Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/h5qbqTyubCMCOpVg1Owi8JvK2IA.roa
File: h5qbqTyubCMCOpVg1Owi8JvK2IA.roa (raw, json)
Hash identifier: y+bFWF3atppR5jNszVpZ/KiJ7T+/mQ/lhf1m0mfXWpc=
Subject key identifier: 87:9A:9B:A9:3C:AE:6C:23:02:3A:95:60:D4:EC:22:F0:9B:CA:D8:80
Certificate issuer: /CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Certificate serial: 01856F1DC3BE914951B2AF4DE8538DB0F6EF
Authority key identifier: 5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/h5qbqTyubCMCOpVg1Owi8JvK2IA.roa
Signing time: Sun 01 Jan 2023 20:54:59 +0000
ROA not before: Sun 01 Jan 2023 20:54:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51804
IP address blocks: 45.146.43.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:1d:c3:be:91:49:51:b2:af:4d:e8:53:8d:b0:f6:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Validity
Not Before: Jan 1 20:54:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=879a9ba93cae6c23023a9560d4ec22f09bcad880
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:42:2c:43:5e:42:66:8c:2d:28:0a:95:12:4e:
34:43:6d:4f:1c:a2:1d:8a:75:df:22:fd:cb:b1:38:
da:5b:eb:55:e4:33:1f:64:06:c1:6b:6e:87:65:d5:
d1:8a:b7:8b:36:43:b7:be:9b:9f:7f:6f:2e:fe:e7:
65:dc:ea:14:ac:66:19:62:84:b3:d7:d9:97:f7:c7:
2c:26:de:11:49:ad:ff:18:09:58:2a:62:84:3b:7e:
78:a1:de:ef:94:ee:d2:07:24:58:7f:d5:e2:c3:89:
c4:dc:ed:bf:98:21:2d:d4:6d:2e:ab:0b:a1:76:d7:
ec:47:a2:bf:3c:a1:6a:0b:66:dd:16:4a:23:42:b0:
67:98:83:a4:3a:ba:20:57:63:7a:56:ff:af:25:53:
75:c2:54:be:a5:a5:72:ee:6c:42:50:6c:71:5b:21:
bf:6e:01:9c:c7:3f:9c:b8:f6:ad:2c:07:9d:8f:17:
78:7e:60:c8:07:10:7e:ec:1b:52:43:d9:55:13:2f:
66:fe:e3:6f:74:e2:2d:ca:86:ff:3b:91:ef:ef:69:
04:f7:54:1c:73:d3:06:2b:3a:b4:cc:5b:7b:f4:a0:
b5:6d:80:7e:c7:8e:e4:61:2e:dc:76:59:3a:0d:59:
d5:b7:65:58:4e:3f:00:6f:d2:7b:10:27:ac:a9:fd:
24:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:9A:9B:A9:3C:AE:6C:23:02:3A:95:60:D4:EC:22:F0:9B:CA:D8:80
X509v3 Authority Key Identifier:
keyid:5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/h5qbqTyubCMCOpVg1Owi8JvK2IA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.43.0/24
Signature Algorithm: sha256WithRSAEncryption
01:19:8a:82:59:4c:9a:75:91:cc:79:d7:9c:38:c2:11:9b:52:
b9:83:5f:77:e8:24:9a:8c:9e:2c:6b:2c:8d:0e:03:f6:39:8e:
e8:f7:1d:0f:20:8d:78:e4:fc:46:62:09:f0:d6:d9:c6:6d:cd:
c6:b4:fb:fc:35:8b:da:42:25:c5:59:8a:2e:d8:6e:38:3e:3d:
81:f1:99:45:b0:ff:ed:06:10:0d:bc:ff:ec:dc:c2:8f:7e:f8:
ec:18:ab:b2:f4:0d:d1:8c:0f:20:cf:ec:22:ac:7a:30:c6:56:
b8:69:e0:82:89:64:e1:d0:4c:75:05:b9:31:36:68:36:5e:6d:
2a:fb:5f:19:f4:4d:ff:a3:22:6e:4d:9c:53:45:6e:dc:dc:14:
10:4f:55:ca:c1:3b:4f:de:73:a8:6b:28:6a:4d:da:11:06:71:
f6:73:55:f8:95:29:95:e7:e0:f4:75:d5:ad:f6:68:68:31:8a:
f3:54:c7:7a:a6:97:23:6e:93:2c:00:27:c4:72:20:35:e0:ce:
25:57:a9:8f:64:eb:47:02:0a:5a:6a:78:ce:e6:66:46:e6:c5:
fd:12:b6:f8:ad:f3:c8:7f:a5:3e:4e:73:c9:33:7b:14:5a:44:
1b:f4:80:7a:a4:2b:48:c8:35:0e:81:e4:e5:e4:ab:63:47:eb:
1d:99:be:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:47 2024 by rpki-client on console-fra.rpki-client.org