Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/b7bf94-377b-4400-8b9c-cbf164e8be01/1/U6XOfB5o2vIppFl2nfMpfrRRpgc.roa
File: U6XOfB5o2vIppFl2nfMpfrRRpgc.roa (raw, json)
Hash identifier: ylvvUl1pnn9VvkexvOIxkw9mmAFx/hjpoL1SoTAAJYw=
Subject key identifier: 53:A5:CE:7C:1E:68:DA:F2:29:A4:59:76:9D:F3:29:7E:B4:51:A6:07
Certificate issuer: /CN=cdc84082be96e609d9de9808fbc37866feb4c54b
Certificate serial: 01875CA7EE94CBB4D783B9252901504FFEFA
Authority key identifier: CD:C8:40:82:BE:96:E6:09:D9:DE:98:08:FB:C3:78:66:FE:B4:C5:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zchAgr6W5gnZ3pgI-8N4Zv60xUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/b7bf94-377b-4400-8b9c-cbf164e8be01/1/U6XOfB5o2vIppFl2nfMpfrRRpgc.roa
Signing time: Fri 07 Apr 2023 16:58:42 +0000
ROA not before: Fri 07 Apr 2023 16:58:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51559
IP address blocks: 37.235.123.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:5c:a7:ee:94:cb:b4:d7:83:b9:25:29:01:50:4f:fe:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdc84082be96e609d9de9808fbc37866feb4c54b
Validity
Not Before: Apr 7 16:58:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=53a5ce7c1e68daf229a459769df3297eb451a607
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:64:af:c7:1f:a1:c7:45:fd:f6:04:1f:52:30:
8f:27:56:b5:7c:21:76:9b:19:74:15:93:33:43:10:
19:4d:b2:93:93:b8:d1:52:48:51:9b:28:8b:c3:a2:
0c:63:8d:8c:79:9a:50:aa:4a:82:f3:74:02:13:45:
02:be:3c:38:d9:fd:e3:fc:70:b6:ba:bc:ca:d9:0a:
d3:c9:3d:48:a8:0c:cd:d5:4d:76:5d:1b:07:b6:33:
dc:93:e0:7f:79:7a:7e:fa:24:f4:9f:f3:f3:de:0f:
98:a8:8b:c3:84:a2:8c:70:29:35:03:2c:36:04:26:
73:3a:48:5a:a5:59:1d:14:2a:cd:a9:6e:56:63:22:
e2:d0:40:08:80:d1:da:f3:b8:a7:68:a6:e2:0f:3f:
7e:43:f3:69:72:f8:a7:1b:34:39:36:a6:7a:e4:9f:
fb:66:a6:72:aa:18:9b:73:2b:5f:82:a6:85:ae:78:
91:13:a6:26:73:c2:c2:77:ab:48:52:e9:ca:27:1f:
f5:4d:ee:cc:a6:aa:63:fe:7a:ec:92:a2:2c:6e:a5:
a7:26:c6:46:81:ad:26:9f:61:ba:9c:8b:23:38:da:
63:86:aa:45:46:4c:43:b1:df:b2:97:e4:19:0d:0a:
3c:69:dd:a4:a6:64:af:96:c0:35:92:45:cc:0f:20:
f5:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:A5:CE:7C:1E:68:DA:F2:29:A4:59:76:9D:F3:29:7E:B4:51:A6:07
X509v3 Authority Key Identifier:
keyid:CD:C8:40:82:BE:96:E6:09:D9:DE:98:08:FB:C3:78:66:FE:B4:C5:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zchAgr6W5gnZ3pgI-8N4Zv60xUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b7bf94-377b-4400-8b9c-cbf164e8be01/1/U6XOfB5o2vIppFl2nfMpfrRRpgc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b7bf94-377b-4400-8b9c-cbf164e8be01/1/zchAgr6W5gnZ3pgI-8N4Zv60xUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.235.123.0/24
Signature Algorithm: sha256WithRSAEncryption
79:40:1d:8b:d9:e8:a3:93:fa:8d:da:10:df:1f:98:d4:6e:10:
70:bb:8c:01:1e:00:5e:1a:8c:b0:62:74:11:f5:ee:19:f9:ca:
b0:b1:79:73:01:4e:ae:f3:39:15:91:af:af:40:38:95:56:e6:
17:6f:41:c9:52:2d:42:71:fa:a8:71:23:45:8f:02:cf:99:eb:
d1:57:4c:d8:94:86:c0:23:92:8b:b6:30:eb:97:38:57:00:a0:
a8:61:83:04:4e:d9:5f:f3:f5:fa:1e:bf:ea:3b:e9:88:83:3a:
a1:04:6e:c3:4a:95:00:5f:67:09:57:ae:4e:a4:20:57:ab:f0:
ec:0a:6d:39:ff:b1:66:84:ca:ea:f4:30:67:dc:dd:1a:43:ac:
29:ca:42:78:67:e0:3b:c8:7f:ec:c6:83:1e:ec:25:5f:66:f8:
77:cb:d6:2a:ce:f2:ad:70:30:a0:10:fa:df:33:ae:35:38:67:
b3:d9:c6:28:b4:4f:db:8d:81:0a:64:b8:b8:aa:3e:b8:2b:51:
1a:c2:a1:dc:32:c6:c0:61:18:20:86:aa:0e:da:65:cf:fa:c3:
ab:99:3b:19:1c:be:d0:89:f1:17:26:48:d7:3c:3e:29:d0:37:
85:38:e8:b7:0c:77:33:cf:4a:5c:d8:cb:30:b3:ed:04:5e:a1:
20:cf:8e:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:26:07 2024 by rpki-client on console-ams.rpki-client.org