Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/E95TOed3361sTUwL-sECPwA0Iqo.roa
File: E95TOed3361sTUwL-sECPwA0Iqo.roa (raw, json)
Hash identifier: VUeq1j214vQgBZYzbnJmQYXzDGR2bXv+KYeMKjw9rbk=
Subject key identifier: 13:DE:53:39:E7:77:DF:AD:6C:4D:4C:0B:FA:C1:02:3F:00:34:22:AA
Certificate issuer: /CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Certificate serial: 018CC86FC0B1EFA541150D4ED9441E299C02
Authority key identifier: 5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/E95TOed3361sTUwL-sECPwA0Iqo.roa
Signing time: Tue 02 Jan 2024 04:30:16 +0000
ROA not before: Tue 02 Jan 2024 04:30:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51789
IP address blocks: 45.149.128.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:c0:b1:ef:a5:41:15:0d:4e:d9:44:1e:29:9c:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Validity
Not Before: Jan 2 04:30:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=13de5339e777dfad6c4d4c0bfac1023f003422aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ed:45:3e:4b:cd:39:e5:e0:a2:b2:f7:93:87:
59:05:0a:9f:57:a6:5f:bc:65:28:ff:59:eb:49:13:
c4:3a:6d:76:2c:af:03:f0:75:25:35:7d:80:36:c9:
24:51:8c:48:80:1d:77:22:fb:60:c9:b7:23:71:aa:
80:06:3e:0d:7f:c1:e5:4a:b1:4d:da:38:80:4a:96:
67:c6:53:2f:00:7d:5f:bd:75:e4:06:5a:4d:46:2a:
a9:c1:3a:ed:b0:09:47:01:46:25:ad:9f:d4:36:a9:
7d:d6:5a:7e:44:fd:97:6b:88:b3:33:7c:60:bf:22:
47:b6:78:0f:4d:a9:b6:d4:ea:df:43:9b:b7:08:9d:
17:88:d7:71:51:ad:20:c4:b1:1b:c2:e9:55:18:d0:
0c:36:02:fb:ea:ae:79:b4:ae:ed:1b:ee:3e:6e:04:
d5:9d:03:17:b5:08:f0:10:a3:37:82:85:67:2f:37:
54:65:73:c5:af:47:03:ed:d8:c6:99:12:0f:5e:2d:
a1:c6:38:e9:22:d2:73:64:bf:a1:8c:68:9f:14:ac:
a2:5e:a9:e7:be:1c:42:c7:a4:f4:79:92:4d:fe:93:
e3:06:9f:4f:e9:79:85:ad:aa:96:01:c9:bb:f4:9e:
c3:55:00:47:6c:bf:bf:39:a8:ab:a0:56:41:f3:e6:
42:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:DE:53:39:E7:77:DF:AD:6C:4D:4C:0B:FA:C1:02:3F:00:34:22:AA
X509v3 Authority Key Identifier:
keyid:5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/E95TOed3361sTUwL-sECPwA0Iqo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.128.0/24
Signature Algorithm: sha256WithRSAEncryption
47:b3:19:6d:f4:3f:b5:c3:21:b9:17:ee:12:2c:4d:f2:8c:f9:
b6:43:8a:e0:ea:e5:af:b1:3d:d0:aa:ae:e0:9a:0b:26:ce:05:
d2:14:f4:8c:8b:3a:ce:29:10:a3:42:68:2d:0c:30:51:42:c4:
