Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/duGJjIVuj_0cGPcg6Ve7FPjakuM.roa
File: duGJjIVuj_0cGPcg6Ve7FPjakuM.roa (raw, json)
Hash identifier: UK1PhyPhtQ7fWW+MUp3UZOfAuTOgsU2o61U8xS233Go=
Subject key identifier: 76:E1:89:8C:85:6E:8F:FD:1C:18:F7:20:E9:57:BB:14:F8:DA:92:E3
Certificate issuer: /CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Certificate serial: 05309BDA
Authority key identifier: 5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/duGJjIVuj_0cGPcg6Ve7FPjakuM.roa
Signing time: Tue 07 Jun 2022 14:52:03 +0000
ROA not before: Tue 07 Jun 2022 14:52:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9123
IP address blocks: 2.59.42.0/24 maxlen: 24
2.59.43.0/24 maxlen: 24
2.59.40.0/24 maxlen: 24
2.59.41.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 87071706 (0x5309bda)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Validity
Not Before: Jun 7 14:52:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=76e1898c856e8ffd1c18f720e957bb14f8da92e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:cb:18:aa:33:72:9b:07:50:fa:89:a0:d0:6f:
0a:8f:70:df:6b:26:7c:ab:ef:aa:85:d7:97:00:02:
e4:5e:d7:db:4c:48:9e:e1:17:2c:1a:0b:e7:57:81:
41:4c:5d:74:d4:4b:cd:05:20:87:ae:12:cd:b3:29:
03:92:80:2a:61:21:f7:92:fd:29:47:b0:ea:bf:79:
6a:22:7a:11:25:fc:5e:d9:ac:d8:18:12:47:fc:16:
e3:ec:18:e0:72:61:2f:87:80:e5:13:f8:b3:9e:36:
0b:eb:69:bb:3b:16:3f:95:92:a0:88:d5:52:b2:14:
5c:ec:32:24:e2:96:e6:5d:1b:29:14:85:3e:7d:15:
13:52:19:ec:1a:a3:9a:d5:0c:08:65:17:69:ad:19:
bc:e5:bc:99:3a:a4:68:81:d1:cd:3d:73:4b:b7:7b:
c6:51:f1:84:9f:fd:62:4d:98:43:28:90:8a:fd:9f:
99:68:fb:f6:4e:4a:2c:b8:88:6a:bd:c8:74:d6:64:
a8:07:5a:da:ea:09:ee:4e:17:0c:d9:23:13:89:aa:
5e:f4:d6:bf:3e:d2:c9:2b:7a:79:3a:53:ba:21:db:
90:7d:3c:a3:51:d8:50:1a:0e:c9:e9:69:fd:9a:fc:
27:1f:4d:11:7d:78:1b:c6:7d:37:f9:02:19:6d:5b:
52:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:E1:89:8C:85:6E:8F:FD:1C:18:F7:20:E9:57:BB:14:F8:DA:92:E3
X509v3 Authority Key Identifier:
keyid:5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/duGJjIVuj_0cGPcg6Ve7FPjakuM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.40.0/22
Signature Algorithm: sha256WithRSAEncryption
98:cd:f7:6c:2e:17:93:9e:68:bf:82:1d:60:8b:a7:d4:86:20:
a1:f8:1d:48:84:a4:01:79:2f:f0:0c:bf:31:1e:2a:66:0d:d8:
f5:a7:ee:8c:c0:fe:79:de:5c:ec:49:7d:d1:d6:fd:7e:2f:42:
