Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/zh3iTL5ob413S2DLw5QFfLUXZjI.roa
File: zh3iTL5ob413S2DLw5QFfLUXZjI.roa (raw, json)
Hash identifier: 2vg4RVR38JQWzLfZXq0wwZrkQSl6CxpLUet413Fwc/A=
Subject key identifier: CE:1D:E2:4C:BE:68:6F:8D:77:4B:60:CB:C3:94:05:7C:B5:17:66:32
Certificate issuer: /CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Certificate serial: 0182561FD666A3009D99EA66C26069C2A9CD
Authority key identifier: 5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/zh3iTL5ob413S2DLw5QFfLUXZjI.roa
Signing time: Sun 31 Jul 2022 21:18:23 +0000
ROA not before: Sun 31 Jul 2022 21:18:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206728
IP address blocks: 45.142.39.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:56:1f:d6:66:a3:00:9d:99:ea:66:c2:60:69:c2:a9:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Validity
Not Before: Jul 31 21:18:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ce1de24cbe686f8d774b60cbc394057cb5176632
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:9a:c5:b5:4b:3c:21:0e:88:ea:2a:b5:97:93:
35:a0:99:0f:4e:76:75:be:08:bf:98:cf:1e:b1:0e:
c9:da:c7:2a:7d:30:e8:ac:8a:3e:7a:d4:2a:4e:ba:
d6:94:1a:1e:1a:eb:ad:72:13:5a:e0:63:72:fc:fa:
a6:01:37:1d:7e:41:1b:40:20:e5:4e:80:be:0d:7d:
15:b5:00:93:05:f1:93:59:93:91:ad:88:e3:4a:23:
7b:11:20:3b:d0:b1:7b:3a:64:d2:90:86:d3:3b:d5:
b1:0b:a5:25:fa:12:d7:dd:af:f7:3e:64:72:cf:55:
5b:71:9f:e0:1f:f1:b1:6a:0d:28:e6:3e:24:33:71:
83:9d:94:9b:f8:22:26:61:bf:8f:0e:69:04:0a:76:
ca:33:26:85:92:5f:64:61:54:df:20:11:d8:23:af:
38:66:03:ec:d0:b9:a9:c8:27:dd:e2:7b:c8:78:f4:
8e:ea:b1:a8:29:fd:21:44:3f:95:f5:66:24:f2:44:
51:5b:79:ac:4a:b1:a5:65:6d:d3:bf:f9:78:1b:09:
9b:23:ce:d2:b4:37:4c:5e:a4:97:bb:cf:1f:5a:e4:
17:98:1f:2e:c3:a9:e3:c1:2a:4f:f7:d7:04:73:2a:
7e:05:dc:d4:62:da:fb:b9:8f:e1:53:5f:b8:00:87:
57:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:1D:E2:4C:BE:68:6F:8D:77:4B:60:CB:C3:94:05:7C:B5:17:66:32
X509v3 Authority Key Identifier:
keyid:5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/zh3iTL5ob413S2DLw5QFfLUXZjI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.39.0/24
Signature Algorithm: sha256WithRSAEncryption
09:0a:c2:14:6f:9f:71:27:51:4f:ef:16:a6:3b:1e:c2:2e:4e:
33:d0:99:3c:14:52:6e:41:bb:0c:a9:28:67:7b:e6:5f:4d:61:
9e:8b:8b:ff:bc:00:15:17:12:04:3b:e5:cd:8b:47:f2:8e:77:
ec:4e:00:ee:60:c2:5f:a5:3f:59:76:58:00:44:7b:bb:1b:a6:
ac:ac:b8:03:51:78:e2:14:69:fc:dc:22:b1:45:01:5f:9e:b0:
9b:e8:66:f5:84:5d:e6:5e:7b:46:db:dc:5a:1a:9d:8a:c2:9a:
df:71:1b:94:0b:35:7a:a8:41:d9:ea:ab:90:18:f5:28:41:79:
c5:29:6a:67:20:97:c7:af:51:d9:28:da:ca:dc:65:fd:e1:51:
9e:ee:ba:92:8d:da:f6:5d:23:a0:dd:49:0b:2c:a0:1f:51:e3:
80:76:dc:ed:8f:b1:f5:88:9e:7c:4a:e3:da:97:33:2c:b5:64:
e7:4c:41:e4:c6:5b:cc:5e:6b:19:12:aa:ea:60:d9:2f:24:00:
86:65:dc:93:a6:2b:fa:a2:a4:15:45:92:0a:85:4c:82:b8:e8:
c4:08:9e:0c:60:46:74:95:7a:10:50:0a:c8:c7:b3:4e:57:58:
8e:3a:17:82:d0:96:18:f0:f8:d2:bf:9b:ff:29:ce:6b:db:64:
42:f1:4c:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:47 2024 by rpki-client on console-fra.rpki-client.org