Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/EpwewTw34nh9ptuWouXTmB8oVDw.roa
File: EpwewTw34nh9ptuWouXTmB8oVDw.roa (raw, json)
Hash identifier: 3ww5glofTpnGjUMLHaM5fBzLj5oWAo7Ot85S+NB9t2M=
Subject key identifier: 12:9C:1E:C1:3C:37:E2:78:7D:A6:DB:96:A2:E5:D3:98:1F:28:54:3C
Certificate issuer: /CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Certificate serial: 018CC86FBD9EFAC9BC3845E443405F36E230
Authority key identifier: 5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/EpwewTw34nh9ptuWouXTmB8oVDw.roa
Signing time: Tue 02 Jan 2024 04:30:15 +0000
ROA not before: Tue 02 Jan 2024 04:30:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12722
IP address blocks: 45.14.220.0/24 maxlen: 24
45.14.221.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:bd:9e:fa:c9:bc:38:45:e4:43:40:5f:36:e2:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Validity
Not Before: Jan 2 04:30:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=129c1ec13c37e2787da6db96a2e5d3981f28543c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:57:60:58:e9:9e:eb:a6:87:73:f0:07:34:0f:
2c:ff:fa:f5:c4:9f:bb:15:3d:b3:1b:d3:53:6f:9c:
4e:ef:9c:bf:bf:80:d6:cb:66:86:6f:bc:00:16:3d:
da:45:59:17:17:7f:12:60:5d:03:de:77:73:0a:17:
9f:e7:fd:03:d7:6a:0b:89:1e:22:fc:5e:42:2a:4b:
8f:e6:b4:c0:c0:74:6e:c2:2e:fe:9d:39:b6:f4:2a:
68:61:51:7b:bf:b2:ff:15:a0:ad:1b:fa:7b:e1:80:
53:71:de:b0:b0:bc:a0:d2:40:e7:0c:cd:94:01:96:
ed:6a:dc:c6:d5:8b:d4:ec:a2:d4:c9:5c:17:f6:97:
b3:ca:18:f0:4e:fe:8a:ad:16:26:5a:ad:f8:59:1f:
e4:35:64:94:41:f2:87:78:3e:7f:a2:55:6d:ce:8a:
b4:2b:82:21:42:11:25:b4:39:2e:fb:4f:5e:b0:71:
0f:25:5f:1d:94:1f:62:77:a4:66:d7:69:0d:79:33:
f2:e8:46:c5:3a:5a:fc:c6:4c:cc:98:54:f6:ca:78:
9c:e2:4b:69:a5:c6:72:a8:9d:d0:db:66:53:24:8a:
55:0d:f4:ac:79:1f:69:ee:ea:65:d8:86:15:26:30:
f9:3c:08:a3:10:17:0e:04:db:46:cf:8d:a1:a7:17:
c9:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:9C:1E:C1:3C:37:E2:78:7D:A6:DB:96:A2:E5:D3:98:1F:28:54:3C
X509v3 Authority Key Identifier:
keyid:5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/EpwewTw34nh9ptuWouXTmB8oVDw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.220.0/23
Signature Algorithm: sha256WithRSAEncryption
20:ae:e0:1d:f6:d3:46:69:d0:54:da:14:26:d2:be:4f:7b:e4:
14:62:2e:f6:71:c8:38:36:85:53:00:1a:6a:aa:94:73:03:1e:
b9:c8:ea:f6:84:43:94:e1:de:1f:65:d5:a1:47:65:03:60:ff:
e7:11:d3:c0:79:5b:ba:69:59:20:89:fa:e1:20:05:a1:9e:b9:
85:84:a4:4c:15:cf:f5:f2:e9:f0:ad:df:da:3b:ab:1b:1c:72:
5b:40:29:18:9b:65:9e:a2:27:29:00:d5:de:50:77:54:21:3d:
53:4a:d3:4d:46:01:a3:6b:b1:24:60:3d:d7:a5:75:b4:09:0d:
ea:95:24:81:fb:b7:94:c3:be:e5:58:ac:8a:62:17:c2:be:d6:
84:31:7f:39:ae:4a:1f:6b:29:47:de:58:f2:df:96:c6:53:c5:
88:e2:c0:ce:b4:69:c9:49:ba:19:52:60:e2:65:3e:f7:55:0b:
b4:0f:1d:57:56:84:90:d6:7e:cb:41:af:be:f4:12:ca:ac:69:
1a:d6:27:e8:cb:61:ae:b4:8c:01:19:4f:a6:e3:9a:4a:2f:c1:
b8:d4:e0:8a:35:db:d3:dc:f9:54:25:71:15:77:cb:2d:dd:ee:
6d:90:d6:9a:ad:64:7d:8a:84:19:4f:ca:dc:f0:6c:72:9e:ec:
3a:3e:e6:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:47 2024 by rpki-client on console-fra.rpki-client.org