Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/N62GdUevg_uBxZM-j04p2rJuBoY.roa
File: N62GdUevg_uBxZM-j04p2rJuBoY.roa (raw, json)
Hash identifier: gRzjYjzWB41JKpj2d2cUDggyG5TJ283Bustuj6km20g=
Subject key identifier: 37:AD:86:75:47:AF:83:FB:81:C5:93:3E:8F:4E:29:DA:B2:6E:06:86
Certificate issuer: /CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Certificate serial: 04ADAF01
Authority key identifier: 5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/N62GdUevg_uBxZM-j04p2rJuBoY.roa
Signing time: Wed 13 Apr 2022 16:31:23 +0000
ROA not before: Wed 13 Apr 2022 16:31:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206042
IP address blocks: 5.183.155.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78491393 (0x4adaf01)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Validity
Not Before: Apr 13 16:31:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=37ad867547af83fb81c5933e8f4e29dab26e0686
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:aa:2b:a6:fe:9c:72:6a:e2:8a:1e:4b:3e:8e:
0e:74:1f:16:00:3a:2a:f4:3d:7e:17:c2:82:ea:fd:
bd:b7:9a:b2:5a:a8:88:42:12:9f:c1:c1:f7:37:3b:
1f:c5:9a:fc:5e:60:3f:13:9a:05:74:48:1c:6a:34:
37:e5:0d:57:92:bd:b0:5d:de:fb:50:65:41:45:0f:
14:19:c6:dd:38:13:88:d8:c7:82:b9:72:b5:3a:a5:
f6:c2:0c:52:57:76:88:5a:42:08:7e:af:7a:ba:be:
01:4e:60:fb:28:ad:5c:8b:01:cd:11:23:7a:0f:e1:
9e:4b:2d:2b:20:57:84:2c:6b:2b:f5:1a:eb:d6:8a:
03:86:0f:ed:5f:d1:37:80:b0:c1:91:79:69:30:64:
5c:4f:35:83:c5:af:56:ae:62:80:a2:91:d1:4d:ab:
82:7d:f8:f0:cf:46:ff:10:4b:1b:22:b4:b3:a9:c2:
8e:ac:5c:c9:ea:42:93:02:be:23:92:d1:aa:0f:ff:
56:6b:11:f7:d2:40:60:00:f2:1c:d7:e4:ca:4b:7d:
73:57:94:8b:ac:9e:e1:8c:f3:46:2e:db:26:4a:0f:
7d:6f:af:a5:87:6b:bc:d2:60:ab:8b:f1:fe:4b:14:
30:b7:86:a6:fb:3f:09:0f:bd:b0:97:c0:e5:c4:99:
c1:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:AD:86:75:47:AF:83:FB:81:C5:93:3E:8F:4E:29:DA:B2:6E:06:86
X509v3 Authority Key Identifier:
keyid:5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/N62GdUevg_uBxZM-j04p2rJuBoY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.183.155.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:a4:44:21:24:90:b5:40:24:f4:22:d2:f7:c2:0e:dd:11:0f:
03:f6:11:7c:5e:a0:bf:4f:50:2d:83:03:54:16:26:75:56:ad:
a9:79:92:67:f9:08:0e:03:a7:7a:cd:8b:e2:77:5d:93:13:5a:
a1:fd:24:d1:70:bf:ae:79:62:3e:c4:d1:97:46:f4:df:92:2f:
2b:e9:7c:39:e0:e5:0a:17:de:dd:7a:13:14:91:b8:63:c6:af:
a7:a4:44:00:41:32:c1:bd:4b:3b:1e:ce:c7:24:1c:4b:d9:f1:
9b:fe:cb:89:50:43:07:f0:69:1c:84:d1:f1:2b:1f:40:d5:92:
03:09:e3:38:17:22:ea:81:a0:5e:a4:ea:fe:f0:6a:2d:a0:a2:
7d:cb:a0:aa:e2:9d:ea:4f:13:f5:02:d7:59:85:0f:94:6b:b7:
41:0b:b6:20:80:35:63:7a:a6:5a:cb:e4:d6:93:fb:10:75:c9:
17:6c:53:07:ac:15:63:4d:74:06:15:7a:d4:7d:46:ed:c0:86:
f0:09:27:db:96:b4:c9:14:04:9a:c3:1f:46:4b:a8:67:2d:4b:
40:4a:b5:d0:13:97:1f:07:69:ec:03:0d:94:d9:f8:ac:ef:94:
48:73:5f:2e:77:62:a9:d6:a6:e3:87:53:7a:b2:72:78:8f:c7:
6f:0a:5e:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:25 2024 by rpki-client on console-ams.rpki-client.org