Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/LaHJrq2zbptSwypCqYd6vfq6mYA.roa
File: LaHJrq2zbptSwypCqYd6vfq6mYA.roa (raw, json)
Hash identifier: hf89/1Wrr5j6PIH8o6EZrVKods80Tukl+9YOaS6ASjw=
Subject key identifier: 2D:A1:C9:AE:AD:B3:6E:9B:52:C3:2A:42:A9:87:7A:BD:FA:BA:99:80
Certificate issuer: /CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Certificate serial: 01896498F29BE795C8455C780BD040639C4E
Authority key identifier: 5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/LaHJrq2zbptSwypCqYd6vfq6mYA.roa
Signing time: Mon 17 Jul 2023 16:04:52 +0000
ROA not before: Mon 17 Jul 2023 16:04:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48031
IP address blocks: 194.105.60.0/24 maxlen: 24
213.166.82.0/24 maxlen: 24
194.107.92.0/24 maxlen: 24
2.56.136.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:64:98:f2:9b:e7:95:c8:45:5c:78:0b:d0:40:63:9c:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Validity
Not Before: Jul 17 16:04:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2da1c9aeadb36e9b52c32a42a9877abdfaba9980
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:20:09:5d:03:44:30:55:74:cd:0a:96:64:6e:
1f:ef:1c:b3:a9:45:2a:42:bf:4a:fd:c1:a8:d6:17:
d5:8c:91:70:7d:dd:4e:83:55:57:f4:f1:14:7f:c4:
f9:0e:a9:a2:fe:1b:56:ee:a6:68:b6:a5:b2:70:43:
d6:02:94:c4:15:6d:23:98:33:b5:30:fe:8c:f4:21:
ae:7c:9a:1c:9c:76:fe:48:7d:55:d6:76:52:fc:c4:
55:5f:e4:e3:67:c4:e2:45:f5:8f:0a:7c:f1:e8:3a:
d4:82:40:67:c3:63:83:c4:6f:0d:52:4b:1e:3a:8b:
b4:cd:7a:10:f7:de:61:8b:b2:20:dc:ba:50:0f:ff:
5f:9a:3b:12:ce:fe:b0:a6:81:f9:81:21:fb:c7:45:
4e:0b:c5:57:d7:4a:dc:34:2d:d6:04:28:3f:d2:97:
7f:0f:0b:1d:53:4c:12:9a:59:d2:e5:47:1a:f8:0e:
90:90:be:2f:4b:92:da:50:80:c5:b8:22:91:27:df:
22:01:08:e3:a1:68:d6:60:68:4b:65:3b:a2:97:1c:
b1:9b:86:87:eb:96:5c:e6:96:5c:4b:7a:df:71:0e:
f8:a4:97:bc:f0:0a:1f:ec:d8:00:9d:e3:b9:9d:9a:
0b:bb:24:ff:3c:b6:a5:57:eb:67:eb:fa:2c:3b:87:
32:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:A1:C9:AE:AD:B3:6E:9B:52:C3:2A:42:A9:87:7A:BD:FA:BA:99:80
X509v3 Authority Key Identifier:
keyid:5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/LaHJrq2zbptSwypCqYd6vfq6mYA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.136.0/24
194.105.60.0/24
194.107.92.0/24
213.166.82.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:49:7c:4b:80:c2:4d:b0:02:d0:65:b8:cc:68:62:ad:1e:3c:
85:c7:c2:92:f5:4f:38:9c:87:57:38:2a:09:dd:a0:e0:0d:86:
7a:2d:20:14:bc:df:36:46:90:83:8c:63:34:08:fe:85:38:e1:
df:cc:0a:14:43:bd:5d:78:b3:86:99:c7:dc:fd:c4:ec:9a:e4:
25:65:8d:da:8f:56:d5:51:1f:79:78:94:bb:8c:ef:c8:1b:7e:
a8:02:c6:ee:8a:d6:1e:4d:90:fe:11:2a:6c:6e:75:49:49:ae:
f1:b3:ef:7f:e1:8e:89:7e:f3:28:b4:9c:c6:fb:de:e2:56:72:
2d:d3:9a:b4:01:61:4e:db:48:41:e2:85:44:c3:6d:ed:b4:38:
70:4d:a6:1b:27:b3:d0:ac:aa:97:93:80:97:3c:cf:f2:b1:34:
d9:20:eb:3f:f7:5c:93:0c:de:1e:07:a1:04:c3:27:97:e9:34:
1a:6a:d2:62:3d:bc:8c:37:8c:07:b3:5c:e4:e5:51:4b:37:dd:
52:6a:2d:a5:ba:aa:b2:25:a8:a2:4c:a5:1d:c4:00:a4:fa:4d:
f1:27:eb:f1:74:60:fc:7b:67:ba:52:ad:a1:20:45:bd:64:37:
4e:28:80:b8:1d:7f:df:5c:43:38:c7:4c:8d:3c:ea:1a:27:be:
31:03:e2:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 1 11:43:50 2023 by rpki-client on console-fra.rpki-client.org