Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/2Zu-DQUDg1QJaQWnvzO2afSO7w4.roa
File: 2Zu-DQUDg1QJaQWnvzO2afSO7w4.roa (raw, json)
Hash identifier: hC7r6ffnuAPad6K6xkeh0HTQJXmbe4giB9ETBEX1qHc=
Subject key identifier: D9:9B:BE:0D:05:03:83:54:09:69:05:A7:BF:33:B6:69:F4:8E:EF:0E
Certificate issuer: /CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Certificate serial: 018921A68D9CDD58DBD5945A15AAF7F7337B
Authority key identifier: 5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/2Zu-DQUDg1QJaQWnvzO2afSO7w4.roa
Signing time: Tue 04 Jul 2023 16:05:10 +0000
ROA not before: Tue 04 Jul 2023 16:05:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57494
IP address blocks: 45.153.69.0/24 maxlen: 24
45.153.68.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:21:a6:8d:9c:dd:58:db:d5:94:5a:15:aa:f7:f7:33:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Validity
Not Before: Jul 4 16:05:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d99bbe0d05038354096905a7bf33b669f48eef0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:50:7b:83:85:90:11:03:84:cb:18:60:6f:5e:
3b:90:e6:47:89:b3:05:ab:de:e6:10:b0:c8:58:49:
24:9f:5d:9b:df:eb:b6:59:c7:ea:f1:79:28:a8:1a:
a3:e2:65:df:f2:38:2d:8a:56:79:54:33:68:96:e0:
56:06:11:e6:f9:b6:c5:56:ec:5b:af:4d:01:33:55:
82:f7:6e:af:c4:da:b5:9a:4b:5a:67:9b:1d:e8:b6:
ac:3a:f6:b6:86:6f:aa:bf:bd:64:29:61:ce:87:80:
45:f1:9f:94:29:9d:1a:92:33:52:f8:ee:8b:4b:08:
32:73:75:66:3b:bf:82:a5:76:f9:b5:62:94:2e:08:
8d:8b:fd:fb:af:41:f1:7e:1f:9b:c0:02:7e:78:83:
8a:81:25:8f:68:a4:e3:19:fb:ec:82:5c:79:52:36:
3d:d4:87:1e:8b:68:40:9c:e0:a6:c3:f1:cc:d2:c7:
6d:8e:a6:25:82:1c:93:c9:9e:07:88:2a:1d:37:b0:
0e:c3:62:37:34:fd:b2:95:fe:35:fc:ab:4a:ba:26:
d5:ad:07:54:e9:bb:83:8d:e7:df:c7:46:de:a4:ee:
96:86:31:4c:da:15:d2:01:7f:f0:9d:db:e5:4a:1b:
ce:60:de:ac:d5:30:59:d5:d0:09:6e:32:c6:22:35:
a7:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:9B:BE:0D:05:03:83:54:09:69:05:A7:BF:33:B6:69:F4:8E:EF:0E
X509v3 Authority Key Identifier:
keyid:5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/2Zu-DQUDg1QJaQWnvzO2afSO7w4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.153.68.0/23
Signature Algorithm: sha256WithRSAEncryption
68:f8:d8:d4:ff:fd:08:22:e4:e9:17:2f:38:bc:bf:00:b9:31:
3a:d5:9f:63:19:62:cc:f7:19:0c:da:c5:e7:58:ed:f2:a6:b0:
fc:99:65:83:83:f9:b8:84:bf:98:a3:7d:89:17:2b:1a:6b:05:
17:d4:6c:ad:6b:11:ad:22:8d:8b:b0:11:f3:4b:11:ad:ca:32:
76:35:9c:a6:73:2d:8a:56:b3:3e:a1:cf:40:7e:60:ed:2e:6e:
41:eb:64:70:6e:3b:ea:74:c7:4e:2f:c0:72:79:18:66:88:e2:
bf:48:c1:ca:de:bf:4c:26:39:f9:83:e0:30:81:b0:b8:b0:b8:
0c:4d:06:36:56:76:03:8a:b6:21:44:b1:37:b9:32:5c:7b:94:
dc:02:27:19:57:27:22:ef:ae:a5:7b:9b:f1:e7:68:c6:61:2f:
1d:9d:77:a9:38:25:8b:74:17:9d:76:48:68:21:30:2d:e2:da:
12:67:11:82:06:30:1d:a3:08:e5:21:7b:1a:fd:13:cf:9e:5b:
ec:b5:6e:17:db:19:18:82:fd:32:fb:ce:03:de:a2:3e:0c:41:
e1:6b:99:5e:f6:e4:a5:d3:36:cb:e7:85:2d:82:52:a9:b8:34:
23:5a:79:c6:4b:05:e3:d3:db:72:1a:17:92:cf:8f:5a:77:d6:
67:c7:76:f3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYkhpo2c3Vjb1ZRaFar39zN7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkYTM5NDFjMjdjZmU1YzIzNGM0YmYyMjFlY2IyYTU3OWIy
ZGVhYWIwHhcNMjMwNzA0MTYwNTEwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkOTliYmUwZDA1MDM4MzU0MDk2OTA1YTdiZjMzYjY2OWY0OGVlZjBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslB7g4WQEQOEyxhgb147kOZHibMF
q97mELDIWEkkn12b3+u2Wcfq8XkoqBqj4mXf8jgtilZ5VDNoluBWBhHm+bbFVuxb
r00BM1WC926vxNq1mktaZ5sd6LasOva2hm+qv71kKWHOh4BF8Z+UKZ0akjNS+O6L
Swgyc3VmO7+CpXb5tWKULgiNi/37r0Hxfh+bwAJ+eIOKgSWPaKTjGfvsglx5UjY9
1Icei2hAnOCmw/HM0sdtjqYlghyTyZ4HiCodN7AOw2I3NP2ylf41/KtKuibVrQdU
6buDjeffx0bepO6WhjFM2hXSAX/wndvlShvOYN6s1TBZ1dAJbjLGIjWn1wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNmbvg0FA4NUCWkFp78ztmn0ju8OMB8GA1UdIwQY
MBaAFF2jlBwnz+XCNMS/Ih7LKlebLeqrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGFPVUhDZlA1Y0kweEw4aUhzc3FWNXN0NnFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC8zMGVkM2UtYzRjNC00ZGU4LWI0ZjEt
ZjExYTM5ZjI2YzNiLzEvMlp1LURRVURnMVFKYVFXbnZ6TzJhZlNPN3c0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC8zMGVkM2UtYzRjNC00ZGU4LWI0ZjEtZjExYTM5ZjI2YzNi
LzEvWGFPVUhDZlA1Y0kweEw4aUhzc3FWNXN0NnFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLZlEMA0G
CSqGSIb3DQEBCwUAA4IBAQBo+NjU//0IIuTpFy84vL8AuTE61Z9jGWLM9xkM2sXn
WO3yprD8mWWDg/m4hL+Yo32JFysaawUX1GytaxGtIo2LsBHzSxGtyjJ2NZymcy2K
VrM+oc9AfmDtLm5B62RwbjvqdMdOL8ByeRhmiOK/SMHK3r9MJjn5g+AwgbC4sLgM
TQY2VnYDirYhRLE3uTJce5TcAicZVyci766le5vx52jGYS8dnXepOCWLdBeddkho
ITAt4toSZxGCBjAdowjlIXsa/RPPnlvstW4X2xkYgv0y+84D3qI+DEHha5le9uSl
0zbL54UtglKpuDQjWnnGSwXj09tyGheSz49ad9Znx3bz
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:25 2024 by rpki-client on console-ams.rpki-client.org