Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/5zkhYqm4IEIXTaLxv8S2PenomNM.roa
File: 5zkhYqm4IEIXTaLxv8S2PenomNM.roa (raw, json)
Hash identifier: JNr2Q+0k0wa7AAkaWSsIEuNWy1XrZVYilcg5j7DU8HI=
Subject key identifier: E7:39:21:62:A9:B8:20:42:17:4D:A2:F1:BF:C4:B6:3D:E9:E8:98:D3
Certificate issuer: /CN=b27261d715348bfd73ce9dbb72488656993ba2f1
Certificate serial: 01900CDB91204F8FECA2DFE1BCDF1E3BA6D0
Authority key identifier: B2:72:61:D7:15:34:8B:FD:73:CE:9D:BB:72:48:86:56:99:3B:A2:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/snJh1xU0i_1zzp27ckiGVpk7ovE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/5zkhYqm4IEIXTaLxv8S2PenomNM.roa
Signing time: Wed 12 Jun 2024 14:30:34 +0000
ROA not before: Wed 12 Jun 2024 14:30:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61317
IP address blocks: 45.143.238.0/24 maxlen: 24
45.143.239.0/24 maxlen: 24
91.184.253.0/24 maxlen: 24
103.228.2.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:0c:db:91:20:4f:8f:ec:a2:df:e1:bc:df:1e:3b:a6:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b27261d715348bfd73ce9dbb72488656993ba2f1
Validity
Not Before: Jun 12 14:30:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e7392162a9b82042174da2f1bfc4b63de9e898d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:36:28:4d:62:3b:6a:11:5c:35:47:ac:dc:97:
cb:1b:13:55:9a:57:e4:41:9e:9c:d9:d1:38:69:f3:
fa:d5:6d:7f:bd:01:a3:c5:66:09:70:9d:90:b3:42:
4c:59:8a:b5:18:e7:61:6e:35:7a:f4:99:c5:0d:44:
dd:ec:39:60:a8:d7:ea:00:07:7d:5e:98:8b:30:c1:
43:8f:4d:45:7f:e6:31:55:67:16:47:35:f7:8a:e9:
18:86:53:65:fd:04:f0:c9:47:0f:72:33:eb:f8:4b:
df:b4:19:71:c2:14:7f:5a:86:9c:a7:60:e9:0d:44:
a1:83:f7:81:a2:66:4d:c9:b7:de:82:73:f6:bd:31:
c6:f0:83:43:18:d4:6c:be:df:46:a5:05:5d:37:57:
d1:bb:71:12:4b:22:eb:b6:3f:7c:67:23:b9:2f:d0:
44:7a:d2:4f:36:66:59:f5:e6:b0:7b:ac:ba:4d:d5:
89:be:c8:91:30:23:8a:3a:40:f5:83:e1:f9:8a:77:
58:13:9e:23:b9:2d:f6:5f:73:14:7f:50:ff:8d:cf:
28:66:e9:ba:0b:22:16:ce:75:db:0f:47:0e:c9:18:
9c:7b:45:48:a6:ac:2f:53:e0:fe:64:5c:4f:05:9f:
36:62:58:ec:75:64:e9:88:e7:69:35:b8:b4:8b:08:
9b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:39:21:62:A9:B8:20:42:17:4D:A2:F1:BF:C4:B6:3D:E9:E8:98:D3
X509v3 Authority Key Identifier:
keyid:B2:72:61:D7:15:34:8B:FD:73:CE:9D:BB:72:48:86:56:99:3B:A2:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/snJh1xU0i_1zzp27ckiGVpk7ovE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/5zkhYqm4IEIXTaLxv8S2PenomNM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.238.0/23
91.184.253.0/24
