Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/n_Nici7c3Z4e7WGMRylfVL42-3k.roa
File: n_Nici7c3Z4e7WGMRylfVL42-3k.roa (raw, json)
Hash identifier: sozUFDYIfbSzfCTTcLeE+vM/v1I97AoTUbOCLihgW78=
Subject key identifier: 9F:F3:62:72:2E:DC:DD:9E:1E:ED:61:8C:47:29:5F:54:BE:36:FB:79
Certificate issuer: /CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Certificate serial: 0182826F8259C652BE75E2176295C5B3CCE2
Authority key identifier: 5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/n_Nici7c3Z4e7WGMRylfVL42-3k.roa
Signing time: Tue 09 Aug 2022 11:48:42 +0000
ROA not before: Tue 09 Aug 2022 11:48:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211825
IP address blocks: 5.183.155.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:82:6f:82:59:c6:52:be:75:e2:17:62:95:c5:b3:cc:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Validity
Not Before: Aug 9 11:48:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9ff362722edcdd9e1eed618c47295f54be36fb79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:c1:55:aa:d7:2f:10:70:68:55:74:03:a7:91:
a2:b9:1c:2b:c5:13:ff:09:b8:90:da:3b:5e:ce:34:
c3:11:43:89:8f:18:8d:c8:08:8a:e2:51:09:e8:9d:
0b:48:5a:67:6c:50:2a:12:62:25:9d:23:80:a8:fb:
c7:0f:87:48:36:00:a3:4b:71:b7:e2:9c:c8:16:87:
63:b1:9e:b5:ef:0c:05:7f:0a:49:92:f7:60:08:ce:
30:af:d6:93:3b:d2:f0:fc:93:b6:7c:7e:86:0f:c3:
ca:91:93:65:58:ee:69:0e:fe:57:08:27:40:ec:f0:
40:c2:51:51:cf:57:71:d8:2f:60:b4:86:68:d1:7f:
d6:df:d1:e1:cc:16:8b:06:78:74:bb:e1:42:44:e7:
7a:58:8c:f8:5d:88:de:78:0a:0f:24:35:69:fc:b2:
49:7d:2c:65:17:e9:ad:fd:c9:06:9d:9c:9c:0e:c0:
fe:c7:1a:69:67:58:07:94:da:88:4b:e0:af:4e:06:
c4:af:2a:55:bb:f7:01:55:11:47:a7:39:cc:b8:74:
4f:bd:5a:5e:ca:14:d9:a5:19:7b:d8:ed:0f:9c:43:
6b:00:3c:91:b8:0d:98:88:1c:1e:3c:e8:f6:58:7e:
1f:6d:9a:f3:02:cd:55:52:11:56:e2:28:2f:8d:84:
fa:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:F3:62:72:2E:DC:DD:9E:1E:ED:61:8C:47:29:5F:54:BE:36:FB:79
X509v3 Authority Key Identifier:
keyid:5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/n_Nici7c3Z4e7WGMRylfVL42-3k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.183.155.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:1b:29:51:ac:ae:bd:60:3f:c6:78:d9:e7:c2:1c:09:2d:ff:
12:0a:57:ae:01:a7:cb:d9:09:ff:a8:c4:dc:0f:43:fa:40:4f:
54:cf:f5:5f:4d:ef:f2:f0:5d:c8:dc:9f:ae:f2:8b:94:90:9a:
85:dc:1a:91:21:7a:df:78:95:ae:dc:66:aa:b9:ec:b3:12:02:
5e:0f:00:ab:93:00:b4:bf:c7:b1:e6:b4:d0:5a:69:8a:4e:43:
ac:01:52:a1:cf:27:10:2c:86:a4:00:48:c3:4c:ff:96:03:ab:
f7:29:8f:4f:08:34:29:b5:78:21:3f:76:78:74:22:25:4e:ea:
25:04:94:c6:6a:fc:23:9b:44:61:db:51:ca:fa:af:c9:29:68:
b0:e2:e0:19:00:41:b4:b4:2c:dc:a9:85:09:79:34:39:d9:ca:
e3:bf:6e:57:19:34:0c:0f:52:d0:13:5d:ed:33:8a:1a:d8:bb:
11:fd:d0:76:51:93:18:c5:c8:ea:12:73:a9:df:36:83:79:bf:
da:8c:42:87:49:26:e8:40:4c:89:e0:c9:5e:3d:5a:23:07:06:
21:1c:40:d8:95:f9:40:e5:20:ce:90:08:0b:e7:b3:97:ee:1e:
8a:12:22:d9:71:6c:46:a0:61:c1:09:66:2b:c2:93:15:23:d4:
34:b7:a1:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:34 2023 by rpki-client on console-fra.rpki-client.org