Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/b9TxV0_iF1_XKDhqTVtV3FRdqZQ.roa
File: b9TxV0_iF1_XKDhqTVtV3FRdqZQ.roa (raw, json)
Hash identifier: 0ppvqzRClR4rEqwXOZatn0btubZK6lm3dMoL85e7nMU=
Subject key identifier: 6F:D4:F1:57:4F:E2:17:5F:D7:28:38:6A:4D:5B:55:DC:54:5D:A9:94
Certificate issuer: /CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Certificate serial: 0189B0D67F9CA2F31BDE49A206B350DEE46C
Authority key identifier: 5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/b9TxV0_iF1_XKDhqTVtV3FRdqZQ.roa
Signing time: Tue 01 Aug 2023 11:23:14 +0000
ROA not before: Tue 01 Aug 2023 11:23:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34665
IP address blocks: 45.136.68.0/24 maxlen: 24
5.183.129.0/24 maxlen: 24
194.32.239.0/24 maxlen: 24
194.32.238.0/24 maxlen: 24
45.14.222.0/24 maxlen: 24
91.188.212.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:b0:d6:7f:9c:a2:f3:1b:de:49:a2:06:b3:50:de:e4:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Validity
Not Before: Aug 1 11:23:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6fd4f1574fe2175fd728386a4d5b55dc545da994
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:b1:81:59:a5:f9:d5:0a:19:86:0d:1f:ee:73:
2c:4e:57:4d:f4:ce:f0:7b:37:9f:78:56:d3:f6:65:
3c:05:32:35:5c:c2:fb:01:b1:7c:97:92:69:f9:84:
ae:ca:03:16:31:17:2c:0f:89:ae:85:1c:cd:c3:70:
91:97:9e:d4:e7:9a:d6:7e:fa:62:10:a1:11:b5:c0:
cd:ad:47:90:42:42:5f:51:31:38:2c:f3:b6:99:28:
6a:94:47:a1:aa:12:49:72:b5:fb:68:1c:81:eb:db:
dc:70:50:35:b7:7e:74:fc:b0:f4:ff:8a:f1:f8:86:
d1:35:cf:d4:ab:00:d1:78:d3:bf:3c:70:20:ff:81:
c7:03:1c:44:ae:0d:50:7d:a4:a4:f5:1f:b4:e1:76:
5d:0f:78:fc:79:9a:7c:81:d8:d2:7b:8d:39:2c:58:
fb:02:78:ae:e5:5c:12:50:60:40:a7:7a:ac:d0:c3:
d1:ab:80:17:96:b3:90:8b:05:bf:02:bd:3b:75:b8:
aa:72:2b:03:17:e2:5f:87:a7:41:13:89:bb:71:a5:
81:e3:09:72:0a:be:7f:7f:8b:1b:25:eb:2e:0d:ca:
2a:47:b6:a1:d2:4a:72:0f:8f:e9:61:88:3a:58:69:
34:7d:4b:e2:d4:59:2e:66:97:92:32:e6:ac:a8:f5:
19:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:D4:F1:57:4F:E2:17:5F:D7:28:38:6A:4D:5B:55:DC:54:5D:A9:94
X509v3 Authority Key Identifier:
keyid:5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/b9TxV0_iF1_XKDhqTVtV3FRdqZQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.183.129.0/24
45.14.222.0/24
45.136.68.0/24
91.188.212.0/22
194.32.238.0/23
Signature Algorithm: sha256WithRSAEncryption
68:6b:1f:98:11:a7:99:24:f6:33:c5:a0:c9:af:fa:fa:0d:a9:
56:6e:fc:a0:af:39:58:28:12:da:09:32:6b:6b:1f:a6:19:1f:
a9:81:ff:94:2f:90:b8:0e:9a:ef:21:97:3e:75:4b:d9:5a:4d:
d3:98:9d:7d:9b:fb:75:85:73:05:3f:bb:52:07:3c:90:f6:e4:
42:4c:78:ab:96:9b:c5:6f:a4:48:de:96:9e:90:6e:c5:50:e9:
fd:3c:81:02:78:40:2d:01:a7:f8:6b:09:5b:b3:f9:35:e5:9e:
22:d4:8e:cc:86:da:e6:91:52:4a:10:bf:8f:b1:fb:0f:52:19:
9e:7a:99:d2:48:82:e0:53:31:70:09:8a:a7:76:90:ba:fb:66:
93:40:58:db:9f:18:94:0a:38:f2:ae:a8:66:2d:58:59:fd:da:
2a:94:3e:a4:fb:a5:4b:6b:f1:2e:0a:ba:46:13:ad:69:c2:b0:
52:86:b2:b2:b7:fd:58:b9:89:5a:fb:ae:e4:84:da:45:ac:ae:
6c:5b:e2:88:3f:82:ce:a3:7e:5a:7b:1f:92:bf:75:52:b4:75:
82:52:60:f1:38:db:99:1b:54:aa:b9:63:c9:d6:35:8b:33:9a:
25:d6:19:6b:0a:2f:9a:e4:d4:b3:16:82:1d:3e:7b:f2:61:60:
a3:c3:e9:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:47 2024 by rpki-client on console-fra.rpki-client.org