Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/cVEJ3ECzLma0ONMBd-ztN0b2qNM.roa
File: cVEJ3ECzLma0ONMBd-ztN0b2qNM.roa (raw, json)
Hash identifier: AcLJG52l2pSE7Qf6Ra+UleCxO4PsXZPPXiz2jyL54YM=
Subject key identifier: 71:51:09:DC:40:B3:2E:66:B4:38:D3:01:77:EC:ED:37:46:F6:A8:D3
Certificate issuer: /CN=5dd7336fa915721ce3bfee217f4e99164db9532b
Certificate serial: 01857183443A9C197D9039A9CFE899AE9DD4
Authority key identifier: 5D:D7:33:6F:A9:15:72:1C:E3:BF:EE:21:7F:4E:99:16:4D:B9:53:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xdczb6kVchzjv-4hf06ZFk25Uys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/cVEJ3ECzLma0ONMBd-ztN0b2qNM.roa
Signing time: Mon 02 Jan 2023 08:05:05 +0000
ROA not before: Mon 02 Jan 2023 08:05:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 213.156.160.0/19 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:83:44:3a:9c:19:7d:90:39:a9:cf:e8:99:ae:9d:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd7336fa915721ce3bfee217f4e99164db9532b
Validity
Not Before: Jan 2 08:05:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=715109dc40b32e66b438d30177eced3746f6a8d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a2:24:bd:01:b2:6e:33:e7:f3:71:c3:60:b4:
6e:b9:99:d6:6f:ff:f9:29:b4:8d:69:a3:15:ce:09:
75:0d:99:70:ea:9f:4c:54:c8:32:3d:76:20:00:4e:
4b:ad:23:aa:06:8d:8e:5d:20:93:0e:a6:3e:f4:4d:
04:40:4a:98:e3:e2:8d:91:9a:07:cf:f1:cc:a9:a7:
39:57:af:93:a7:23:4d:cf:3c:69:6f:29:4e:55:8d:
30:fd:da:43:21:f7:f2:b1:db:f3:24:2b:5d:39:08:
df:19:36:fa:72:dd:92:63:a5:26:29:b4:46:11:99:
21:36:18:cc:79:91:5a:b7:75:b1:c1:c2:38:e7:8d:
6e:f2:b7:ff:46:f2:c3:b9:de:df:f8:c4:d2:f2:ca:
64:ad:bc:83:2d:6e:66:98:3d:b1:e0:84:5f:8c:9a:
f2:f4:b1:aa:da:61:b2:cc:5a:b0:37:f1:98:00:77:
fe:d6:db:8f:b1:4a:b5:12:17:cc:c8:95:d4:05:f5:
07:a1:07:4a:cc:2f:30:d6:1a:d3:78:92:6a:cc:8c:
84:ee:af:d0:59:46:e3:0b:6c:cf:43:68:a0:63:60:
c4:8b:1c:8b:6b:c3:86:65:4e:07:6d:f4:55:4c:f3:
02:89:bf:6b:43:aa:41:4e:1e:b7:49:11:b5:e3:52:
e1:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:51:09:DC:40:B3:2E:66:B4:38:D3:01:77:EC:ED:37:46:F6:A8:D3
X509v3 Authority Key Identifier:
keyid:5D:D7:33:6F:A9:15:72:1C:E3:BF:EE:21:7F:4E:99:16:4D:B9:53:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xdczb6kVchzjv-4hf06ZFk25Uys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/cVEJ3ECzLma0ONMBd-ztN0b2qNM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/Xdczb6kVchzjv-4hf06ZFk25Uys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.156.160.0/19
Signature Algorithm: sha256WithRSAEncryption
97:16:30:26:43:59:f1:a2:64:ec:79:e5:fb:63:a6:dd:cf:08:
b2:7e:f0:af:61:03:cb:71:fc:89:40:59:38:6e:6c:43:da:a1:
a5:f0:5c:41:a0:45:03:b9:e0:2c:b5:69:11:46:36:b0:a8:c7:
b1:38:a8:de:b7:37:11:88:e5:46:84:d2:13:c7:4f:ca:a4:de:
ac:b9:7a:7a:40:0a:37:dd:90:5f:0e:71:43:9d:25:0a:fc:5a:
77:da:22:1b:2c:39:f0:e9:5a:84:63:e2:78:90:23:d4:61:5a:
e0:94:c5:22:f4:59:e8:68:43:19:e8:8b:e9:7b:5b:2f:52:88:
a4:1a:26:bb:63:6d:23:18:40:a8:65:c2:87:fd:0b:8a:c4:51:
2a:c2:0b:c4:ad:e8:26:a8:12:6a:47:17:9d:dd:4f:6a:ec:d4:
e3:7d:87:bf:7e:07:d9:5b:c3:3b:b4:18:03:5e:39:20:0a:11:
07:11:25:01:13:8d:cc:14:5b:e5:ba:b4:b2:3c:20:f7:36:6a:
7d:17:65:52:f8:18:df:58:f2:57:b6:f2:b2:9f:65:6b:b5:9c:
cf:a5:b3:a2:00:1d:ab:fd:2e:df:bc:59:39:3a:35:14:ef:0e:
9d:f7:16:76:77:3f:4d:c3:09:48:08:2c:17:fe:f4:3d:37:80:
ea:56:7f:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:11:56 2024 by rpki-client on console-ams.rpki-client.org