Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/3CmrNt60sKMhm0yFWyQxwHce6js.roa
File: 3CmrNt60sKMhm0yFWyQxwHce6js.roa (raw, json)
Hash identifier: FXecYJIHm8bmUcL46jxj6Ta5zRyMl2qN6/i9fnrs6z4=
Subject key identifier: DC:29:AB:36:DE:B4:B0:A3:21:9B:4C:85:5B:24:31:C0:77:1E:EA:3B
Certificate issuer: /CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Certificate serial: 01896553B689A1FB3B687E5D02D542EC8D10
Authority key identifier: 5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/3CmrNt60sKMhm0yFWyQxwHce6js.roa
Signing time: Mon 17 Jul 2023 19:28:52 +0000
ROA not before: Mon 17 Jul 2023 19:28:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 395092
IP address blocks: 45.139.54.0/24 maxlen: 24
2.56.139.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:65:53:b6:89:a1:fb:3b:68:7e:5d:02:d5:42:ec:8d:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Validity
Not Before: Jul 17 19:28:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dc29ab36deb4b0a3219b4c855b2431c0771eea3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c1:d2:55:99:f9:0b:c0:8c:71:de:4e:71:24:
18:4d:f1:bc:f0:9c:26:2a:e7:6e:45:37:9c:8e:1b:
63:19:d8:f4:f8:35:c1:f9:46:c7:ae:3d:89:8c:6b:
ec:4f:7f:e4:14:61:16:a1:0e:69:fe:ed:d6:2e:40:
ae:51:43:41:01:7e:bf:49:8c:c1:0d:6f:12:4e:5b:
49:65:a0:c3:ff:98:15:04:ad:77:88:3b:fb:00:15:
e6:61:cd:db:12:44:b3:5a:0a:d5:96:58:4f:ab:f6:
38:53:6a:38:d5:6c:8e:39:09:85:17:8d:5b:ae:46:
7d:2f:80:ea:59:ea:e1:37:94:e2:81:bd:5e:3f:cb:
e2:de:22:a7:8c:20:50:b2:98:fe:25:cc:1b:44:a0:
32:dc:8a:7d:75:87:9d:15:35:f7:8a:74:ef:5b:60:
03:c0:04:a8:6e:d5:f0:25:7f:ff:6f:b9:c0:e1:94:
4a:06:fa:37:46:bd:23:14:a7:9f:d5:68:95:78:5c:
f0:9f:18:b7:7b:be:ff:03:70:89:e8:a8:2e:ee:28:
5b:6b:0b:22:c3:63:a1:c4:8b:ae:d0:87:a4:31:cc:
f1:3d:cc:7c:2c:ed:6d:6d:a0:cb:bd:46:06:a0:ee:
9c:bf:0e:4c:85:8c:d3:12:e4:38:39:d1:dc:d0:2f:
89:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:29:AB:36:DE:B4:B0:A3:21:9B:4C:85:5B:24:31:C0:77:1E:EA:3B
X509v3 Authority Key Identifier:
keyid:5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/3CmrNt60sKMhm0yFWyQxwHce6js.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.139.0/24
45.139.54.0/24
Signature Algorithm: sha256WithRSAEncryption
93:68:51:8b:44:f9:f6:3b:7d:db:c0:b3:90:fa:d0:81:be:2f:
3d:eb:86:fa:56:f5:e9:84:fd:37:87:17:a3:8d:6c:38:24:24:
75:bb:15:c7:fb:8d:e1:f6:12:d9:1f:8a:1c:aa:87:10:a6:74:
