Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/X_DDPvn6CiWdwQxO0kWzVwHVbeY.roa
File: X_DDPvn6CiWdwQxO0kWzVwHVbeY.roa (raw, json)
Hash identifier: Iqvu0HdCYZcR7+hwpHJcVaWvmGcbKEZBvFs7h8yc8Ic=
Subject key identifier: 5F:F0:C3:3E:F9:FA:0A:25:9D:C1:0C:4E:D2:45:B3:57:01:D5:6D:E6
Certificate issuer: /CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Certificate serial: 018779BCF30D2B12205D8AF2DDB3F0C809AC
Authority key identifier: 5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/X_DDPvn6CiWdwQxO0kWzVwHVbeY.roa
Signing time: Thu 13 Apr 2023 08:30:38 +0000
ROA not before: Thu 13 Apr 2023 08:30:38 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58061
IP address blocks: 92.119.130.0/24 maxlen: 24
92.119.128.0/24 maxlen: 24
5.183.128.0/24 maxlen: 24
194.169.162.0/24 maxlen: 24
194.169.161.0/24 maxlen: 24
2.56.112.0/24 maxlen: 24
2.56.113.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:79:bc:f3:0d:2b:12:20:5d:8a:f2:dd:b3:f0:c8:09:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Validity
Not Before: Apr 13 08:30:38 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5ff0c33ef9fa0a259dc10c4ed245b35701d56de6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9a:56:8a:c3:22:95:59:67:7c:5b:0e:f8:91:
9d:81:d1:ce:56:56:2d:74:fd:c2:90:f6:3a:1d:59:
43:1e:48:06:1f:55:97:10:7f:1f:48:62:72:2d:57:
6a:7c:64:a9:13:04:79:37:44:55:50:f6:fd:34:51:
e9:d3:d7:a0:b5:95:af:b0:5f:71:aa:fe:5b:b0:69:
d3:ed:86:71:07:4d:09:d3:f0:dd:d5:00:21:c3:d5:
eb:c9:da:03:a8:20:f9:ba:2b:be:0c:52:4f:91:52:
e4:39:42:5b:c9:a8:01:d4:25:c3:6b:bc:9d:b4:53:
ee:53:ea:aa:0b:cb:c0:89:38:4d:e9:56:65:96:be:
00:c4:6f:5d:78:9e:e7:94:79:0f:24:c8:82:3d:0b:
f4:06:de:1b:b9:87:29:53:e8:37:39:79:23:c7:b5:
54:69:46:bb:9c:b9:9c:56:dc:55:dd:f8:2a:c7:e5:
a7:de:93:fe:50:01:0b:35:09:f9:b3:b9:e1:ba:c7:
ee:a8:b3:40:e5:c1:12:b6:56:b9:97:e8:01:21:38:
33:b8:87:07:b8:15:67:5c:39:43:f2:41:95:fe:7f:
b0:a7:5c:5d:b1:ea:da:8a:0d:0b:ce:4a:ce:5d:d3:
1f:6d:85:70:34:f0:46:14:7c:c8:1a:82:77:0f:fd:
ab:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:F0:C3:3E:F9:FA:0A:25:9D:C1:0C:4E:D2:45:B3:57:01:D5:6D:E6
X509v3 Authority Key Identifier:
keyid:5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/X_DDPvn6CiWdwQxO0kWzVwHVbeY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.112.0/23
5.183.128.0/24
92.119.128.0/24
92.119.130.0/24
194.169.161.0-194.169.162.255
Signature Algorithm: sha256WithRSAEncryption
4a:b9:9c:fd:7b:1f:a1:0f:61:ae:8f:4b:81:fb:34:9d:66:3f:
8b:30:6a:eb:a9:17:d8:b8:3a:bc:ff:40:72:18:30:21:6a:be:
ee:93:20:29:71:90:96:3c:23:25:a9:7f:28:39:b6:7e:39:b4:
7d:84:71:4b:78:b0:c5:49:6d:26:a4:e3:23:b9:aa:48:1e:69:
5d:9e:db:51:75:28:c6:61:11:6e:00:c5:68:f8:25:12:05:af:
97:2e:83:c7:c4:28:9a:33:c0:8b:2f:8a:14:b9:03:b6:e6:81:
4f:7c:bb:58:0e:24:f5:60:21:d7:41:19:a8:b7:ee:f9:2d:fb:
91:23:ab:d1:af:e5:f9:30:bb:bd:15:2c:12:e0:a7:b1:1e:19:
d1:fb:8e:dd:0b:6a:a1:f9:ea:24:eb:bb:c3:83:9e:83:d8:6e:
9b:69:7f:9d:f3:c4:f8:7c:01:50:ff:b8:8b:ae:f8:a6:25:6d:
5a:f0:ec:32:60:67:4d:82:9f:4a:5f:06:10:81:bb:b3:ff:8e:
cb:a0:87:5e:c1:b8:e8:38:02:f6:23:68:5b:ee:29:73:04:17:
f3:c1:1b:18:09:38:3c:ae:c5:b1:30:09:e0:65:4a:00:13:64:
38:9d:2a:ad:f6:44:37:01:3a:b4:67:ad:9c:31:e3:79:62:5a:
15:48:25:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:25 2024 by rpki-client on console-ams.rpki-client.org