Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/2X0ct9YyT8EX9dmkYYOQsgs0ngU.roa
File: 2X0ct9YyT8EX9dmkYYOQsgs0ngU.roa (raw, json)
Hash identifier: o2p0A1Q7RlAMFqw7w8k3dxe3X13IWsYKCgq6ie3HDhk=
Subject key identifier: D9:7D:1C:B7:D6:32:4F:C1:17:F5:D9:A4:61:83:90:B2:0B:34:9E:05
Certificate issuer: /CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Certificate serial: 0183F146CF0FC2AB2E54855133330D28E7BE
Authority key identifier: 5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/2X0ct9YyT8EX9dmkYYOQsgs0ngU.roa
Signing time: Wed 19 Oct 2022 17:24:52 +0000
ROA not before: Wed 19 Oct 2022 17:24:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58061
IP address blocks: 92.119.130.0/24 maxlen: 24
5.183.128.0/24 maxlen: 24
92.119.128.0/24 maxlen: 24
194.169.162.0/24 maxlen: 24
194.169.161.0/24 maxlen: 24
2.56.112.0/24 maxlen: 24
77.83.95.0/24 maxlen: 24
2.56.113.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:f1:46:cf:0f:c2:ab:2e:54:85:51:33:33:0d:28:e7:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Validity
Not Before: Oct 19 17:24:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d97d1cb7d6324fc117f5d9a4618390b20b349e05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:fe:f8:a9:fb:36:bf:bb:eb:6a:1b:ac:21:c2:
c5:cd:68:a8:87:37:85:38:88:a2:e9:ab:82:92:8b:
b1:12:1b:cd:bc:ec:a6:44:f9:78:ad:f7:1f:95:74:
31:79:58:74:64:22:a5:cd:52:6d:ed:59:e8:1a:b9:
66:40:dc:3a:e5:2d:01:25:3a:4c:b9:02:33:f3:08:
d1:a6:bc:7d:c6:ff:14:38:e1:d6:e8:4d:41:eb:a8:
e2:79:db:77:8d:2e:ad:31:2c:a0:d7:3f:c7:f5:97:
10:af:b1:c0:ab:bc:16:c3:6f:40:b5:b2:71:0c:50:
94:3e:cc:1d:88:4d:36:aa:12:89:04:23:ce:91:a8:
32:c0:4b:e4:09:d8:81:86:1d:46:94:df:b4:a1:3f:
fc:13:15:e4:1c:7d:a7:59:e9:9f:d4:22:69:d7:c1:
53:4d:6f:12:ba:8a:d3:4a:8f:96:28:d4:e4:c0:f4:
a8:b4:87:f9:d0:f0:47:e3:c8:24:0e:f6:e4:20:58:
d3:06:c0:67:73:e4:90:2b:74:12:b8:34:d0:17:6b:
e9:0b:c5:34:4c:4f:1b:6b:8a:21:4a:d7:81:0c:67:
71:ce:22:df:66:26:99:61:cb:9c:cb:06:0f:07:d3:
48:7d:e8:c2:39:d9:1a:de:6d:02:49:4c:f1:78:2f:
b8:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:7D:1C:B7:D6:32:4F:C1:17:F5:D9:A4:61:83:90:B2:0B:34:9E:05
X509v3 Authority Key Identifier:
keyid:5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/2X0ct9YyT8EX9dmkYYOQsgs0ngU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.112.0/23
5.183.128.0/24
77.83.95.0/24
92.119.128.0/24
92.119.130.0/24
194.169.161.0-194.169.162.255
Signature Algorithm: sha256WithRSAEncryption
b4:fe:d8:2d:0c:c3:77:ef:59:ff:d7:5b:30:19:69:8f:c2:cc:
7e:c2:88:e1:8d:ad:bc:7c:8f:c1:26:b8:14:ba:eb:0b:cb:83:
5a:da:12:6c:a2:17:b4:4a:f7:e2:b6:c7:d1:5f:93:bc:2e:6e:
65:25:f3:c8:2d:36:18:50:ff:ba:86:a2:b6:ee:ab:e6:1c:f8:
f6:ca:70:78:58:16:71:16:e0:50:4c:1c:46:7c:0c:48:d4:2f:
4e:6f:6a:4e:1d:b6:0d:74:c7:7e:15:99:71:b0:46:37:87:02:
94:7e:da:a9:1c:50:0a:36:9c:e5:57:07:14:fb:4e:3d:0a:dc:
89:65:1b:3e:25:84:00:20:2a:58:3f:d2:af:4e:c2:ee:56:74:
ee:57:7f:a8:7f:f1:d3:9b:74:67:fb:a9:cc:3a:e5:9a:88:1f:
63:11:40:9a:6c:1e:cb:99:ae:32:96:dc:c2:ae:9f:84:dd:9a:
fc:78:22:97:ed:3a:45:88:10:ba:95:14:7a:4d:85:bf:44:71:
45:e7:0e:1f:18:f3:e2:02:7c:55:c3:3f:1f:09:2c:d9:3a:bc:
d2:10:f9:d5:17:ca:e3:ae:e3:97:ed:d9:09:18:f2:94:d6:bd:
e2:3f:3d:87:7d:9e:64:e1:94:41:71:4d:8f:bb:0a:02:e7:46:
c8:0d:36:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:34 2023 by rpki-client on console-fra.rpki-client.org