a3:4c:81:96:eb:b9:50:c7:24:3d:47:8a:bb:ce:50:90:86:e0:
00:1c:3e:d5:aa:cf:1a:41:b4:03:98:b8:bf:43:b9:93:6d:df:
8b:f7:74:9f:3a:85:a0:ea:15:07:78:2c:20:6a:6c:de:32:77:
46:3f:af:76:35:aa:b9:4d:3e:8c:90:77:d4:5a:3d:64:b4:03:
33:cc:90:96:f0:8d:4d:5d:3a:2d:de:55:74:c8:c0:bc:5d:d3:
f5:58:c2:7f:be:f1:91:ee:69:83:d7:2d:25:32:ec:2c:65:95:
27:19:9f:8d:13:7c:8d:29:06:2d:a2:90:3a:c2:af:47:18:0f:
1c:b5:36:d5:6f:be:a7:da:23:96:5c:1e:44:d6:55:a8:bd:fe:
c5:9e:b4:db:9b:18:b0:de:49:b0:85:90:96:7d:99:74:9b:93:
bd:b8:56:dc:42:b4:52:c7:5f:da:af:96:1a:1c:45:fc:e1:69:
5e:9c:38:0d:20:20:a9:09:75:f0:e4:5d:ec:fa:1d:3e:36:ef:
a7:94:74:18
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYllU7aJofs7aH5dAtVC7I0QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkYTM5NDFjMjdjZmU1YzIzNGM0YmYyMjFlY2IyYTU3OWIy
ZGVhYWIwHhcNMjMwNzE3MTkyODUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYzI5YWIzNmRlYjRiMGEzMjE5YjRjODU1YjI0MzFjMDc3MWVlYTNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8HSVZn5C8CMcd5OcSQYTfG88Jwm
KuduRTecjhtjGdj0+DXB+UbHrj2JjGvsT3/kFGEWoQ5p/u3WLkCuUUNBAX6/SYzB
DW8STltJZaDD/5gVBK13iDv7ABXmYc3bEkSzWgrVllhPq/Y4U2o41WyOOQmFF41b
rkZ9L4DqWerhN5Tigb1eP8vi3iKnjCBQspj+JcwbRKAy3Ip9dYedFTX3inTvW2AD
wASobtXwJX//b7nA4ZRKBvo3Rr0jFKef1WiVeFzwnxi3e77/A3CJ6Kgu7ihbawsi
w2OhxIuu0IekMczxPcx8LO1tbaDLvUYGoO6cvw5MhYzTEuQ4OdHc0C+JaQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFNwpqzbetLCjIZtMhVskMcB3Huo7MB8GA1UdIwQY
MBaAFF2jlBwnz+XCNMS/Ih7LKlebLeqrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGFPVUhDZlA1Y0kweEw4aUhzc3FWNXN0NnFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC8zMGVkM2UtYzRjNC00ZGU4LWI0ZjEt
ZjExYTM5ZjI2YzNiLzEvM0Ntck50NjBzS01obTB5Rld5UXh3SGNlNmpzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC8zMGVkM2UtYzRjNC00ZGU4LWI0ZjEtZjExYTM5ZjI2YzNi
LzEvWGFPVUhDZlA1Y0kweEw4aUhzc3FWNXN0NnFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAAjiLAwQA
LYs2MA0GCSqGSIb3DQEBCwUAA4IBAQCTaFGLRPn2O33bwLOQ+tCBvi8964b6VvXp
hP03hxejjWw4JCR1uxXH+43h9hLZH4ocqocQpnSjTIGW67lQxyQ9R4q7zlCQhuAA
HD7Vqs8aQbQDmLi/Q7mTbd+L93SfOoWg6hUHeCwgamzeMndGP692Naq5TT6MkHfU
Wj1ktAMzzJCW8I1NXTot3lV0yMC8XdP1WMJ/vvGR7mmD1y0lMuwsZZUnGZ+NE3yN
KQYtopA6wq9HGA8ctTbVb76n2iOWXB5E1lWovf7FnrTbmxiw3kmwhZCWfZl0m5O9
uFbcQrRSx1/ar5YaHEX84WlenDgNICCpCXXw5F3s+h0+Nu+nlHQY
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:25 2024 by rpki-client on console-ams.rpki-client.org