Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/6aPbKk84qHAaInd7NpWZ7jtSYq8.roa
File: 6aPbKk84qHAaInd7NpWZ7jtSYq8.roa (raw, json)
Hash identifier: Pw4R+3hxgvd4MSUUCVbaqoxHOLdHTB2gCBNBh5JURMs=
Subject key identifier: E9:A3:DB:2A:4F:38:A8:70:1A:22:77:7B:36:95:99:EE:3B:52:62:AF
Certificate issuer: /CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Certificate serial: 018CC86FC1D743A69748C25FAAA9BA34906B
Authority key identifier: 5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/6aPbKk84qHAaInd7NpWZ7jtSYq8.roa
Signing time: Tue 02 Jan 2024 04:30:16 +0000
ROA not before: Tue 02 Jan 2024 04:30:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58061
IP address blocks: 5.183.128.0/24 maxlen: 24
2.56.112.0/24 maxlen: 24
2.56.113.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:c1:d7:43:a6:97:48:c2:5f:aa:a9:ba:34:90:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Validity
Not Before: Jan 2 04:30:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e9a3db2a4f38a8701a22777b369599ee3b5262af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:e1:a6:d3:0c:02:d9:d8:0b:7e:25:51:bd:13:
64:6f:92:97:a5:f5:e2:eb:ca:66:2e:86:a8:d8:14:
c3:db:bc:f3:54:f6:15:db:2c:64:b6:06:3c:12:11:
0a:c7:18:90:c7:1a:3a:4e:61:0b:9a:fc:41:0f:85:
cd:c1:53:89:87:51:e1:a7:d2:16:1f:78:32:7a:a4:
53:a7:53:86:50:27:6e:35:0d:22:0a:80:45:f1:92:
d8:77:92:33:13:36:39:5b:6f:24:4d:31:f4:c5:8b:
e5:81:18:87:42:ef:2f:5d:0a:34:92:96:63:3e:08:
05:08:2f:92:69:47:37:8c:59:77:37:03:6d:08:4e:
e7:9a:e5:15:23:6d:e7:ba:62:73:46:0d:30:ce:88:
86:c1:a5:26:4e:8e:c9:06:72:8c:b4:03:d1:18:8e:
0a:83:27:bb:01:50:ea:03:a5:8b:1e:1b:c4:bb:e5:
a7:f2:08:ae:59:9d:e4:c9:bd:4d:d1:5e:3b:81:54:
65:24:d3:42:26:89:c3:5b:d0:c3:52:b3:74:07:6d:
ec:b4:7a:2d:7d:6c:74:26:dc:c9:d8:2c:1a:f7:fc:
d4:5a:a2:50:78:5a:cf:d2:1e:3a:77:08:8a:78:08:
f2:3f:10:42:89:9c:c4:fd:dc:38:6a:f9:50:e8:90:
59:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:A3:DB:2A:4F:38:A8:70:1A:22:77:7B:36:95:99:EE:3B:52:62:AF
X509v3 Authority Key Identifier:
keyid:5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/6aPbKk84qHAaInd7NpWZ7jtSYq8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.112.0/23
5.183.128.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:b0:51:4f:33:4f:33:d1:59:db:08:b9:8b:77:08:f1:3a:c6:
d9:93:6b:2e:c3:2e:a5:d6:a6:c2:19:c0:fa:93:06:7f:9b:c1:
1d:3b:7c:f5:44:16:9f:13:05:a7:f1:9e:45:c0:a2:05:8a:fe:
3e:de:17:5b:18:1b:69:ca:39:dd:05:ee:f3:e0:a7:3c:74:44:
1b:aa:e3:91:23:81:6d:92:6e:64:72:46:1a:6a:17:4e:9b:92:
db:19:6e:36:5e:66:41:27:50:31:6e:0a:4c:1f:cf:37:9c:42:
98:aa:f1:79:b8:34:d1:6d:fe:7c:02:80:36:82:88:70:6a:3a:
a3:43:e4:4c:1f:d6:8c:b6:4b:19:5c:da:7c:3f:46:9b:fd:66:
bd:26:6b:df:69:48:6c:95:d7:49:55:d8:ad:00:de:97:4b:54:
12:a7:1d:a7:39:78:3f:87:e6:84:49:15:f5:33:8d:e3:bc:cb:
85:e5:c5:70:7a:ee:b3:08:8f:12:e9:1c:ed:63:fd:0f:b9:41:
b6:1f:74:ce:3e:a1:8f:5e:6b:cd:d6:f6:55:cf:5d:d0:df:73:
d6:c3:43:f1:18:7a:25:50:af:77:38:29:39:9c:03:2c:d3:06:
4c:69:52:8b:70:7e:fa:ac:4f:11:dd:c3:0d:02:1c:5f:b8:a0:
c6:98:b4:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:25 2024 by rpki-client on console-ams.rpki-client.org