Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/6Dax8ysdy1vWckTzP_FviDq-SXI.roa
File: 6Dax8ysdy1vWckTzP_FviDq-SXI.roa (raw, json)
Hash identifier: LVEE7ELqgkKTBaTJU0Ghq/TBo6a/cy2PPFg9o/l15R0=
Subject key identifier: E8:36:B1:F3:2B:1D:CB:5B:D6:72:44:F3:3F:F1:6F:88:3A:BE:49:72
Certificate issuer: /CN=557b0ac10b8642a27dd3d74ed6cb5ee045e67b97
Certificate serial: 018CC492C4D85302BAA90795613E43336A74
Authority key identifier: 55:7B:0A:C1:0B:86:42:A2:7D:D3:D7:4E:D6:CB:5E:E0:45:E6:7B:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/6Dax8ysdy1vWckTzP_FviDq-SXI.roa
Signing time: Mon 01 Jan 2024 10:30:02 +0000
ROA not before: Mon 01 Jan 2024 10:30:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201133
IP address blocks: 185.7.219.0/24 maxlen: 24
95.169.196.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:c4:d8:53:02:ba:a9:07:95:61:3e:43:33:6a:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=557b0ac10b8642a27dd3d74ed6cb5ee045e67b97
Validity
Not Before: Jan 1 10:30:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e836b1f32b1dcb5bd67244f33ff16f883abe4972
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:9b:b9:78:c7:56:b2:90:f2:89:6f:8d:6f:c1:
6f:42:f2:39:71:d3:f3:08:cf:39:40:f6:fa:1f:d0:
56:1e:e3:45:ec:9f:8a:7a:a5:ed:63:51:88:73:89:
f7:02:51:39:ba:6c:47:51:8f:54:91:53:8d:f0:ba:
1a:7a:61:14:7c:9e:fb:1d:10:28:c6:23:8b:3c:af:
67:e1:be:7d:c0:12:fa:20:d3:4c:85:c5:15:d7:09:
a7:59:70:80:67:9c:57:ee:cd:e1:e4:25:57:5f:5e:
fa:5d:67:2c:5e:0e:97:ee:f0:f1:9e:24:63:1b:15:
0f:c9:97:66:c9:df:5f:0c:0a:4d:c5:9f:60:b6:93:
6d:79:fb:09:c0:6e:7f:26:93:15:62:5c:2f:9d:4c:
8e:6d:6a:53:1b:05:bd:57:1b:c1:f3:d6:d3:3f:1d:
6c:b6:75:b4:5f:b7:09:48:48:23:eb:73:5f:a9:e6:
63:fc:77:2a:f6:f8:6f:ea:8c:d8:a9:a6:0f:48:04:
f3:d0:cd:bd:fe:83:bd:19:50:50:66:6d:62:86:75:
cc:3f:7d:75:2c:92:9b:11:18:b1:de:a2:92:5a:4d:
77:44:0d:02:23:a5:0f:fd:ca:7d:98:46:43:4e:18:
7b:39:dd:1e:21:cb:c0:db:89:3e:01:89:43:71:84:
b6:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:36:B1:F3:2B:1D:CB:5B:D6:72:44:F3:3F:F1:6F:88:3A:BE:49:72
X509v3 Authority Key Identifier:
keyid:55:7B:0A:C1:0B:86:42:A2:7D:D3:D7:4E:D6:CB:5E:E0:45:E6:7B:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/6Dax8ysdy1vWckTzP_FviDq-SXI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.169.196.0/24
185.7.219.0/24
Signature Algorithm: sha256WithRSAEncryption
40:54:cd:80:7b:f7:7f:ad:ff:9c:80:be:37:05:c6:da:3b:13:
df:3e:d9:b4:5d:bf:7a:e6:26:9f:30:d7:c7:7a:4c:a9:08:3f:
21:86:16:50:d2:57:ec:b5:f3:6f:0b:d1:19:22:88:99:09:32:
49:c6:8f:c7:ea:a5:f8:4c:3b:0b:df:a1:5a:4b:b9:a1:45:fe:
32:b0:4b:d0:1c:24:71:23:7e:cb:86:bb:00:df:c0:34:3b:d9:
cd:1a:ba:12:ad:58:52:78:15:12:e5:59:a5:83:3f:76:35:1d:
c8:b7:d3:2b:78:8f:17:c3:bc:8d:9a:40:aa:36:11:c9:54:2a:
bf:04:47:fa:c2:d9:1f:66:b8:c4:b4:ea:1f:71:9e:ef:d4:a3:
81:3e:63:26:ed:d2:4a:84:8c:87:a8:e8:e4:a6:99:26:2f:a5:
e2:b8:de:2b:bd:bc:c2:65:9b:2e:a4:87:6e:7b:e6:3a:7e:f9:
b5:88:32:64:c7:60:42:ea:4f:12:73:a3:a0:e5:44:41:84:2c:
e6:db:f1:a3:79:34:7f:99:2e:9d:2e:81:31:b8:6f:96:6e:77:
b3:1b:74:90:83:0b:9d:32:58:2e:16:ff:e9:0f:b0:32:e1:1c:
e4:1e:64:33:d0:19:16:18:82:a8:4e:3a:ea:6f:8d:3c:ce:52:
92:14:ab:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:11:50 2024 by rpki-client on console-ams.rpki-client.org