:47:03:d0:96:a6:d0:56:08:41:e1:60:22:06:2b:
1d:6b:40:eb:41:eb:a6:d6:8a:99:e4:71:ba:52:be:1f:33:91:
76:49:d1:33:41:eb:a9:46:f0:5a:af:b8:d3:cb:a0:fb:57:be:
f6:da:dd:e3:78:87:9d:2a:ae:ea:bf:5a:eb:1d:26:0f:86:7e:
c0:b3:23:c5:42:c4:a0:99:21:17:96:e3:22:54:53:8e:57:ea:
e1:f3:f6:ff:1c:54:09:2b:9a:91:71:a4:98:9e:28:a1:21:eb:
f7:be:de:06:54:f2:2f:d6:3e:e4:cf:88:a2:b0:ac:52:19:4e:
df:c4:75:95:51:24:8b:b8:9a:78:bb:27:fe:ab:14:ff:75:05:
c4:8d:45:27:c9:e1:99:79:9f:50:c7:66:60:8a:0b:55:0c:2e:
99:c3:5f:d6
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:09 2024 by rpki-client on console-fra.rpki-client.org