Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/11081b-4ef9-4e2f-8153-287937940d7b/1/TANfIok7wbNwoMoAAyjVB0Z_xnM.roa
File: TANfIok7wbNwoMoAAyjVB0Z_xnM.roa (raw, json)
Hash identifier: ZSsGwoWm6tCw8Izioq8w3o087hyVTQZ4oPV3VBykoPA=
Subject key identifier: 4C:03:5F:22:89:3B:C1:B3:70:A0:CA:00:03:28:D5:07:46:7F:C6:73
Certificate issuer: /CN=e7d799ae0efdd986dde77fb35ad0a10823cb972f
Certificate serial: 01835ACC5E57FE2D005AEB7CA50AE40130CB
Authority key identifier: E7:D7:99:AE:0E:FD:D9:86:DD:E7:7F:B3:5A:D0:A1:08:23:CB:97:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/59eZrg792Ybd53-zWtChCCPLly8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/11081b-4ef9-4e2f-8153-287937940d7b/1/TANfIok7wbNwoMoAAyjVB0Z_xnM.roa
Signing time: Tue 20 Sep 2022 12:08:06 +0000
ROA not before: Tue 20 Sep 2022 12:08:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41039
IP address blocks: 5.153.128.0/18 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:5a:cc:5e:57:fe:2d:00:5a:eb:7c:a5:0a:e4:01:30:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7d799ae0efdd986dde77fb35ad0a10823cb972f
Validity
Not Before: Sep 20 12:08:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4c035f22893bc1b370a0ca000328d507467fc673
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:bf:b0:c2:f1:cd:ce:91:50:90:db:a1:2d:0b:
c5:a4:13:b9:37:eb:24:94:38:67:39:50:b6:fc:f6:
4f:71:de:b1:88:af:17:5b:b2:e6:db:31:4d:57:e7:
f7:92:73:49:8a:6b:3f:b8:cc:ea:77:b7:a9:a3:ef:
fa:63:29:d7:05:0d:1e:5a:d4:ad:0f:d7:18:74:74:
55:9d:f1:2c:bd:26:86:09:93:b4:70:3a:01:81:33:
6b:b0:62:1e:ff:fd:16:89:76:ac:57:f1:0c:ec:b2:
41:af:3b:cc:b4:05:06:c1:88:1c:92:08:9c:72:ff:
27:40:a7:ed:df:ae:ce:20:44:60:ea:9d:20:e5:45:
d6:a2:73:e0:79:df:e6:ba:7d:28:da:d4:ae:a5:03:
53:23:f1:1e:d0:09:e6:b5:e0:d2:fe:0c:c0:75:fc:
5f:ec:65:d1:77:e5:a8:0a:c1:76:ba:94:e1:3d:fc:
08:06:2b:02:d4:d0:a9:df:2f:fa:82:0e:37:ed:de:
3f:83:c6:fc:91:9f:31:b6:29:71:9b:fa:d6:94:1b:
9d:5a:4c:f6:d7:aa:6f:b9:cd:60:07:ea:b3:7e:dc:
e7:bf:59:c8:aa:24:1c:c6:b4:bd:10:12:55:3c:31:
40:fc:79:2a:16:30:5c:36:b2:c5:f6:4a:6e:80:54:
71:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:03:5F:22:89:3B:C1:B3:70:A0:CA:00:03:28:D5:07:46:7F:C6:73
X509v3 Authority Key Identifier:
keyid:E7:D7:99:AE:0E:FD:D9:86:DD:E7:7F:B3:5A:D0:A1:08:23:CB:97:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/59eZrg792Ybd53-zWtChCCPLly8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/11081b-4ef9-4e2f-8153-287937940d7b/1/TANfIok7wbNwoMoAAyjVB0Z_xnM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/11081b-4ef9-4e2f-8153-287937940d7b/1/59eZrg792Ybd53-zWtChCCPLly8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.153.128.0/18
Signature Algorithm: sha256WithRSAEncryption
49:ad:7c:59:d9:87:4a:bb:2c:0e:d0:60:e1:83:91:33:c8:06:
31:6d:79:bb:71:44:44:66:2c:57:54:ac:49:2b:78:62:e3:e5:
bc:8a:85:99:fd:03:74:9f:4c:36:cb:4e:af:1d:43:22:e2:96:
e0:f0:d4:6d:af:23:48:1e:ff:f0:67:bc:54:cc:dd:72:ad:0c:
16:94:16:40:c6:a1:6c:c8:83:f4:d6:cf:86:c2:3d:2f:43:4a:
55:94:4c:dd:87:46:06:4d:6f:3d:18:08:28:f5:d3:9d:6c:ee:
e0:0d:15:af:09:20:90:d1:53:d4:ce:4f:71:4f:a6:c1:d0:ad:
3c:dc:fb:9a:cc:e8:56:75:be:f9:bb:ed:1d:b1:76:eb:07:bb:
b8:d9:11:8e:e4:5f:af:3c:e1:c1:e4:dd:30:7b:d2:4a:fd:42:
bb:b4:61:73:5e:42:b0:41:05:6a:8b:2e:9d:fe:fb:4c:18:1b:
8e:bf:dd:60:64:f9:cf:a8:3f:03:db:c5:3f:9a:3b:5b:23:dc:
0f:df:58:de:8b:73:f8:c3:6f:f3:bd:fb:0f:09:ad:99:25:90:
5d:b9:d7:ea:79:0a:4b:6a:da:30:e2:f7:15:f4:99:5a:0c:b5:
51:02:59:0b:6e:f5:b0:10:ee:bb:1c:a0:93:e1:4a:ce:0d:e2:
c5:61:f0:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:50 2023 by rpki-client on console-ams.rpki-client.org