Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/kEQtW9VzTNKcGG8ErSbm7e2p-Zc.roa
File: kEQtW9VzTNKcGG8ErSbm7e2p-Zc.roa (raw, json)
Hash identifier: ofpQDgFSiA+nUhEdTUB/VzLTlXW+2AcTR19niJHxpxk=
Subject key identifier: 90:44:2D:5B:D5:73:4C:D2:9C:18:6F:04:AD:26:E6:ED:ED:A9:F9:97
Certificate issuer: /CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Certificate serial: 018CC86FC606780CE896D9D846A2B543DFA9
Authority key identifier: 5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/kEQtW9VzTNKcGG8ErSbm7e2p-Zc.roa
Signing time: Tue 02 Jan 2024 04:30:17 +0000
ROA not before: Tue 02 Jan 2024 04:30:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 395092
IP address blocks: 45.139.54.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:c6:06:78:0c:e8:96:d9:d8:46:a2:b5:43:df:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Validity
Not Before: Jan 2 04:30:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=90442d5bd5734cd29c186f04ad26e6ededa9f997
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:fd:13:a0:00:b9:1c:1c:29:51:11:60:8d:4a:
6a:db:48:8f:a4:bd:ef:59:24:cc:88:52:9b:0e:00:
af:cd:a0:ca:0d:12:00:bc:bb:87:c8:f6:48:50:3d:
8a:e9:5f:a2:7a:91:0d:6a:5e:00:bd:3c:2c:a2:d0:
90:c7:76:a8:26:bf:dd:e9:4f:ba:5b:01:d4:36:d8:
3a:94:87:69:ca:c9:de:64:81:59:d8:14:36:fa:89:
85:13:2b:71:00:0e:47:e8:26:aa:12:e8:a4:c6:5e:
64:0b:80:69:f8:67:e3:5f:b2:83:3b:07:00:6b:e3:
b6:02:f4:c1:94:c6:2a:85:d3:88:69:b4:d8:84:31:
41:7e:78:c1:f0:e5:9e:4d:58:f3:32:b1:cd:fe:62:
fe:b2:c6:e7:94:07:5f:37:fc:c2:f4:de:13:dd:5f:
8a:e2:82:00:22:12:e7:38:c9:75:79:70:9c:1b:fb:
00:9b:55:aa:25:6a:a5:29:10:c1:83:93:c0:07:f9:
67:0d:87:41:e0:52:66:63:73:e1:07:04:b0:c3:0d:
c4:a0:6c:60:ba:e7:ba:d4:67:4b:10:d5:e3:64:e2:
f9:06:5a:c1:a7:36:0e:0d:70:28:8e:81:28:50:6f:
9b:24:f1:0d:61:77:f8:c1:c2:fa:97:11:47:88:24:
cc:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:44:2D:5B:D5:73:4C:D2:9C:18:6F:04:AD:26:E6:ED:ED:A9:F9:97
X509v3 Authority Key Identifier:
keyid:5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/kEQtW9VzTNKcGG8ErSbm7e2p-Zc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.54.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:4f:3a:35:f4:90:98:52:77:19:34:11:5d:01:1a:d5:94:fa:
8a:f8:8e:d9:65:1c:1e:c6:d5:5d:06:f0:c3:1c:e1:38:75:60:
47:28:53:a6:01:b8:7b:d9:d3:e4:22:4c:76:a5:bd:e0:90:05:
ef:67:d8:d4:30:7e:b9:99:53:ca:80:1a:e9:49:c9:ff:13:7a:
ab:72:ab:69:24:d8:6c:2e:b0:d1:a0:cc:7d:85:bc:52:73:b3:
84:07:68:fd:5d:2a:df:02:e9:ce:95:ba:22:ea:9a:a7:b5:61:
01:2c:4e:e9:d2:42:01:dc:2c:06:d6:42:f9:95:37:2b:e9:7d:
67:83:f5:68:57:33:3f:04:fe:ea:85:08:d6:35:f0:ef:46:d1:
71:a2:f4:86:f7:1f:bb:30:98:0a:24:52:c4:3a:30:58:2e:44:
bc:6c:06:1a:20:0b:65:67:0a:a2:12:b6:ac:64:5f:df:ec:99:
f8:97:c9:79:0b:4d:a4:9e:75:6f:e0:7f:b3:21:e1:0a:05:20:
0b:c2:08:c8:04:40:4c:c5:a7:01:4b:91:53:82:26:3b:77:c4:
83:74:28:1c:d8:8e:c0:91:86:66:d0:3a:38:84:92:c8:19:aa:
28:d6:f5:b8:62:f1:e4:8e:44:95:55:4f:df:21:59:2c:20:74:
56:0f:c6:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:25 2024 by rpki-client on console-ams.rpki-client.org