Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/6SDYePbAwYvMg72AgChNJuFSOtE.roa
File: 6SDYePbAwYvMg72AgChNJuFSOtE.roa (raw, json)
Hash identifier: 3qJU0NNcmsY1QHfZ0o55uto1qp8cjxBtTpitftMfPCs=
Subject key identifier: E9:20:D8:78:F6:C0:C1:8B:CC:83:BD:80:80:28:4D:26:E1:52:3A:D1
Certificate issuer: /CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Certificate serial: 018779BCF147EC1C8B81F3A447CB57CFF40A
Authority key identifier: 5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/6SDYePbAwYvMg72AgChNJuFSOtE.roa
Signing time: Thu 13 Apr 2023 08:30:38 +0000
ROA not before: Thu 13 Apr 2023 08:30:38 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35297
IP address blocks: 45.142.39.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:79:bc:f1:47:ec:1c:8b:81:f3:a4:47:cb:57:cf:f4:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Validity
Not Before: Apr 13 08:30:38 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e920d878f6c0c18bcc83bd8080284d26e1523ad1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d7:b4:33:cc:56:45:6d:88:04:99:ab:0b:c5:
04:75:de:79:16:41:65:7e:23:23:30:af:3a:7a:fd:
94:b5:66:81:c1:48:86:bf:35:c9:a2:20:ef:d5:7f:
4e:2c:e4:0d:df:76:da:41:2e:11:11:d4:85:9c:9f:
63:7a:6a:61:96:45:f9:cb:59:98:0f:be:80:7e:de:
e4:08:ab:da:dd:96:ba:d9:42:ef:2c:19:1b:90:db:
6f:37:9c:1b:3a:27:c3:5f:43:b0:0e:2c:0f:12:65:
01:e8:01:01:4f:ac:f9:86:e1:b4:70:f6:11:34:fc:
a5:ee:58:cd:eb:bb:b1:83:3e:d3:6d:54:4f:fc:4e:
2c:89:e7:2c:3a:79:8a:5a:c9:1b:a2:77:28:0a:53:
e7:47:79:b8:ce:4e:2f:2c:57:44:ce:ff:63:28:19:
e9:fe:6f:3d:7b:b3:67:57:87:0c:39:c8:3e:fb:d9:
55:68:1f:a8:80:1c:e0:81:f6:69:d1:72:fd:72:d9:
63:cf:c2:08:13:d6:7c:5b:33:ad:2c:b2:56:b3:e3:
db:be:89:3b:6d:b9:1c:f7:ee:7a:d3:c3:da:c0:a1:
8c:a3:ec:0d:b4:3d:21:6b:ef:14:07:d1:b9:fa:ec:
1e:bc:0d:98:da:91:fe:78:d6:f1:1b:03:2d:0e:aa:
9a:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:20:D8:78:F6:C0:C1:8B:CC:83:BD:80:80:28:4D:26:E1:52:3A:D1
X509v3 Authority Key Identifier:
keyid:5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/6SDYePbAwYvMg72AgChNJuFSOtE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.39.0/24
Signature Algorithm: sha256WithRSAEncryption
17:83:64:79:01:ff:c4:78:b7:ef:36:c7:d4:7a:09:9c:f4:23:
eb:6e:10:be:5d:73:33:2a:41:c2:19:fc:3d:40:f4:f6:fb:0a:
dd:02:2d:93:51:9a:18:a6:9b:64:b1:ce:a7:0c:18:e8:d2:22:
6c:f3:c1:ab:17:e0:5f:5f:fc:49:f7:8e:81:c7:38:b9:44:91:
ee:21:0b:d6:cc:06:97:18:2e:dd:58:f6:be:91:3e:78:62:53:
37:ed:58:b4:bd:68:61:1c:06:44:ac:c0:6b:c9:4d:48:27:20:
e8:08:3b:ef:d2:99:aa:44:4d:a2:c9:cc:bd:16:df:63:71:44:
5e:2f:f2:d6:2b:dc:3e:45:01:1c:63:cd:37:8b:73:fa:9d:d8:
39:11:88:44:28:1a:16:ab:be:b9:ed:86:73:5f:7c:b2:d4:22:
1b:4d:26:d2:d8:32:6d:09:d8:14:ac:3f:68:6f:ca:e5:ac:89:
dc:f8:5f:0a:7a:64:b2:02:7b:b0:28:21:7a:fd:71:6f:17:c7:
17:95:ac:23:6a:9c:71:90:c7:93:9b:a7:65:2b:51:ac:f0:e2:
60:85:77:15:4f:26:b1:b8:c5:ce:da:49:47:a4:07:1e:b4:92:
b5:c8:6a:63:ee:40:c1:5e:01:dc:00:b5:8d:77:f1:1d:63:09:
c4:c7:2e:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:47 2024 by rpki-client on console-fra.rpki-client.org