Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/c2e16e-ab68-4429-96ee-002f26e3b898/1/cUNsqQZwFsZhT6EPvb0UqL4fMs0.roa
File: cUNsqQZwFsZhT6EPvb0UqL4fMs0.roa (raw, json)
Hash identifier: 4fVqrwCiSUIY38mUhhAZ8ssV4Au0A40MxT0KYf7V0pQ=
Subject key identifier: 71:43:6C:A9:06:70:16:C6:61:4F:A1:0F:BD:BD:14:A8:BE:1F:32:CD
Certificate issuer: /CN=2f5cab8a09a9fde23c9635f8e164aef09e17948c
Certificate serial: 01857303904BAE28BE7435EA09D2C164D213
Authority key identifier: 2F:5C:AB:8A:09:A9:FD:E2:3C:96:35:F8:E1:64:AE:F0:9E:17:94:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L1yrigmp_eI8ljX44WSu8J4XlIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/c2e16e-ab68-4429-96ee-002f26e3b898/1/cUNsqQZwFsZhT6EPvb0UqL4fMs0.roa
Signing time: Mon 02 Jan 2023 15:04:51 +0000
ROA not before: Mon 02 Jan 2023 15:04:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 45.132.207.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:03:90:4b:ae:28:be:74:35:ea:09:d2:c1:64:d2:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f5cab8a09a9fde23c9635f8e164aef09e17948c
Validity
Not Before: Jan 2 15:04:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=71436ca9067016c6614fa10fbdbd14a8be1f32cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:fd:9a:26:81:5b:b6:a2:73:0f:94:13:e4:14:
fb:ac:f4:10:bf:4c:07:5d:9e:d0:33:e0:b9:21:5c:
29:40:b7:02:66:25:62:62:ca:e4:bd:46:59:3e:6e:
79:20:53:78:26:f3:65:9d:81:c7:ab:8d:11:8b:9a:
d3:2b:7b:cd:4c:b8:c0:a4:25:cb:ae:82:42:e9:c2:
ca:0e:c8:81:1a:e5:cf:59:63:cd:a9:b6:c6:ee:4f:
00:fa:87:5d:73:85:c9:90:b8:34:df:43:18:4c:7b:
69:3e:8a:22:5b:61:15:70:03:00:f7:f1:47:a4:c9:
08:85:ba:6c:d3:3c:2f:b9:c5:cd:2c:3e:c1:fd:46:
72:0c:d8:01:5c:e5:f5:44:3d:99:a5:82:52:da:04:
c7:f6:d9:a7:9d:27:f0:f8:39:62:e2:90:fb:ca:32:
b4:86:f1:23:88:23:f2:66:6e:88:5c:ad:7f:87:b6:
b6:f0:9d:c6:b1:a3:05:4d:57:9b:f1:23:39:8a:26:
59:24:8a:6c:6f:fd:d8:8a:8d:bb:59:14:39:8b:9d:
3d:16:74:97:e0:eb:f6:7b:13:07:4a:17:14:2b:1c:
63:0d:c9:60:65:40:39:37:95:e9:fb:56:25:2d:9b:
b1:7c:a7:61:e4:42:54:02:8a:05:3c:03:c6:da:8b:
4e:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:43:6C:A9:06:70:16:C6:61:4F:A1:0F:BD:BD:14:A8:BE:1F:32:CD
X509v3 Authority Key Identifier:
keyid:2F:5C:AB:8A:09:A9:FD:E2:3C:96:35:F8:E1:64:AE:F0:9E:17:94:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L1yrigmp_eI8ljX44WSu8J4XlIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c2e16e-ab68-4429-96ee-002f26e3b898/1/cUNsqQZwFsZhT6EPvb0UqL4fMs0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c2e16e-ab68-4429-96ee-002f26e3b898/1/L1yrigmp_eI8ljX44WSu8J4XlIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.207.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:1a:82:6b:da:83:bd:33:45:a3:c9:98:32:4a:09:b5:40:bd:
