Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/OFdnbtwQuFz_hlcZo1BWd85M6dk.roa
File: OFdnbtwQuFz_hlcZo1BWd85M6dk.roa (raw, json)
Hash identifier: A8ecBh0uwbJ0IFiTPus4/7dFrlNhMStXWyklTt9LRLs=
Subject key identifier: 38:57:67:6E:DC:10:B8:5C:FF:86:57:19:A3:50:56:77:CE:4C:E9:D9
Certificate issuer: /CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Certificate serial: 04BBC7D8
Authority key identifier: 5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/OFdnbtwQuFz_hlcZo1BWd85M6dk.roa
Signing time: Tue 19 Apr 2022 10:35:14 +0000
ROA not before: Tue 19 Apr 2022 10:35:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47430
IP address blocks: 92.119.228.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79415256 (0x4bbc7d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Validity
Not Before: Apr 19 10:35:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3857676edc10b85cff865719a3505677ce4ce9d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:91:8c:12:8a:0e:b3:a5:19:15:42:da:44:be:
f7:ec:08:3a:34:fc:5d:f3:e2:83:e3:f8:de:29:a6:
47:6a:06:34:5c:c7:f3:5a:1d:b2:c2:29:22:38:57:
78:55:34:82:93:5b:76:6e:79:71:8b:78:e5:36:be:
0d:94:44:81:1d:a0:a3:f4:95:2b:5e:a0:3f:e6:ad:
05:97:af:3c:c4:dd:e1:dc:8b:4d:0a:c8:62:b4:94:
ad:70:ee:03:dc:41:66:35:26:7d:09:97:83:21:96:
af:59:ad:3a:18:1f:77:92:71:7e:f1:5a:e6:c9:26:
a8:f8:bf:a8:10:5a:92:db:47:9b:7e:e1:ff:44:e4:
03:ab:1e:14:98:ea:50:43:47:87:a3:ae:8e:9d:fa:
da:b8:2e:ca:7a:fe:e3:be:a9:38:c2:03:1c:c6:db:
49:03:d5:d0:e8:7a:28:a1:bf:44:00:60:66:b6:cb:
2a:a6:b4:4b:77:85:5b:21:3d:2b:9f:73:bb:21:98:
b9:cb:d8:0b:a4:51:32:9c:07:98:a2:c7:c6:25:1f:
4d:b2:bb:db:24:45:e7:3c:3d:a6:65:15:25:bf:b3:
95:ad:61:69:50:fc:3b:74:48:53:3a:38:96:20:a4:
3f:dc:31:84:a4:46:dd:af:4b:31:08:8a:5c:e5:3b:
ac:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:57:67:6E:DC:10:B8:5C:FF:86:57:19:A3:50:56:77:CE:4C:E9:D9
X509v3 Authority Key Identifier:
keyid:5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/OFdnbtwQuFz_hlcZo1BWd85M6dk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.119.228.0/24
Signature Algorithm: sha256WithRSAEncryption
15:3a:5f:e3:69:e7:21:82:e9:c5:51:1e:79:09:78:07:84:75:
53:bd:e0:78:e4:80:c7:22:9e:cd:a9:10:44:90:74:e2:ec:ae:
a3:e2:32:8a:83:d2:e8:8c:ce:38:f3:f5:40:1d:7b:28:66:89:
52:36:4f:69:37:f0:eb:d1:a3:81:da:29:6e:fd:df:bb:44:1d:
c0:94:09:13:04:70:cd:34:5f:7d:31:7f:03:0b:49:b5:5b:7b:
1d:78:6f:09:2f:7c:e8:42:c8:e1:62:04:63:21:c7:bd:64:0c:
6f:70:fe:e3:1c:f8:bc:99:49:04:a4:d5:9d:83:7f:8c:d5:35:
af:f5:81:72:9d:8c:da:8a:04:7c:5e:75:61:f8:ac:d2:7f:3b:
e7:a7:c7:ef:c2:53:15:46:a6:41:52:df:47:1a:d9:5e:45:9f:
00:c5:aa:1a:72:a1:c1:57:9b:ac:92:96:f7:a5:af:bc:03:09:
ed:95:78:7c:19:d3:95:15:fe:d4:36:0d:88:c6:84:51:fb:c5:
62:32:28:35:47:0c:98:a6:59:04:e6:50:ed:ef:38:8f:87:be:
45:fb:8e:ca:d7:25:ba:a5:47:48:01:f7:0a:05:ba:ba:04:8b:
0a:b8:6a:0b:df:ec:58:08:25:75:45:18:3a:ec:a4:91:ea:7a:
39:3f:02:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:25 2024 by rpki-client on console-ams.rpki-client.org