103.228.2.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:5f:6d:52:1e:f6:63:30:66:f1:24:1d:eb:bd:3d:92:ac:c6:
2f:33:1f:46:5d:e1:24:53:85:d1:58:ae:aa:c5:7f:df:c0:1d:
4b:02:96:f1:f9:6b:fa:60:fe:77:b4:9c:33:b9:36:27:e9:8a:
15:52:80:d3:13:1d:f6:d1:4a:0b:f8:f7:b2:38:4d:c2:fb:fe:
32:16:48:10:05:6f:a4:13:85:f9:7f:63:4f:c5:d7:ec:51:a8:
82:8b:28:a9:31:24:5c:55:e1:6e:d7:36:be:12:56:6d:2f:0f:
78:13:aa:e5:b9:47:9c:9f:9e:c9:c4:ca:d0:22:99:75:74:d7:
b4:46:39:82:83:4c:3a:97:6a:b9:20:32:a6:6b:fc:d4:3f:79:
dd:70:f6:72:7e:be:96:9e:ff:db:12:e0:83:a4:eb:8f:9c:99:
b4:d3:8f:6c:f8:5f:9e:c5:ba:49:76:62:24:2a:f3:38:ba:62:
71:af:62:27:02:dc:2b:5a:99:6a:33:21:68:bb:5b:65:46:9b:
35:a3:ec:19:16:89:3b:ac:12:93:ef:1f:22:60:30:7d:c0:e0:
02:44:f3:0f:26:3d:76:ec:1a:81:f3:c6:b4:04:1c:df:c0:b2:
e5:eb:ab:74:54:80:4a:79:a0:a1:c6:04:e4:dc:ab:bb:25:17:
cd:7b:33:c9
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZAM25EgT4/sot/hvN8eO6bQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyNzI2MWQ3MTUzNDhiZmQ3M2NlOWRiYjcyNDg4NjU2OTkz
YmEyZjEwHhcNMjQwNjEyMTQzMDM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNzM5MjE2MmE5YjgyMDQyMTc0ZGEyZjFiZmM0YjYzZGU5ZTg5OGQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuDYoTWI7ahFcNUes3JfLGxNVmlfk
QZ6c2dE4afP61W1/vQGjxWYJcJ2Qs0JMWYq1GOdhbjV69JnFDUTd7DlgqNfqAAd9
XpiLMMFDj01Ff+YxVWcWRzX3iukYhlNl/QTwyUcPcjPr+EvftBlxwhR/Woacp2Dp
DUShg/eBomZNybfegnP2vTHG8INDGNRsvt9GpQVdN1fRu3ESSyLrtj98ZyO5L9BE
etJPNmZZ9eawe6y6TdWJvsiRMCOKOkD1g+H5indYE54juS32X3MUf1D/jc8oZum6
CyIWznXbD0cOyRice0VIpqwvU+D+ZFxPBZ82YljsdWTpiOdpNbi0iwibIQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFOc5IWKpuCBCF02i8b/Etj3p6JjTMB8GA1UdIwQY
MBaAFLJyYdcVNIv9c86du3JIhlaZO6LxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc25KaDF4VTBpXzF6enAyN2NraUdWcGs3b3ZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9hYmE1MDItZDE5MS00ZmQ3LWE3Y2Yt
NTA0ZjI3NjY3NjBmLzEvNXpraFlxbTRJRUlYVGFMeHY4UzJQZW5vbU5NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS9hYmE1MDItZDE5MS00ZmQ3LWE3Y2YtNTA0ZjI3NjY3NjBm
LzEvc25KaDF4VTBpXzF6enAyN2NraUdWcGs3b3ZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBLY/uAwQA
W7j9AwQAZ+QCMA0GCSqGSIb3DQEBCwUAA4IBAQArX21SHvZjMGbxJB3rvT2SrMYv
Mx9GXeEkU4XRWK6qxX/fwB1LApbx+Wv6YP53tJwzuTYn6YoVUoDTEx320UoL+Pey
OE3C+/4yFkgQBW+kE4X5f2NPxdfsUaiCiyipMSRcVeFu1za+ElZtLw94E6rluUec
n57JxMrQIpl1dNe0RjmCg0w6l2q5IDKma/zUP3ndcPZyfr6Wnv/bEuCDpOuPnJm0
049s+F+exbpJdmIkKvM4umJxr2InAtwrWplqMyFou1tlRps1o+wZFok7rBKT7x8i
YDB9wOACRPMPJj127BqB88a0BBzfwLLl66t0VIBKeaChxgTk3Ku7JRfNezPJ
-----END CERTIFICATE-----
Generated at Thu Apr 17 00:11:42 2025 by rpki-client