Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/Qp9c-nVjOE3yVRRQzZYlyT4RJAQ.roa
File: Qp9c-nVjOE3yVRRQzZYlyT4RJAQ.roa (raw, json)
Hash identifier: LmPUEbF19tS7kpe8elauKVEUeVuh9gMzBU+5a7tX8Mo=
Subject key identifier: 42:9F:5C:FA:75:63:38:4D:F2:55:14:50:CD:96:25:C9:3E:11:24:04
Certificate issuer: /CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Certificate serial: 01856F1DC737C64455E91F80975B3360B84D
Authority key identifier: 5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/Qp9c-nVjOE3yVRRQzZYlyT4RJAQ.roa
Signing time: Sun 01 Jan 2023 20:55:00 +0000
ROA not before: Sun 01 Jan 2023 20:55:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56985
IP address blocks: 5.183.131.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:1d:c7:37:c6:44:55:e9:1f:80:97:5b:33:60:b8:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Validity
Not Before: Jan 1 20:55:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=429f5cfa7563384df2551450cd9625c93e112404
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:83:c2:6f:2b:4a:7c:4f:fc:31:3e:d9:e4:44:
a8:36:d8:95:9b:d9:2f:0a:61:3b:a9:ed:be:aa:f1:
fd:6e:25:75:e8:1d:e2:ad:93:cb:75:4d:43:14:7e:
22:6d:56:66:3f:2a:69:06:6c:ba:36:58:ee:2d:4d:
24:75:49:94:cc:92:fa:08:7d:7a:2b:21:ed:a1:04:
9f:4d:af:51:53:e2:88:0e:90:ba:98:6e:0f:7d:e7:
da:8f:a4:64:27:14:d3:ca:3c:9c:e9:24:55:e3:3b:
30:3a:97:19:d6:c0:a2:4f:26:09:a7:ab:6a:57:42:
c2:b0:81:4e:17:24:a9:1d:3c:f6:cf:2e:8b:a7:3a:
94:a3:a0:c5:b4:a9:56:83:0f:e7:f8:e4:e8:99:5e:
35:c5:94:2b:a2:13:51:3a:b6:0f:e3:05:89:60:f8:
71:55:4b:68:73:60:83:f9:96:fa:e5:aa:30:02:0b:
1c:50:5a:16:06:b3:a0:a6:a5:77:35:9b:dc:fb:b6:
92:fa:0d:28:61:81:66:a1:84:cf:68:b2:92:41:37:
0c:4d:8e:8a:84:15:92:8f:de:a3:cb:7d:7e:6f:eb:
17:0f:f7:a4:f9:8e:05:12:69:64:2f:f0:af:e9:42:
55:53:ba:f6:75:0f:65:82:e7:15:1a:33:26:2d:b7:
03:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:9F:5C:FA:75:63:38:4D:F2:55:14:50:CD:96:25:C9:3E:11:24:04
X509v3 Authority Key Identifier:
keyid:5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/Qp9c-nVjOE3yVRRQzZYlyT4RJAQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.183.131.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:c2:b7:de:4a:78:aa:0f:7b:69:74:0b:51:63:eb:3e:e6:a4:
45:a8:df:38:f0:72:48:31:7d:0b:66:8c:13:57:2c:bc:63:42:
a3:ac:ca:3a:02:ab:c1:3c:23:bc:af:ec:83:6d:c7:8e:30:55:
26:5f:c7:f4:03:25:bc:69:b6:e8:68:09:9d:9e:f6:71:1c:88:
87:00:0c:24:b3:96:b9:44:e0:bd:08:50:a8:46:89:47:dd:94:
b2:33:6f:ed:16:9c:29:0a:21:0a:59:a2:af:eb:32:97:d8:9f:
59:e6:c5:6f:6e:e3:1c:31:5f:92:e8:e8:4a:10:ff:8e:13:cd:
e3:67:c5:5b:15:cb:24:db:22:78:55:b0:9a:e0:87:cd:55:d4:
d2:0d:3c:b6:ae:35:c4:e2:0a:a1:33:ab:3f:bc:9f:2b:fb:93:
9e:1c:55:26:ce:8a:79:82:cf:31:4c:71:35:fe:5e:f1:bc:37:
e9:9d:35:a4:41:e9:10:61:6e:a1:be:c3:28:5a:84:3a:71:ee:
de:ff:fd:f6:90:10:35:d1:e3:28:bc:6f:6c:31:e0:94:0d:d0:
1f:05:a3:a1:4e:eb:46:ac:00:98:e8:5f:8d:8c:21:cf:29:82:
ec:8c:a8:d0:ef:d5:57:cb:1e:ae:2d:a4:ba:f6:1c:c2:62:fe:
fa:27:c4:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:47 2024 by rpki-client on console-fra.rpki-client.org