Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/_nYXIj1wfaUdQq3mkBpBerd-Mnw.roa
File: _nYXIj1wfaUdQq3mkBpBerd-Mnw.roa (raw, json)
Hash identifier: WCxe/CZ0+RTrGu/jSiGX/YPlcNZrT2huSzSAzVOE8CI=
Subject key identifier: FE:76:17:22:3D:70:7D:A5:1D:42:AD:E6:90:1A:41:7A:B7:7E:32:7C
Certificate issuer: /CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Certificate serial: 018CC86FC18880E8116E4A1F074AEF074D89
Authority key identifier: 5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/_nYXIj1wfaUdQq3mkBpBerd-Mnw.roa
Signing time: Tue 02 Jan 2024 04:30:16 +0000
ROA not before: Tue 02 Jan 2024 04:30:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56985
IP address blocks: 5.183.131.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:c1:88:80:e8:11:6e:4a:1f:07:4a:ef:07:4d:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Validity
Not Before: Jan 2 04:30:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fe7617223d707da51d42ade6901a417ab77e327c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:b6:d8:a3:bc:c5:fc:66:39:a4:4b:89:0d:84:
84:0f:4c:f3:84:59:15:f1:8e:43:4f:ef:5a:63:79:
cb:e9:d7:06:9a:48:2d:39:ad:61:bb:91:94:8e:fc:
17:66:d0:76:4e:ee:01:7a:b2:b2:e9:b7:fa:b7:c2:
8b:a8:e8:35:fd:a3:e8:50:a0:b7:24:e4:09:2e:94:
41:fc:df:cf:b4:25:68:0c:b6:0a:ea:e0:6c:8f:fa:
04:31:da:69:e6:bd:d7:47:ba:94:52:b3:5a:fd:f9:
37:7e:a0:05:59:aa:4e:cc:61:38:44:80:f8:b5:51:
a1:73:25:a3:6f:10:a1:7d:90:2b:c0:29:12:9e:8d:
dc:a9:9c:33:a9:cd:53:c7:a9:68:44:43:fd:cc:28:
70:22:66:2f:01:45:62:61:dc:01:08:9e:65:89:7c:
4d:30:82:65:c6:c8:86:59:52:17:a5:5a:4a:c6:78:
ae:e1:97:fb:fa:f8:21:44:5f:02:07:3b:aa:0d:96:
f0:cd:64:46:17:5a:2d:4e:83:77:57:76:b3:85:4d:
a2:54:c4:fe:d6:08:e3:2e:04:6e:6a:44:d5:cd:ba:
d4:7d:68:58:be:53:32:d9:e7:64:3f:82:02:9c:10:
4c:04:e1:7f:7d:ba:32:9a:4a:57:f7:78:5e:f6:2a:
81:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:76:17:22:3D:70:7D:A5:1D:42:AD:E6:90:1A:41:7A:B7:7E:32:7C
X509v3 Authority Key Identifier:
keyid:5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/_nYXIj1wfaUdQq3mkBpBerd-Mnw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.183.131.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:04:08:70:62:08:f1:94:dd:fd:1b:2e:8d:4a:57:e4:5d:dd:
41:a9:05:45:ee:06:25:1b:03:59:d2:da:26:84:e6:4e:d8:fb:
13:4c:ad:f8:bb:e0:8f:3a:d3:cb:db:ac:bb:43:46:45:26:18:
4f:49:f1:41:3e:82:64:c0:d0:14:5f:d6:a5:a0:a0:ec:c0:e2:
d0:ca:bb:f0:8e:c8:94:ff:a6:4c:f3:02:98:01:15:17:a5:f8:
8e:67:d5:30:38:00:3a:8a:6f:68:9e:82:f1:6f:63:d5:61:24:
76:1a:5f:46:61:1b:f4:ef:f2:fb:44:e9:8c:63:31:42:ba:7c:
53:36:5d:74:99:12:61:33:46:c6:09:0c:52:eb:58:b9:0a:31:
ef:78:5c:84:36:5c:ae:13:93:48:dc:47:8c:df:52:eb:67:fb:
73:58:1b:9b:ae:2a:10:1a:02:ad:7d:84:81:0a:e4:eb:66:7a:
b0:cf:f7:92:70:c9:2a:e2:9a:44:0d:44:35:cc:58:6a:a0:84:
68:1a:a4:42:84:0e:5d:3c:34:aa:17:85:62:46:d9:f9:02:a2:
e8:ae:b3:b3:14:b2:59:bb:f5:05:8b:62:ae:ad:5e:f5:06:38:
c2:4a:35:82:56:e1:57:29:f6:f4:0c:5f:fb:f1:b8:6f:45:f9:
cb:69:6b:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:25 2024 by rpki-client on console-ams.rpki-client.org