Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/SgVi2uNv_G1UY8LwJmpr-Xx57YA.roa
File: SgVi2uNv_G1UY8LwJmpr-Xx57YA.roa (raw, json)
Hash identifier: nXiMMBeEaGOZDRVRiZJbflQ6+yrwuvTQpumxbV4DbTI=
Subject key identifier: 4A:05:62:DA:E3:6F:FC:6D:54:63:C2:F0:26:6A:6B:F9:7C:79:ED:80
Certificate issuer: /CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Certificate serial: 018CC86FBFFACF1390F3DC031A107A086F64
Authority key identifier: 5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/SgVi2uNv_G1UY8LwJmpr-Xx57YA.roa
Signing time: Tue 02 Jan 2024 04:30:15 +0000
ROA not before: Tue 02 Jan 2024 04:30:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48031
IP address blocks: 194.105.60.0/24 maxlen: 24
194.107.92.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:bf:fa:cf:13:90:f3:dc:03:1a:10:7a:08:6f:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Validity
Not Before: Jan 2 04:30:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4a0562dae36ffc6d5463c2f0266a6bf97c79ed80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:b8:27:9c:73:5b:4d:da:41:c6:a7:4c:c3:80:
4c:47:75:41:86:5b:b0:0f:cb:0d:99:fc:f3:85:92:
2b:78:0f:bc:06:c7:11:47:67:ad:8c:3c:0d:e1:14:
fc:13:e9:4d:d9:b2:bc:91:3e:e4:97:b1:0b:53:85:
9c:80:49:dc:ae:4a:82:42:d0:73:0b:4c:b4:28:e9:
04:d3:75:7c:74:2b:94:49:a5:60:fe:68:53:b4:32:
c2:bb:dc:2b:35:46:da:a4:8f:89:2b:45:ef:f0:1a:
bb:d6:a9:32:b3:65:fe:83:76:c6:64:da:06:4f:a3:
54:c1:0e:67:0d:6a:f5:73:e4:6c:c9:ad:60:84:3f:
8a:45:84:7a:ba:1f:a0:ec:cf:12:3c:69:bb:98:8f:
d7:59:40:a0:fd:ac:80:c9:6c:ee:6c:a0:3f:9a:63:
85:99:21:bf:cf:ae:6f:c3:9f:a4:4f:68:d9:5e:b6:
45:fa:f1:b6:5d:1c:85:01:a4:76:6b:c1:9a:8b:cc:
d1:92:fc:c4:84:f6:61:21:27:b0:9e:57:e5:99:64:
63:3d:d3:9a:22:71:29:6b:db:95:ce:65:b1:f9:ea:
41:43:e4:7e:99:02:b9:95:35:92:26:d7:3c:73:8f:
49:77:ab:44:e5:f1:6b:4e:cc:28:0d:78:69:c4:c2:
83:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:05:62:DA:E3:6F:FC:6D:54:63:C2:F0:26:6A:6B:F9:7C:79:ED:80
X509v3 Authority Key Identifier:
keyid:5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/SgVi2uNv_G1UY8LwJmpr-Xx57YA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.105.60.0/24
194.107.92.0/24
Signature Algorithm: sha256WithRSAEncryption
09:aa:c9:d4:0b:99:22:7b:fd:a0:b5:ce:90:6f:16:da:34:11:
ee:c6:1e:2f:5b:55:f0:07:12:20:c8:60:45:e0:16:8b:2e:d7:
4d:d8:bf:e6:b9:4e:2d:f3:63:ae:0c:2a:e8:4f:3e:fd:52:fe:
6a:78:e3:b6:55:4a:de:66:05:71:81:7a:d5:e0:17:a5:03:1e:
54:99:b0:e0:ed:af:9f:51:e0:7e:d3:64:02:91:fd:a2:89:f9:
32:69:a9:c8:71:e6:45:5c:68:5c:6a:d2:6d:7d:cb:a5:09:45:
df:3b:cd:1a:de:1a:02:9d:72:2e:66:82:7b:50:7c:7a:88:9b:
eb:af:11:02:fe:a5:88:b8:f2:84:5d:4a:86:b1:fb:c9:16:10:
de:a3:15:83:ab:9e:89:ef:ab:8f:db:4f:60:13:03:0e:d9:30:
07:6d:4b:f1:ff:ce:a5:bc:f2:3c:8b:63:8a:cb:55:e1:7a:46:
66:b1:53:8d:04:26:cc:79:19:21:2e:a5:27:95:ab:58:07:94:
09:ef:a3:91:79:ca:c4:dc:2b:ba:fd:83:0e:e2:e0:3a:3f:87:
a4:6e:bf:6e:07:65:96:59:6c:bd:3c:b0:9c:56:3b:90:dd:e9:
c4:e8:a9:16:35:cd:51:cb:8f:21:ec:a7:d5:3a:4d:fd:98:ed:
3c:90:75:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:47 2024 by rpki-client on console-fra.rpki-client.org