Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/akNpvLaGO95y92ma3QWXsCsR7EE.roa
File: akNpvLaGO95y92ma3QWXsCsR7EE.roa (raw, json)
Hash identifier: xcQlKsnJRlNkAqdxu/v+fTiRIl+NReWrRfp5NoaF+Kk=
Subject key identifier: 6A:43:69:BC:B6:86:3B:DE:72:F7:69:9A:DD:05:97:B0:2B:11:EC:41
Certificate issuer: /CN=5dd7336fa915721ce3bfee217f4e99164db9532b
Certificate serial: 0185718342E8290143E3C5EFDEB4A0C219E0
Authority key identifier: 5D:D7:33:6F:A9:15:72:1C:E3:BF:EE:21:7F:4E:99:16:4D:B9:53:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xdczb6kVchzjv-4hf06ZFk25Uys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/akNpvLaGO95y92ma3QWXsCsR7EE.roa
Signing time: Mon 02 Jan 2023 08:05:05 +0000
ROA not before: Mon 02 Jan 2023 08:05:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 213.156.160.0/19 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:83:42:e8:29:01:43:e3:c5:ef:de:b4:a0:c2:19:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd7336fa915721ce3bfee217f4e99164db9532b
Validity
Not Before: Jan 2 08:05:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6a4369bcb6863bde72f7699add0597b02b11ec41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:a8:31:37:85:63:4d:fe:06:4c:b3:3f:fa:1e:
db:c9:a1:ef:62:75:71:3c:2d:58:bf:92:8c:95:fb:
c4:6f:b6:f6:92:4c:ac:cf:07:b3:50:58:b1:30:20:
ac:c1:a8:e6:43:41:aa:5a:0e:67:b8:d5:13:48:eb:
d3:e8:8f:8f:46:9f:e9:bd:5c:1e:a8:9d:2a:99:f5:
b5:52:de:88:9c:90:c3:37:9f:98:82:59:95:05:50:
59:9b:b5:26:73:1b:1f:3b:60:ee:a3:84:c6:db:f6:
ac:97:e4:69:cf:f7:ae:2a:53:48:19:a2:d4:da:9a:
c6:99:61:66:8a:33:1b:cd:63:1f:2c:24:64:b1:c4:
e8:cb:1e:f5:8a:8d:b2:db:83:d0:e7:06:3c:8d:77:
4b:12:2e:59:66:91:32:7f:66:e4:16:5b:dc:62:c9:
9f:c3:c5:43:1c:4b:dc:96:a0:b8:3d:09:6b:ad:e5:
ea:9d:01:60:91:d9:41:cd:30:24:0e:0f:71:02:3d:
ad:f3:81:dd:67:ca:9e:04:ad:38:28:10:64:d1:f4:
7b:af:b9:f3:68:90:19:73:c5:ae:a5:5a:ff:23:08:
5c:55:93:22:a9:33:8b:2c:5b:6a:08:d4:ac:dc:62:
d9:85:18:90:eb:c5:f4:4c:dc:a0:10:e1:3f:dd:90:
74:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:43:69:BC:B6:86:3B:DE:72:F7:69:9A:DD:05:97:B0:2B:11:EC:41
X509v3 Authority Key Identifier:
keyid:5D:D7:33:6F:A9:15:72:1C:E3:BF:EE:21:7F:4E:99:16:4D:B9:53:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xdczb6kVchzjv-4hf06ZFk25Uys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/akNpvLaGO95y92ma3QWXsCsR7EE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/Xdczb6kVchzjv-4hf06ZFk25Uys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.156.160.0/19
Signature Algorithm: sha256WithRSAEncryption
14:39:e2:db:4f:01:15:c1:bf:73:ec:ed:4a:23:0b:3f:5a:9e:
c9:7f:b1:e2:f5:fe:93:13:78:f1:9b:47:3d:0f:42:bb:bb:96:
b4:23:3c:3e:d8:03:13:28:cd:07:24:a4:bb:8b:d7:53:b9:13:
c8:9d:02:d3:41:dc:b6:4a:3e:9e:c6:2e:ae:5b:cd:3e:ce:ab:
8e:3d:f8:14:78:d1:76:32:19:78:98:96:c8:b4:71:ee:cc:99:
7e:4b:f9:90:05:09:b6:9d:11:7d:83:08:ad:27:e4:89:f0:cb:
85:95:87:b1:59:b4:9d:8e:cd:ee:19:40:96:8c:fe:d3:2d:3e:
ab:40:74:82:66:e8:23:a4:ce:70:c4:fb:33:b8:dd:bd:71:fc:
7b:ae:92:61:2f:87:3d:68:ff:35:26:77:89:bb:0e:55:a1:50:
1f:10:49:35:6a:bc:9f:d5:a4:0a:5f:83:86:eb:db:ab:3c:12:
38:02:d1:eb:76:c5:dd:04:17:c9:02:bf:73:35:59:f9:df:fc:
c1:45:73:d1:1d:f5:05:8e:ea:af:4f:39:29:da:19:7e:f5:77:
80:28:91:3c:3d:f4:e6:78:30:fa:76:79:36:d0:91:c9:36:ea:
fc:e6:f1:0a:cd:fc:c8:9d:c1:a8:4c:b2:af:c0:40:71:bd:4a:
38:a6:9d:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:11 2024 by rpki-client on console-fra.rpki-client.org