82:1b:e8:d6:ad:ed:3d:f1:1b:57:50:b4:e1:e6:49:44:44:d5:
df:3f:96:08:4f:e0:e8:2a:f8:3c:2d:44:a2:f4:6b:a4:73:f7:
56:73:38:f8:76:02:fa:64:f9:cc:6f:6e:02:78:80:be:5c:ba:
76:0a:2d:42:94:64:b9:d8:28:6c:8e:3c:d3:ae:07:2b:20:bb:
3c:b2:a6:4d:5a:15:f0:1b:c2:62:7f:30:17:23:fa:a7:46:a8:
68:cb:2a:d8:dd:fc:71:fb:7c:d4:7a:4f:82:4e:07:aa:ba:d2:
36:20:dd:da:1f:11:3e:80:53:5e:36:a1:1b:9a:7c:f6:08:df:
79:a7:53:4e:b8:4e:5f:fe:10:ee:ef:70:1c:e5:1a:e6:46:3c:
23:bb:b2:d3:8f:2a:a0:ff:de:30:ab:c8:46:fd:ff:5b:f1:5d:
47:45:c9:dd:5e:76:21:8c:4f:76:dd:07:0c:c3:1e:6d:43:3e:
b2:35:15:fe:91:d5:ba:84:17:a7:98:20:82:9d:5c:d1:34:21:
e1:c1:5d:12:3f:1c:21:90:d0:06:53:60:d8:9b:5e:56:16:79:
01:62:8a:4b:5d:2b:92:c0:5c:cd:4e:5f:ac:5a:95:7d:b6:2b:
de:bc:c9:3a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVzA5BLrii+dDXqCdLBZNITMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmNWNhYjhhMDlhOWZkZTIzYzk2MzVmOGUxNjRhZWYwOWUx
Nzk0OGMwHhcNMjMwMTAyMTUwNDUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MTQzNmNhOTA2NzAxNmM2NjE0ZmExMGZiZGJkMTRhOGJlMWYzMmNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlP2aJoFbtqJzD5QT5BT7rPQQv0wH
XZ7QM+C5IVwpQLcCZiViYsrkvUZZPm55IFN4JvNlnYHHq40Ri5rTK3vNTLjApCXL
roJC6cLKDsiBGuXPWWPNqbbG7k8A+oddc4XJkLg030MYTHtpPooiW2EVcAMA9/FH
pMkIhbps0zwvucXNLD7B/UZyDNgBXOX1RD2ZpYJS2gTH9tmnnSfw+Dli4pD7yjK0
hvEjiCPyZm6IXK1/h7a28J3GsaMFTVeb8SM5iiZZJIpsb/3Yio27WRQ5i509FnSX
4Ov2exMHShcUKxxjDclgZUA5N5Xp+1YlLZuxfKdh5EJUAooFPAPG2otOgwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHFDbKkGcBbGYU+hD729FKi+HzLNMB8GA1UdIwQY
MBaAFC9cq4oJqf3iPJY1+OFkrvCeF5SMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDF5cmlnbXBfZUk4bGpYNDRXU3U4SjRYbEl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9jMmUxNmUtYWI2OC00NDI5LTk2ZWUt
MDAyZjI2ZTNiODk4LzEvY1VOc3FRWndGc1poVDZFUHZiMFVxTDRmTXMwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi9jMmUxNmUtYWI2OC00NDI5LTk2ZWUtMDAyZjI2ZTNiODk4
LzEvTDF5cmlnbXBfZUk4bGpYNDRXU3U4SjRYbEl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYTPMA0G
CSqGSIb3DQEBCwUAA4IBAQChGoJr2oO9M0WjyZgySgm1QL2CG+jWre098RtXULTh
5klERNXfP5YIT+DoKvg8LUSi9Gukc/dWczj4dgL6ZPnMb24CeIC+XLp2Ci1ClGS5
2ChsjjzTrgcrILs8sqZNWhXwG8JifzAXI/qnRqhoyyrY3fxx+3zUek+CTgequtI2
IN3aHxE+gFNeNqEbmnz2CN95p1NOuE5f/hDu73Ac5RrmRjwju7LTjyqg/94wq8hG
/f9b8V1HRcndXnYhjE923QcMwx5tQz6yNRX+kdW6hBenmCCCnVzRNCHhwV0SPxwh
kNAGU2DYm15WFnkBYopLXSuSwFzNTl+sWpV9tivevMk6
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:32 2023 by rpki-client on console-ams.rpki-client.org