d2:8f:db:c9:fa:2f:cc:0b:a9:26:76:98:fc:58:0a:30:d1:9a:
a8:d7:d3:ae:4e:44:74:a7:05:97:17:8f:05:95:14:f8:9b:cb:
7d:27:60:d5:ae:81:88:69:bb:8e:d7:9f:21:a6:0d:26:72:8b:
a6:4f:6b:d5:ee:23:46:5e:be:f5:8e:c9:bf:17:c4:37:d9:c0:
c8:95:4b:6d:93:8a:c4:b8:52:20:ca:72:3f:68:32:f7:e4:0f:
3e:a4:b8:11:65:da:bb:67:d2:34:47:f8:89:b6:59:91:da:60:
3c:fd:4b:61:e0:f3:3f:09:85:c4:bf:2f:1d:14:9b:ba:14:b7:
cc:e1:13:b2:8c:75:7e:ff:59:fa:10:be:59:a0:a5:0b:b3:80:
fb:d1:ab:df:2d:b5:f1:f8:cc:9d:71:a7:98:43:f6:74:5a:0a:
f7:80:78:59:5e:b1:9f:a1:51:a1:86:ff:01:1b:16:ab:32:7b:
16:84:d2:54:4a:60:0a:fa:a0:f0:61:cb:25:c9:75:1e:2f:e2:
bd:ac:8f:f3
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBTCb2jANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
ZGEzOTQxYzI3Y2ZlNWMyMzRjNGJmMjIxZWNiMmE1NzliMmRlYWFiMB4XDTIyMDYw
NzE0NTIwM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNzZlMTg5OGM4NTZl
OGZmZDFjMThmNzIwZTk1N2JiMTRmOGRhOTJlMzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALDLGKozcpsHUPqJoNBvCo9w32smfKvvqoXXlwAC5F7X20xI
nuEXLBoL51eBQUxddNRLzQUgh64SzbMpA5KAKmEh95L9KUew6r95aiJ6ESX8Xtms
2BgSR/wW4+wY4HJhL4eA5RP4s542C+tpuzsWP5WSoIjVUrIUXOwyJOKW5l0bKRSF
Pn0VE1IZ7BqjmtUMCGUXaa0ZvOW8mTqkaIHRzT1zS7d7xlHxhJ/9Yk2YQyiQiv2f
mWj79k5KLLiIar3IdNZkqAda2uoJ7k4XDNkjE4mqXvTWvz7SySt6eTpTuiHbkH08
o1HYUBoOyelp/Zr8Jx9NEX14G8Z9N/kCGW1bUsUCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBR24YmMhW6P/RwY9yDpV7sU+NqS4zAfBgNVHSMEGDAWgBRdo5QcJ8/lwjTE
vyIeyypXmy3qqzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1hhT1VIQ2ZQNWNJMHhMOGlIc3NxVjVzdDZxcy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvODAvMzBlZDNlLWM0YzQtNGRlOC1iNGYxLWYxMWEzOWYyNmMzYi8x
L2R1R0pqSVZ1al8wY0dQY2c2VmU3RlBqYWt1TS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODAv
MzBlZDNlLWM0YzQtNGRlOC1iNGYxLWYxMWEzOWYyNmMzYi8xL1hhT1VIQ2ZQNWNJ
MHhMOGlIc3NxVjVzdDZxcy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAgI7KDANBgkqhkiG9w0BAQsFAAOC
AQEAmM33bC4Xk55ov4IdYIun1IYgofgdSISkAXkv8Ay/MR4qZg3Y9afujMD+ed5c
7El90db9fi9C0o/byfovzAupJnaY/FgKMNGaqNfTrk5EdKcFlxePBZUU+JvLfSdg
1a6BiGm7jtefIaYNJnKLpk9r1e4jRl6+9Y7JvxfEN9nAyJVLbZOKxLhSIMpyP2gy
9+QPPqS4EWXau2fSNEf4ibZZkdpgPP1LYeDzPwmFxL8vHRSbuhS3zOETsox1fv9Z
+hC+WaClC7OA+9Gr3y218fjMnXGnmEP2dFoK94B4WV6xn6FRoYb/ARsWqzJ7FoTS
VEpgCvqg8GHLJcl1Hi/ivayP8w==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:25 2024 by rpki-client on console-ams.rpki-client.org