Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/EasTuWORLJmJ_popXjTAqQ1sKac.roa
File: EasTuWORLJmJ_popXjTAqQ1sKac.roa (raw, json)
Hash identifier: GkG+5P3EqcZvokFEIgJXc2hgapuLp72r9dDm4M6Qa74=
Subject key identifier: 11:AB:13:B9:63:91:2C:99:89:FE:9A:29:5E:34:C0:A9:0D:6C:29:A7
Certificate issuer: /CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Certificate serial: 04E7D86C
Authority key identifier: 5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/EasTuWORLJmJ_popXjTAqQ1sKac.roa
Signing time: Thu 05 May 2022 13:27:41 +0000
ROA not before: Thu 05 May 2022 13:27:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58061
IP address blocks: 5.183.128.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82303084 (0x4e7d86c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Validity
Not Before: May 5 13:27:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=11ab13b963912c9989fe9a295e34c0a90d6c29a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:18:f4:5a:a4:c1:5d:cb:d5:4d:27:39:2d:15:
f9:81:4d:c5:87:74:ff:41:ad:57:32:e7:92:d5:38:
b0:ad:af:ea:21:56:84:73:4b:10:67:a7:2f:ec:91:
f2:71:45:c9:d0:7c:51:37:cf:77:6e:f9:26:0f:a6:
11:61:6d:ea:0a:1a:d7:83:b3:05:c4:de:76:c0:92:
d8:f7:eb:7e:37:0f:16:b2:9f:30:2e:53:02:dc:8b:
eb:d7:7a:f0:ad:ca:e7:9e:f8:76:6a:89:34:77:95:
50:9a:8c:83:b1:b6:1c:76:fd:82:35:d2:03:38:18:
34:cc:b0:8d:4a:50:87:30:22:b1:2b:3f:fc:18:1f:
a9:e4:34:29:b7:d6:30:1c:17:ef:5d:a4:cf:98:f4:
a0:e6:c8:eb:a8:51:82:e1:a3:a9:af:6a:67:4e:07:
87:a6:52:74:04:e4:32:48:0e:63:81:1d:f0:14:fc:
26:dd:a1:e5:f7:ce:91:e0:86:92:b7:c0:02:a4:43:
fb:77:51:e2:06:57:95:b3:94:6d:38:e3:39:72:72:
fc:97:fc:09:79:9a:66:3b:59:68:d9:70:07:53:a9:
c7:db:fd:05:b1:1d:a0:7e:4d:0b:be:f6:ec:2a:e6:
50:5e:81:db:2e:70:ee:d9:ba:d1:cb:c7:2b:79:49:
41:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:AB:13:B9:63:91:2C:99:89:FE:9A:29:5E:34:C0:A9:0D:6C:29:A7
X509v3 Authority Key Identifier:
keyid:5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/EasTuWORLJmJ_popXjTAqQ1sKac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.183.128.0/24
Signature Algorithm: sha256WithRSAEncryption
61:f9:0a:d3:86:ce:c9:bd:ec:85:0f:1b:e5:e6:9d:c7:f1:d0:
13:69:41:8e:3b:ea:7e:29:c3:14:e8:00:3b:0f:73:9b:de:f2:
93:ac:2a:26:27:fb:37:ed:9e:5f:ce:f0:b3:c6:66:78:df:5f:
01:62:6c:ba:69:e2:c9:91:03:f8:d8:7d:c0:a8:7f:dc:b5:0c:
26:a0:07:0b:f6:bd:36:a3:06:16:71:94:58:00:d0:31:35:bf:
e8:78:4a:45:fc:8c:5f:c5:00:a2:36:bf:f6:92:37:d9:0d:6f:
a6:90:7b:35:5b:fb:9b:ef:78:98:02:ea:57:e6:98:18:82:ab:
2d:e7:14:61:25:b5:eb:3d:c7:20:8d:2a:52:86:b1:90:17:28:
b0:9d:aa:7c:c1:d0:03:f1:10:dd:39:fc:b7:7c:9e:97:ee:81:
3e:8e:8e:43:41:f8:ac:9c:6a:2c:d2:75:4f:20:e9:95:7b:dd:
ac:5d:fd:ab:1c:5b:c7:48:ed:17:18:b1:2b:95:55:95:a8:d6:
95:3b:31:d8:ca:7b:01:8b:eb:22:a9:f7:c8:34:d6:59:d7:06:
d7:59:4a:af:ff:55:d9:99:05:cc:37:d6:0f:4d:87:fa:be:99:
a2:be:b2:7a:11:51:68:7b:29:2c:9c:42:3a:a7:04:e0:ac:4a:
28:22:d5:56
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBOfYbDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
ZGEzOTQxYzI3Y2ZlNWMyMzRjNGJmMjIxZWNiMmE1NzliMmRlYWFiMB4XDTIyMDUw
NTEzMjc0MVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMTFhYjEzYjk2Mzkx
MmM5OTg5ZmU5YTI5NWUzNGMwYTkwZDZjMjlhNzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAIoY9FqkwV3L1U0nOS0V+YFNxYd0/0GtVzLnktU4sK2v6iFW
hHNLEGenL+yR8nFFydB8UTfPd275Jg+mEWFt6goa14OzBcTedsCS2PfrfjcPFrKf
MC5TAtyL69d68K3K5574dmqJNHeVUJqMg7G2HHb9gjXSAzgYNMywjUpQhzAisSs/
/BgfqeQ0KbfWMBwX712kz5j0oObI66hRguGjqa9qZ04Hh6ZSdATkMkgOY4Ed8BT8
Jt2h5ffOkeCGkrfAAqRD+3dR4gZXlbOUbTjjOXJy/Jf8CXmaZjtZaNlwB1Opx9v9
BbEdoH5NC7727CrmUF6B2y5w7tm60cvHK3lJQaUCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQRqxO5Y5EsmYn+mileNMCpDWwppzAfBgNVHSMEGDAWgBRdo5QcJ8/lwjTE
vyIeyypXmy3qqzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1hhT1VIQ2ZQNWNJMHhMOGlIc3NxVjVzdDZxcy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvODAvMzBlZDNlLWM0YzQtNGRlOC1iNGYxLWYxMWEzOWYyNmMzYi8x
L0Vhc1R1V09STEptSl9wb3BYalRBcVExc0thYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODAv
MzBlZDNlLWM0YzQtNGRlOC1iNGYxLWYxMWEzOWYyNmMzYi8xL1hhT1VIQ2ZQNWNJ
MHhMOGlIc3NxVjVzdDZxcy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAAW3gDANBgkqhkiG9w0BAQsFAAOC
AQEAYfkK04bOyb3shQ8b5eadx/HQE2lBjjvqfinDFOgAOw9zm97yk6wqJif7N+2e
X87ws8ZmeN9fAWJsumniyZED+Nh9wKh/3LUMJqAHC/a9NqMGFnGUWADQMTW/6HhK
RfyMX8UAoja/9pI32Q1vppB7NVv7m+94mALqV+aYGIKrLecUYSW16z3HII0qUoax
kBcosJ2qfMHQA/EQ3Tn8t3yel+6BPo6OQ0H4rJxqLNJ1TyDplXvdrF39qxxbx0jt
FxixK5VVlajWlTsx2Mp7AYvrIqn3yDTWWdcG11lKr/9V2ZkFzDfWD02H+r6Zor6y
ehFRaHspLJxCOqcE4KxKKCLVVg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:47 2024 by rpki-client on console-fra.rpki-client.org