Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/ndEomyt1W9e1ze4kcKPtRjR10kU.roa
File: ndEomyt1W9e1ze4kcKPtRjR10kU.roa (raw, json)
Hash identifier: jwl6q+O6ynEu83PQAa3bq3/OuNv4bOcoIjnP7Drl7fw=
Subject key identifier: 9D:D1:28:9B:2B:75:5B:D7:B5:CD:EE:24:70:A3:ED:46:34:75:D2:45
Certificate issuer: /CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Certificate serial: 0188B3A6A6C2D711EFC98A46BB5A72524BC0
Authority key identifier: 5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/ndEomyt1W9e1ze4kcKPtRjR10kU.roa
Signing time: Tue 13 Jun 2023 07:27:03 +0000
ROA not before: Tue 13 Jun 2023 07:27:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198178
IP address blocks: 195.246.110.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b3:a6:a6:c2:d7:11:ef:c9:8a:46:bb:5a:72:52:4b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Validity
Not Before: Jun 13 07:27:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9dd1289b2b755bd7b5cdee2470a3ed463475d245
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0d:17:d2:4a:ec:ef:c0:ad:b1:3f:ad:fe:3c:
06:0d:72:1c:d7:e9:f1:5b:f1:9b:bf:8a:70:38:19:
8b:d6:0a:19:9e:a5:5d:11:3b:54:e4:a7:3d:9d:ad:
6e:79:44:53:b1:ac:84:4d:af:43:db:27:8d:49:72:
c4:9f:e5:4d:7a:20:1a:22:95:5b:3d:c3:9c:6f:bf:
49:da:90:72:76:7d:92:63:4a:28:bf:99:38:9c:91:
e7:08:d7:35:70:b8:78:09:df:c9:6e:95:30:6f:57:
a9:9e:40:a2:bf:9b:e4:51:82:f6:25:ea:8b:65:0a:
ae:10:b4:5b:62:25:af:24:73:b6:4a:87:f8:fd:87:
35:99:86:46:9d:e9:29:9f:8c:a6:7c:92:76:b7:65:
fe:a7:ce:29:5b:ae:94:f2:a6:00:a7:70:e8:ba:68:
b7:cc:34:d5:1e:16:eb:9f:cd:bc:d1:b3:8f:7e:c4:
4b:2d:69:1f:7f:ff:6f:1b:9d:7d:a3:86:5f:87:d0:
0e:bf:3d:76:38:f0:fe:47:86:ad:0a:c2:5e:36:c9:
1e:c5:07:2a:28:58:56:ec:88:1b:b8:71:c6:7b:6b:
c3:0e:e2:94:24:f0:b6:1f:06:75:f0:10:37:04:95:
89:0a:83:f1:2f:76:b5:ff:cf:02:5a:e1:a2:74:13:
a5:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:D1:28:9B:2B:75:5B:D7:B5:CD:EE:24:70:A3:ED:46:34:75:D2:45
X509v3 Authority Key Identifier:
keyid:5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/ndEomyt1W9e1ze4kcKPtRjR10kU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.246.110.0/24
Signature Algorithm: sha256WithRSAEncryption
87:aa:e0:bd:49:fd:b5:1f:7b:63:25:90:11:80:e9:c6:bc:43:
5f:49:20:84:1d:41:22:db:f1:ad:1e:75:20:3d:fd:f9:bf:e2:
9e:f1:46:ef:ad:68:42:d2:26:10:a2:8f:72:c0:af:ec:26:21:
ac:f1:14:9c:cd:75:29:74:18:26:e9:24:d2:d2:e2:ef:72:1f:
09:ef:6a:69:fd:06:b9:5d:4e:61:2e:ca:c3:2a:63:c8:d2:c0:
e4:9e:0e:c0:37:d9:8c:59:3d:c1:9d:b0:11:8c:4e:00:56:26:
aa:27:1b:eb:2a:a8:a2:e4:48:c3:e5:bf:7f:a2:97:0a:6e:cb:
54:0d:ca:3e:76:6e:43:c9:0c:24:37:1f:cb:17:37:e2:db:17:
d2:19:dd:43:38:60:75:48:ca:5c:34:5d:08:7e:65:9d:05:dc:
10:3b:e9:d1:ce:e0:70:a3:ad:88:43:bc:44:4a:4f:3a:ca:50:
78:c4:74:e4:9d:ed:02:18:d2:17:44:05:55:7c:d6:4a:d2:7a:
37:2e:bb:99:61:3d:99:9c:c5:4d:b7:a7:92:f9:18:f2:a6:48:
5e:45:72:10:1f:30:5b:85:df:a6:48:9b:8c:34:bc:d0:47:fb:
aa:bb:39:99:7d:b2:f2:3e:54:ee:2e:1a:36:be:c6:28:ab:4d:
cf:f6:c3:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:47 2024 by rpki-client on console-fra.rpki-client.org