Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/awfY8jJ997pUbwvi8rSCq3ACnqQ.roa
File: awfY8jJ997pUbwvi8rSCq3ACnqQ.roa (raw, json)
Hash identifier: qL89dIxIOztpzehuUXNPRd5TBfA3SGDFABUuntZSPnk=
Subject key identifier: 6B:07:D8:F2:32:7D:F7:BA:54:6F:0B:E2:F2:B4:82:AB:70:02:9E:A4
Certificate issuer: /CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Certificate serial: 01856F1DBFEF03B8B4B991FAF514BCBF44A5
Authority key identifier: 5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/awfY8jJ997pUbwvi8rSCq3ACnqQ.roa
Signing time: Sun 01 Jan 2023 20:54:58 +0000
ROA not before: Sun 01 Jan 2023 20:54:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49854
IP address blocks: 45.146.40.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:1d:bf:ef:03:b8:b4:b9:91:fa:f5:14:bc:bf:44:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Validity
Not Before: Jan 1 20:54:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6b07d8f2327df7ba546f0be2f2b482ab70029ea4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:58:93:38:52:af:c3:d6:60:f3:d6:27:26:f0:
f9:76:ad:7c:92:2a:76:85:e7:f5:17:1c:91:7e:92:
99:93:f9:9e:93:92:20:e5:0a:ee:f4:77:a8:c0:00:
05:1c:30:7e:d5:e3:62:e5:b3:20:1f:b0:a8:00:4b:
2e:e3:19:e5:a1:fe:46:85:bc:0e:1d:42:e1:48:3d:
69:2a:2b:b3:d2:51:39:f4:86:78:62:93:1d:96:00:
e0:09:66:03:c5:ea:b4:d0:36:8d:49:4c:90:d2:93:
81:9a:63:e1:67:d4:40:fe:06:76:d4:c9:01:ac:ee:
bc:4b:b8:7d:ce:98:36:39:55:3f:72:21:08:25:b8:
2c:2e:33:eb:af:59:5e:71:3d:28:6c:29:e7:16:e0:
4a:f4:2a:6e:c1:50:f1:0f:dd:af:78:d4:33:b3:d8:
89:2d:cf:84:1e:1e:50:77:b7:d6:0c:21:cb:ce:72:
cd:eb:05:c8:3e:eb:28:e6:4a:2a:5a:2f:2a:f0:33:
d8:27:96:5b:a4:a3:4e:89:9f:e9:d4:84:4c:92:d9:
e0:f9:ad:12:74:eb:d5:69:46:f2:4f:dc:a4:06:6b:
a8:a5:f4:92:5a:90:80:07:b2:f2:72:0d:9c:ff:22:
cc:35:32:f4:3e:64:2b:6e:ea:65:0c:62:fd:78:cf:
aa:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:07:D8:F2:32:7D:F7:BA:54:6F:0B:E2:F2:B4:82:AB:70:02:9E:A4
X509v3 Authority Key Identifier:
keyid:5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/awfY8jJ997pUbwvi8rSCq3ACnqQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.40.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:0b:60:50:28:34:0e:cb:a8:a8:92:51:48:fe:4a:a2:5e:87:
a8:85:6b:04:4a:7f:88:bb:83:89:75:f7:cf:33:ba:f2:78:f0:
92:c6:7c:7c:be:9d:d4:b0:c1:db:d4:20:c9:fb:b6:7a:6e:6e:
d0:31:a5:6b:c1:26:b0:dc:45:4c:6b:d6:89:2b:51:70:b8:38:
24:ef:e4:b4:c6:ba:dc:5c:f3:4a:32:83:68:e9:52:44:de:8b:
d0:62:71:b7:1a:1b:9b:19:f9:25:aa:1a:40:a4:80:bb:4f:ce:
f3:a4:80:a6:6f:fc:d7:54:71:15:f2:32:bc:87:be:8c:ea:a3:
d5:41:4b:46:ae:f6:ab:b7:f4:49:14:ea:d6:1e:8d:8d:a7:44:
d2:30:b9:d3:f3:63:46:bc:8a:9a:76:3f:42:9a:83:b3:55:ca:
6a:13:51:8b:fa:c7:70:9b:5e:ca:31:01:8e:e5:ac:dc:45:54:
01:2f:31:47:8e:01:fb:23:b6:49:98:64:3e:2d:2d:81:e6:5a:
2e:a3:80:d2:c0:78:20:e1:4a:d6:ba:bb:a8:f6:c9:f1:fd:a5:
ad:4d:d7:62:15:09:3c:85:11:ae:f1:39:ac:f9:56:a9:8f:b2:
61:7b:09:f6:38:c3:98:7d:fc:4e:71:f5:b2:e6:77:ed:63:50:
65:53:30:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:47 2024 by rpki-client on console-fra.rpki-client.org