Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/1-gNVVfKSSkXoFZy9GklmQ2_FSmE.roa
File: 1-gNVVfKSSkXoFZy9GklmQ2_FSmE.roa (raw, json)
Hash identifier: ckmxrqNox2QSUmjmPcz3Yz/8mHJv6D/2gIWq9mvBxa0=
Subject key identifier: FA:03:55:55:F2:92:4A:45:E8:15:9C:BD:1A:49:66:43:6F:C5:4A:61
Certificate issuer: /CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Certificate serial: 0183D1E43E884FA0CDDC67E39CE4BEBB57CA
Authority key identifier: 5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/1-gNVVfKSSkXoFZy9GklmQ2_FSmE.roa
Signing time: Thu 13 Oct 2022 15:08:59 +0000
ROA not before: Thu 13 Oct 2022 15:08:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202317
IP address blocks: 2.59.215.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:d1:e4:3e:88:4f:a0:cd:dc:67:e3:9c:e4:be:bb:57:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Validity
Not Before: Oct 13 15:08:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fa035555f2924a45e8159cbd1a4966436fc54a61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:98:79:7c:33:e9:40:f4:73:f6:3c:07:d7:04:
20:34:56:f8:57:d0:00:04:db:1e:92:45:ed:37:b3:
da:02:18:92:15:33:11:b1:ef:bb:43:c0:a9:fa:8f:
c1:a1:db:2e:bc:57:3f:8f:d8:fc:c3:74:53:c1:5b:
37:d8:ed:99:d8:a5:4f:9a:df:64:7e:81:67:10:a5:
ad:b5:7a:08:16:b1:c5:65:10:5c:72:6c:b1:36:5f:
86:98:20:47:bb:0c:6b:2d:a7:78:7b:60:61:c7:01:
2d:d7:a1:d0:3f:a1:84:15:37:60:05:4c:80:70:54:
2f:c6:6c:b8:db:3f:96:4a:81:f4:38:86:f6:08:e4:
47:84:c4:eb:c2:d1:39:dd:ed:48:0c:5e:e2:b0:ba:
3f:7e:0b:e5:99:3f:8c:25:66:52:a7:7b:8c:af:33:
37:da:63:20:59:2b:e0:d3:09:b2:2d:25:49:5c:c5:
bc:1a:30:8c:cf:7b:d5:1e:8c:d6:54:aa:2c:a6:f1:
96:60:84:37:1c:37:7d:f6:0a:3a:3a:aa:90:8b:fb:
9c:b6:88:a0:9f:4c:5a:47:dd:c8:e0:ac:cc:ce:f0:
f2:b8:5b:84:76:7e:ba:45:0c:2a:02:da:56:9f:aa:
a8:82:3e:95:f0:95:0f:53:7e:98:19:63:0b:5a:c2:
5b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:03:55:55:F2:92:4A:45:E8:15:9C:BD:1A:49:66:43:6F:C5:4A:61
X509v3 Authority Key Identifier:
keyid:5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/1-gNVVfKSSkXoFZy9GklmQ2_FSmE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.215.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:b6:d9:62:76:42:1b:66:5d:ff:0c:e6:be:78:fc:1a:79:75:
32:16:df:b0:c6:b0:e1:66:9f:b7:17:b1:c4:43:e6:b6:b6:38:
29:e5:12:02:99:e0:f0:ff:54:ad:59:fe:4a:cc:6a:a6:d3:87:
d0:d6:e3:50:e1:79:ce:1c:89:c1:04:1b:0d:41:04:41:0e:96:
45:d8:85:eb:f3:a1:a8:be:88:f9:d0:37:7d:b2:08:f7:79:43:
0c:59:2e:0c:72:63:45:7c:1b:63:5c:05:cf:58:24:0b:5f:b8:
46:06:a3:e1:f7:be:0b:2d:41:36:6f:e0:8b:50:93:72:94:64:
0c:16:10:ee:ce:ee:8d:dd:02:7f:54:8a:f4:b9:23:3b:b3:e3:
0c:78:6e:2e:f4:c7:b7:7b:c6:1d:b1:04:a6:90:57:9b:b2:46:
77:f2:35:ec:53:ac:6d:58:4e:dd:4c:f8:2c:71:ca:b7:4d:f0:
93:eb:2d:d9:c8:f6:2c:7e:41:fb:f5:b0:1a:7c:c7:29:d1:65:
30:24:57:29:13:8e:8d:f6:cf:d1:76:a3:72:86:fb:84:7a:20:
ec:80:39:31:10:90:66:a4:ed:1c:bb:2e:be:83:cb:73:13:1d:
c6:69:79:71:53:36:9f:7b:56:4c:bd:fe:6c:40:64:d9:7b:46:
7e:46:75:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:25 2024 by rpki-client on console-ams.rpki-client.org