Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/OxDIn7aw8nh7M4cUl1qte-hTZNY.roa
File: OxDIn7aw8nh7M4cUl1qte-hTZNY.roa (raw, json)
Hash identifier: StRY+SaVlGdQheiFO1MOynjFbra5aSw2a3rG16/lwmE=
Subject key identifier: 3B:10:C8:9F:B6:B0:F2:78:7B:33:87:14:97:5A:AD:7B:E8:53:64:D6
Certificate issuer: /CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Certificate serial: 0185A24C9248104A90B19AF4DFCE7282BA8D
Authority key identifier: 5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/OxDIn7aw8nh7M4cUl1qte-hTZNY.roa
Signing time: Wed 11 Jan 2023 19:26:45 +0000
ROA not before: Wed 11 Jan 2023 19:26:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35479
IP address blocks: 185.219.54.0/23 maxlen: 23
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:a2:4c:92:48:10:4a:90:b1:9a:f4:df:ce:72:82:ba:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Validity
Not Before: Jan 11 19:26:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3b10c89fb6b0f2787b338714975aad7be85364d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:0a:54:44:4e:91:66:cf:67:b0:50:f7:56:f7:
5a:07:9d:74:3e:f1:67:b2:93:48:c3:fc:1c:c0:48:
82:69:6f:e3:bb:cb:ef:3c:7a:94:d3:ca:eb:a8:89:
f8:bb:e4:94:ca:c8:99:15:af:ea:b4:20:74:8e:c0:
1c:48:98:61:2a:3a:90:59:3f:26:93:e1:9c:10:a2:
57:95:cb:b2:ad:c1:25:e4:60:ac:7d:6b:62:84:37:
7b:b7:ea:2f:0b:26:e0:2b:3f:63:4c:91:cc:66:aa:
56:89:f1:6f:05:52:d2:21:7d:a4:ad:65:b6:2b:1c:
e0:9b:15:6a:84:bb:e1:56:72:5a:ca:99:c5:3e:f9:
8b:20:90:46:4b:5b:7c:11:88:c3:71:46:a9:d4:3f:
88:9a:29:18:f0:8c:92:03:a2:cc:b9:74:29:06:57:
fc:d5:91:a4:dd:a2:13:52:ef:70:a0:e0:b9:7d:78:
d8:d5:0d:33:cb:61:44:33:e2:69:7e:d7:d8:c6:d3:
eb:da:84:f0:7b:2f:16:53:f8:35:06:7f:83:4f:d3:
e6:df:bc:38:1d:64:b4:51:40:7f:a0:b0:dd:48:66:
7e:71:60:74:6a:ad:24:f1:1f:7e:a1:96:3a:80:ab:
0c:b1:8a:75:9c:c6:2e:06:a5:de:2f:af:58:c4:cf:
17:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:10:C8:9F:B6:B0:F2:78:7B:33:87:14:97:5A:AD:7B:E8:53:64:D6
X509v3 Authority Key Identifier:
keyid:5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/OxDIn7aw8nh7M4cUl1qte-hTZNY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.219.54.0/23
Signature Algorithm: sha256WithRSAEncryption
4a:ed:ac:58:6a:52:cb:9a:72:cc:7b:28:cc:9f:d9:5d:65:9b:
a7:49:38:0c:8a:c4:6d:10:48:c6:2b:ff:49:6c:9c:be:81:b3:
4a:ee:75:98:1b:64:bb:76:0d:f6:95:f8:78:ef:18:a3:d4:2c:
7c:1a:fb:d1:ca:b8:03:56:0a:c7:5c:1c:fa:ac:cf:7a:91:a2:
a5:7c:0b:d4:8e:04:a2:bc:86:ae:1b:28:10:82:9a:d3:cf:24:
76:04:30:4c:ba:50:2c:79:67:b7:08:19:13:62:5e:06:6c:9d:
8d:2e:9d:4e:2d:54:73:b0:2d:52:1c:ed:fe:81:6b:c0:80:9e:
d6:50:f4:0a:0b:ef:22:8a:74:f2:d3:e8:62:6f:34:63:29:38:
b8:49:57:9b:06:ff:4c:11:5d:4f:18:ce:7c:ad:63:a4:8b:04:
a2:fd:c7:9f:20:0c:f9:78:4b:a4:da:76:56:fe:dc:19:04:3e:
c6:14:9a:5a:48:c2:01:95:c2:f5:77:39:0d:6f:64:28:d7:a7:
5a:23:ec:03:05:88:4c:d7:5e:69:e8:ae:c8:4f:1c:e1:46:46:
24:3d:fb:96:23:56:8e:a4:d2:93:69:90:46:12:f7:fe:26:7b:
c8:f3:ba:da:8c:7f:51:b5:a8:7f:e7:f1:35:c9:6c:67:3a:5e:
a5:b4:85:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:47 2024 by rpki-client on console-fra.rpki-client.org