Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/ECju2rt090PBE4DG7xcsC7lQGlc.roa
File: ECju2rt090PBE4DG7xcsC7lQGlc.roa (raw, json)
Hash identifier: eAAgrpySXn5rQ2P6W29ARtiauqyUFS3nIKBrq+HXG4c=
Subject key identifier: 10:28:EE:DA:BB:74:F7:43:C1:13:80:C6:EF:17:2C:0B:B9:50:1A:57
Certificate issuer: /CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Certificate serial: 03A3A337
Authority key identifier: 5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/ECju2rt090PBE4DG7xcsC7lQGlc.roa
Signing time: Sat 01 Jan 2022 14:07:06 +0000
ROA not before: Sat 01 Jan 2022 14:07:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59916
IP address blocks: 109.233.207.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61055799 (0x3a3a337)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Validity
Not Before: Jan 1 14:07:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1028eedabb74f743c11380c6ef172c0bb9501a57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:45:41:84:e0:40:d8:e7:9c:b5:71:b8:1b:ab:
92:a8:fd:91:4c:1d:ef:70:44:d7:91:9e:39:19:7d:
0d:42:ef:05:a5:25:10:2d:b6:d4:af:8d:03:9f:5b:
52:9b:25:58:43:07:f8:43:15:6c:53:72:08:0b:2e:
ba:43:7f:43:f2:87:c3:30:2b:4e:74:08:2e:24:f1:
e2:95:2c:3f:e8:11:5f:e1:bb:8a:6c:2e:b3:3c:58:
2f:37:16:e8:42:c5:88:87:94:cb:67:21:b8:53:66:
1f:85:55:a7:dd:7b:f2:6b:f2:8f:0e:8d:45:a0:1f:
b0:54:e0:2f:1b:1e:ac:23:8b:51:23:c0:df:58:dc:
02:8d:3c:de:39:fa:d7:4c:05:1d:06:9c:78:b9:a2:
e6:e8:de:11:c4:91:b0:0b:cf:eb:85:3e:f2:0c:e3:
4f:2f:aa:8d:b4:04:9e:c1:2b:97:7b:b6:21:83:3b:
a6:f6:0c:aa:7c:5c:89:7d:f5:52:91:d3:8d:b8:9f:
2f:49:de:6b:cb:d3:f0:5e:cb:ce:ea:37:66:48:f0:
e5:e0:e6:90:1c:0b:73:21:c3:2e:3d:cd:8a:22:5a:
8b:8b:d6:df:9d:12:2a:4b:d6:0e:95:ba:8e:3b:a8:
33:e6:0d:71:f2:b5:8c:0f:77:a6:54:51:da:11:d2:
4f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:28:EE:DA:BB:74:F7:43:C1:13:80:C6:EF:17:2C:0B:B9:50:1A:57
X509v3 Authority Key Identifier:
keyid:5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/ECju2rt090PBE4DG7xcsC7lQGlc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.233.207.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:ec:e2:20:a9:ac:2b:31:44:b4:4d:d7:93:27:af:46:c5:87:
b2:0d:05:b9:ed:2f:13:93:09:1c:3e:f8:ef:76:b4:a9:d5:d2:
dc:6f:76:87:74:aa:f4:1f:6a:26:bb:f1:fa:65:09:fc:6b:e9:
3d:b3:df:3c:32:a7:6f:7d:a8:83:c8:3f:ce:41:2f:12:ad:1a:
cb:ff:9b:68:07:69:f3:74:e4:f6:3b:a6:3b:12:5a:32:68:77:
a2:a3:66:19:8d:0d:43:6d:18:d8:b8:03:75:d1:5f:c7:04:c9:
39:e4:e2:46:63:7a:8e:ff:f1:49:52:66:9f:3c:57:ec:b6:de:
0a:e8:c6:1d:00:ee:eb:e9:07:24:9c:b7:6a:b7:2c:78:fe:19:
6a:81:45:75:52:bd:1d:98:33:34:f3:66:17:b5:81:cd:fa:d9:
50:e9:33:50:5f:46:2b:9b:1f:53:6f:76:e0:72:e9:0b:66:3a:
c6:d4:35:09:16:8a:55:27:e0:1b:7f:76:0e:dc:86:21:ba:4d:
c4:bb:9c:f1:54:52:a4:99:a4:20:1d:e4:f5:44:02:d2:f3:7a:
14:0f:fe:bb:c9:28:75:c8:42:de:eb:54:18:de:9d:b0:63:1e:
07:95:e6:bb:ab:5f:fe:7d:0f:f3:be:23:34:da:61:46:7e:99:
a6:17:d5:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:25 2024 by rpki-client on console-ams.rpki-client.org