Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/aqmHPR6lirOH5APD5l4zzBR8bpQ.roa
File: aqmHPR6lirOH5APD5l4zzBR8bpQ.roa (raw, json)
Hash identifier: SSE7tAop0dweWMNOzO8ABcyQgiTOAioH+5K7YD9im2A=
Subject key identifier: 6A:A9:87:3D:1E:A5:8A:B3:87:E4:03:C3:E6:5E:33:CC:14:7C:6E:94
Certificate issuer: /CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Certificate serial: 03A1E28B
Authority key identifier: 5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/aqmHPR6lirOH5APD5l4zzBR8bpQ.roa
Signing time: Sat 01 Jan 2022 14:07:06 +0000
ROA not before: Sat 01 Jan 2022 14:07:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 55286
IP address blocks: 92.119.129.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60940939 (0x3a1e28b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Validity
Not Before: Jan 1 14:07:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6aa9873d1ea58ab387e403c3e65e33cc147c6e94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e6:a5:11:50:3b:b8:f1:f1:17:93:42:03:c5:
b8:2a:46:be:d0:9c:f9:72:16:cf:2c:dc:66:0d:e4:
18:01:3a:1f:79:b5:93:a9:35:3f:55:ef:61:1b:2d:
df:a5:87:6d:07:4f:df:7a:d1:e9:df:9d:8b:07:7f:
30:ec:c7:37:0f:14:83:f3:b7:d5:8c:ce:cc:33:70:
ac:1d:c0:7f:56:50:8b:a4:27:9b:ed:55:50:b2:18:
9d:c9:59:4b:be:4d:ba:a7:d3:d2:bd:6c:e7:01:78:
04:b8:7c:ea:3a:38:eb:39:9f:86:30:4f:14:f8:0c:
38:2e:9a:ab:eb:a3:8b:af:72:4e:e2:07:fa:35:3a:
bc:e0:6c:4e:4f:52:37:eb:a5:18:d7:1d:3e:44:f3:
3b:16:26:bb:21:67:40:e6:ba:d1:5f:75:54:e6:4c:
b2:78:79:2a:c9:e5:7f:a5:2a:eb:8d:be:e3:49:6f:
a2:1f:3b:e1:be:5f:9c:ca:16:b7:b3:04:65:19:26:
cb:44:58:a3:37:e9:34:e9:a6:02:7a:6e:3b:a3:d6:
79:4b:da:1d:a1:5a:62:a0:90:6d:ed:52:83:5d:1b:
9c:9e:9a:ed:c2:35:2d:4f:0b:aa:66:75:44:15:49:
4a:2a:5a:95:d8:0e:18:4a:96:e7:ef:a0:1f:ea:37:
56:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:A9:87:3D:1E:A5:8A:B3:87:E4:03:C3:E6:5E:33:CC:14:7C:6E:94
X509v3 Authority Key Identifier:
keyid:5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/aqmHPR6lirOH5APD5l4zzBR8bpQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.119.129.0/24
Signature Algorithm: sha256WithRSAEncryption
73:66:e6:f2:2a:2a:75:e0:18:7e:52:55:4f:1d:f9:08:53:aa:
51:f2:81:cb:d8:85:ac:ef:8f:97:ef:82:61:4d:37:a2:a7:52:
65:f8:40:92:cb:9e:c3:b2:68:5a:b0:b2:b5:38:1f:5e:61:3d:
8e:49:23:c6:63:56:c2:84:64:b8:47:7e:79:1c:d3:8c:a9:ef:
5e:25:96:c2:87:80:29:a6:c6:d8:28:8d:d3:5b:5f:21:1b:76:
be:cb:3e:f7:17:8f:25:44:b7:ce:72:8a:d1:a5:3c:26:aa:6b:
50:ee:42:1c:7c:5f:8d:b3:e1:a9:0b:94:78:f3:68:47:d6:fd:
b5:d7:d4:ad:e6:9c:8e:f3:33:38:dd:e8:24:10:53:49:dc:bd:
ff:63:38:e1:33:33:48:26:53:84:83:bb:7e:bb:10:10:cd:bd:
e4:20:57:36:44:d6:d9:8d:b7:bc:ec:02:1c:21:80:b1:b3:18:
e3:f9:c7:1d:50:36:ec:ab:c3:d1:93:c7:c1:ad:f4:55:59:9e:
0f:dd:5b:c4:e3:69:50:fd:5c:91:c5:28:ba:9f:9e:95:2a:00:
01:39:ff:32:10:1e:3b:49:96:29:2d:44:47:0b:2e:51:fb:9b:
5b:22:50:03:7f:58:aa:b8:2f:bf:d8:d1:6c:0c:11:1d:10:e1:
e3:1f:b7:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:25 2024 by rpki-client on console-ams.rpki-client.org