Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/SPv4PMV24umzplhEhOsJuydB5Yg.roa
File: SPv4PMV24umzplhEhOsJuydB5Yg.roa (raw, json)
Hash identifier: Yunrfngo+VxB+u8CGEk1XVMPQAlGY5cdMvA7ke4KNNE=
Subject key identifier: 48:FB:F8:3C:C5:76:E2:E9:B3:A6:58:44:84:EB:09:BB:27:41:E5:88
Certificate issuer: /CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Certificate serial: 03A3C9C0
Authority key identifier: 5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/SPv4PMV24umzplhEhOsJuydB5Yg.roa
Signing time: Sat 01 Jan 2022 14:07:07 +0000
ROA not before: Sat 01 Jan 2022 14:07:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200644
IP address blocks: 193.160.210.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61065664 (0x3a3c9c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Validity
Not Before: Jan 1 14:07:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=48fbf83cc576e2e9b3a6584484eb09bb2741e588
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d7:ca:31:34:e3:c3:f5:34:01:60:b6:3f:5e:
ac:e3:1f:d1:49:cf:67:f1:ae:6f:5f:b4:c6:c7:46:
df:56:2f:fe:21:66:fe:67:ab:24:9d:a4:61:eb:0d:
85:6d:a4:60:ab:fe:ce:d2:e3:a2:1c:eb:8b:2a:48:
b9:a1:e8:af:95:92:3c:e6:f5:cc:21:d8:b9:64:af:
7b:67:c1:0d:33:53:03:44:33:45:86:e5:18:99:15:
90:40:22:fd:42:74:e0:3c:75:5d:a5:2d:55:29:18:
07:cb:e3:46:c2:dd:53:2d:ec:60:70:74:42:13:ca:
d1:3d:07:99:7e:c1:a3:95:e0:fd:c5:66:8e:59:d1:
5f:eb:22:db:20:c3:83:5e:e9:52:ed:ce:3e:44:db:
69:e7:46:c0:e4:14:e8:55:6b:28:24:b1:d3:c4:ed:
5b:d1:89:54:d6:49:c4:13:51:04:4f:d8:ab:81:3b:
e7:60:f6:e0:8f:01:f5:13:8b:dd:4e:f6:d9:88:cb:
1f:be:d7:d6:29:77:6a:9b:66:23:3f:bd:24:fa:07:
d3:f1:5a:19:0c:e7:ee:53:c0:5f:4d:e3:a9:06:8f:
7a:87:1d:46:ae:78:08:12:fd:cc:26:08:49:33:3a:
a4:46:3a:3d:e5:76:db:53:73:e4:80:7f:cc:f2:48:
3a:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:FB:F8:3C:C5:76:E2:E9:B3:A6:58:44:84:EB:09:BB:27:41:E5:88
X509v3 Authority Key Identifier:
keyid:5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/SPv4PMV24umzplhEhOsJuydB5Yg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.160.210.0/24
Signature Algorithm: sha256WithRSAEncryption
36:bf:93:81:3e:31:aa:a8:a9:c5:c9:0d:b1:73:29:b9:8a:19:
31:a9:bc:cc:c8:fe:f3:3f:86:24:80:3c:95:77:46:96:7c:8e:
9f:50:50:55:b8:83:a5:af:58:a6:58:19:e8:58:77:a1:89:b0:
5a:f3:d8:8f:7b:24:7c:99:72:0e:ba:28:28:71:c1:9a:db:c9:
b9:93:17:8f:0e:d6:d9:9f:1c:17:1a:81:b6:e6:80:b9:41:97:
1d:c5:57:6e:e9:f7:1b:1f:c3:ac:26:00:0c:3b:8c:50:b7:07:
3b:23:2c:21:0c:d1:ff:55:6f:b4:ad:c9:62:bc:c3:d3:61:7e:
2c:38:b9:49:a1:88:2d:02:ec:3c:13:a0:5d:f2:85:ed:3a:ba:
55:b1:70:12:57:90:00:12:bf:34:a1:8e:3a:b7:14:d1:15:a7:
3b:77:07:61:dd:8f:a5:0e:8b:04:87:75:fb:60:8c:1c:ee:47:
6c:8a:4c:72:e1:95:01:93:09:52:2f:28:ed:ea:0e:47:d0:14:
b6:cb:2a:70:66:24:6d:d5:37:be:86:df:42:03:14:b0:aa:3c:
39:e0:dc:c2:88:39:87:de:f5:aa:23:aa:5f:83:fa:ac:b8:68:
38:f2:56:61:4b:de:4d:0b:1b:5a:4e:6c:2e:a1:9e:3d:2a:9e:
00:8c:32:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:47 2024 by rpki-client on console-fra.rpki-client.org