Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/iduVXBKI2DwwuJf_3agqxTkikto.roa
File: iduVXBKI2DwwuJf_3agqxTkikto.roa (raw, json)
Hash identifier: 1Ll6uZz1LE5mCikteaVjLkj7WWf2fptnLR9lz2aTLms=
Subject key identifier: 89:DB:95:5C:12:88:D8:3C:30:B8:97:FF:DD:A8:2A:C5:39:22:92:DA
Certificate issuer: /CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Certificate serial: 018B164BEA4CC4FD117AF3AED2F87302E364
Authority key identifier: 5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/iduVXBKI2DwwuJf_3agqxTkikto.roa
Signing time: Mon 09 Oct 2023 21:15:55 +0000
ROA not before: Mon 09 Oct 2023 21:15:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44477
IP address blocks: 45.153.230.0/24 maxlen: 24
45.132.131.0/24 maxlen: 24
45.132.130.0/24 maxlen: 24
193.38.54.0/24 maxlen: 24
193.38.55.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:16:4b:ea:4c:c4:fd:11:7a:f3:ae:d2:f8:73:02:e3:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Validity
Not Before: Oct 9 21:15:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=89db955c1288d83c30b897ffdda82ac5392292da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:31:77:f2:f0:7b:30:f6:ba:41:b6:0b:4d:1c:
cb:0f:a4:22:65:52:13:e8:8d:62:5e:31:c8:55:66:
cf:43:1c:ec:7f:3e:cb:6a:76:81:dd:31:5a:ff:b7:
5c:a0:9a:51:5a:9e:c6:f5:af:e2:44:8f:61:ae:56:
e5:94:bb:83:f2:ab:ab:f5:ec:8f:7c:4c:78:50:bd:
f9:3b:51:f8:50:18:45:a7:27:32:a1:9d:8e:f7:63:
87:fa:eb:ef:78:82:f8:2e:03:94:b8:24:8e:10:4a:
41:df:20:68:43:8f:e4:19:3d:79:a8:6b:80:d0:3d:
2b:17:59:dd:eb:25:1d:cf:f1:f7:a5:86:63:6f:3d:
79:cd:6c:ab:88:68:e2:18:25:78:48:24:18:f2:f6:
7f:ed:ba:f3:a5:34:fd:d1:de:e0:21:da:4a:c2:8d:
ea:cf:88:be:db:ed:03:3c:4a:a1:a3:7a:b4:58:49:
82:b3:9c:3b:7a:cb:11:60:b7:af:84:1c:cf:4d:ee:
95:bd:3f:99:2b:bc:ed:f5:a2:37:10:30:05:8a:3e:
c0:74:07:45:09:20:96:57:00:38:62:71:eb:2c:21:
be:1a:d2:6c:d2:bd:ab:84:43:86:ac:ac:c2:3e:c0:
b9:cd:bf:10:aa:e6:1e:50:f5:9b:d5:f0:59:4b:a6:
f9:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:DB:95:5C:12:88:D8:3C:30:B8:97:FF:DD:A8:2A:C5:39:22:92:DA
X509v3 Authority Key Identifier:
keyid:5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/iduVXBKI2DwwuJf_3agqxTkikto.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.130.0/23
45.153.230.0/24
193.38.54.0/23
Signature Algorithm: sha256WithRSAEncryption
a1:4a:a6:8a:36:8b:98:55:a1:83:47:b8:34:8a:cf:51:49:1d:
0f:92:a8:53:e2:62:bf:4a:4d:c4:01:e5:3e:ff:de:d9:ff:92:
3a:d0:e0:30:3c:53:34:04:93:f1:57:85:d9:7d:e9:47:d5:48:
e8:e5:be:ec:de:40:f5:ff:3b:a3:c6:a6:5f:0c:c8:37:f4:8e:
1d:8b:b3:a4:6b:42:bb:44:00:83:c5:53:84:9a:e3:07:ae:3f:
c2:48:22:6e:04:3a:dc:ca:5c:ca:b2:a6:57:7f:c7:d1:bd:f8:
e7:5e:7e:d4:0b:be:92:bb:dc:b8:74:f9:4f:49:a6:b1:2f:46:
a6:47:18:a4:f0:f2:8c:87:2b:67:e8:b7:73:b7:ca:a3:73:6a:
99:5d:ff:3b:83:d9:51:53:a5:e0:5c:c1:b9:de:05:59:cb:b5:
8e:fc:3f:17:b2:6b:85:be:04:61:e8:3a:51:45:ae:a3:19:39:
79:62:48:43:f4:38:4a:36:c0:ba:f3:69:16:af:7d:66:2a:4e:
4a:d4:40:3e:d5:9c:c4:5b:f8:73:f4:9a:24:20:b8:7d:10:4d:
dd:09:c6:8f:a2:aa:93:6d:f7:1b:3c:88:6e:49:57:4d:e5:6f:
bc:58:d2:56:e2:84:da:b2:63:8f:c5:b8:b8:97:84:00:91:01:
48:66:9c:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:25 2024 by rpki-client on console-ams.rpki-client.org