26:c0:1a:b4:b6:45:b0:2b:2c:0b:ee:6f:75:0d:7e:d7:93:61:
ef:26:eb:a9:64:29:78:db:9d:09:9c:fc:f5:d1:bc:fb:68:00:
63:65:13:ab:39:64:cc:b7:b2:23:b7:38:3c:96:c4:b1:87:51:
69:98:0a:bf:fa:32:60:01:81:03:ba:3c:66:ca:34:d8:ef:82:
74:9b:a9:33:90:c5:3c:a3:7e:03:db:79:1f:18:55:9c:42:fc:
60:16:66:32:0c:40:92:c8:7e:89:6b:74:62:cb:0c:90:26:ed:
c0:f1:6d:3c:50:92:3c:00:d2:6a:60:50:fd:20:f3:8b:44:ae:
d9:68:ae:67:4e:fa:09:e4:40:a0:6c:63:64:ec:e9:b0:ec:a0:
df:09:dd:0c:f3:80:0b:87:35:26:94:21:32:63:4b:56:fb:e6:
5b:61:53:79:69:03:bc:3c:4c:53:7f:4f:df:2e:f6:d2:8a:09:
6c:a7:7f:25:92:5e:07:81:ce:6f:a2:94:a3:7a:d0:f9:bf:83:
ec:a6:98:9e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzIb8Cx76VBFQ1O2UQeKZwCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkYTM5NDFjMjdjZmU1YzIzNGM0YmYyMjFlY2IyYTU3OWIy
ZGVhYWIwHhcNMjQwMTAyMDQzMDE2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxM2RlNTMzOWU3NzdkZmFkNmM0ZDRjMGJmYWMxMDIzZjAwMzQyMmFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuO1FPkvNOeXgorL3k4dZBQqfV6Zf
vGUo/1nrSRPEOm12LK8D8HUlNX2ANskkUYxIgB13IvtgybcjcaqABj4Nf8HlSrFN
2jiASpZnxlMvAH1fvXXkBlpNRiqpwTrtsAlHAUYlrZ/UNql91lp+RP2Xa4izM3xg
vyJHtngPTam21OrfQ5u3CJ0XiNdxUa0gxLEbwulVGNAMNgL76q55tK7tG+4+bgTV
nQMXtQjwEKM3goVnLzdUZXPFr0cD7djGmRIPXi2hxjjpItJzZL+hjGifFKyiXqnn
vhxCx6T0eZJN/pPjBp9P6XmFraqWAcm79J7DVQBHbL+/OairoFZB8+ZCTQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBPeUznnd9+tbE1MC/rBAj8ANCKqMB8GA1UdIwQY
MBaAFF2jlBwnz+XCNMS/Ih7LKlebLeqrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGFPVUhDZlA1Y0kweEw4aUhzc3FWNXN0NnFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC8zMGVkM2UtYzRjNC00ZGU4LWI0ZjEt
ZjExYTM5ZjI2YzNiLzEvRTk1VE9lZDMzNjFzVFV3TC1zRUNQd0EwSXFvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC8zMGVkM2UtYzRjNC00ZGU4LWI0ZjEtZjExYTM5ZjI2YzNi
LzEvWGFPVUhDZlA1Y0kweEw4aUhzc3FWNXN0NnFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZWAMA0G
CSqGSIb3DQEBCwUAA4IBAQBHsxlt9D+1wyG5F+4SLE3yjPm2Q4rg6uWvsT3Qqq7g
mgsmzgXSFPSMizrOKRCjQmgtDDBRQsQmwBq0tkWwKywL7m91DX7Xk2HvJuupZCl4
250JnPz10bz7aABjZROrOWTMt7Ijtzg8lsSxh1FpmAq/+jJgAYEDujxmyjTY74J0
m6kzkMU8o34D23kfGFWcQvxgFmYyDECSyH6Ja3RiywyQJu3A8W08UJI8ANJqYFD9
IPOLRK7ZaK5nTvoJ5ECgbGNk7Omw7KDfCd0M84ALhzUmlCEyY0tW++ZbYVN5aQO8
PExTf0/fLvbSiglsp38lkl4Hgc5vopSjetD5v4Psppie
-----END CERTIFICATE-----
Generated at Thu Feb 1 16:26:12 2024 by rpki-client on console-ams.rpki-client.org