Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/21ptfL1iJhtbkF1_eiJ1tU6NBno.roa
File: 21ptfL1iJhtbkF1_eiJ1tU6NBno.roa (raw, json)
Hash identifier: eV6ixUEjQEqSP4Sq3pjyiBi7s+rWFdRIQo7iTTl89iE=
Subject key identifier: DB:5A:6D:7C:BD:62:26:1B:5B:90:5D:7F:7A:22:75:B5:4E:8D:06:7A
Certificate issuer: /CN=5fbe65ae23f207fa695255f55a907ac1608be094
Certificate serial: 018EC846CCC8E87D5EE70073BA7C7622F5A3
Authority key identifier: 5F:BE:65:AE:23:F2:07:FA:69:52:55:F5:5A:90:7A:C1:60:8B:E0:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/21ptfL1iJhtbkF1_eiJ1tU6NBno.roa
Signing time: Wed 10 Apr 2024 13:51:06 +0000
ROA not before: Wed 10 Apr 2024 13:51:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215272
IP address blocks: 45.128.205.0/24 maxlen: 24
45.129.186.0/24 maxlen: 24
185.244.50.0/24 maxlen: 24
185.251.38.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:c8:46:cc:c8:e8:7d:5e:e7:00:73:ba:7c:76:22:f5:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fbe65ae23f207fa695255f55a907ac1608be094
Validity
Not Before: Apr 10 13:51:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=db5a6d7cbd62261b5b905d7f7a2275b54e8d067a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:46:6f:c0:3e:99:c8:81:67:ed:4a:9e:ac:52:
83:f3:71:74:e6:cc:a2:62:db:2f:6c:4a:6e:d4:65:
bc:2d:a6:21:76:c8:0f:db:e7:2d:22:40:e8:6a:08:
90:f0:a8:31:8c:fa:89:22:4e:10:74:68:7d:f5:d4:
51:8d:55:d4:7f:e9:b9:d5:24:96:52:89:c8:9f:90:
68:52:cf:61:68:ed:8b:17:b7:a0:8f:ce:8f:af:ec:
9f:d6:80:25:dc:fd:2b:4d:79:2d:f7:24:67:68:37:
50:e9:11:d3:ee:19:25:69:7b:09:5e:4d:c9:2e:d9:
07:21:ce:4c:bf:8a:a6:e3:25:67:78:74:43:5b:ea:
5f:e1:82:41:8c:6e:05:eb:3d:1a:95:06:84:86:06:
80:2a:47:39:53:a6:37:31:bf:1b:bc:19:a4:37:8b:
2f:86:b1:a6:a9:8c:2e:eb:18:92:96:30:48:b8:0f:
3b:9f:65:91:e3:8a:f3:b6:d6:c6:a8:ae:0e:09:5e:
94:f9:1a:cd:95:19:00:f4:e1:3d:fb:ba:b9:b1:88:
39:6d:1d:3f:5b:a6:b5:1c:52:94:6d:d8:8d:ef:c8:
04:dd:a9:ff:23:e7:3f:4f:00:7d:e1:1f:e7:b8:69:
f1:3c:86:0d:20:f0:73:25:bb:f5:50:bb:96:35:f4:
37:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:5A:6D:7C:BD:62:26:1B:5B:90:5D:7F:7A:22:75:B5:4E:8D:06:7A
X509v3 Authority Key Identifier:
keyid:5F:BE:65:AE:23:F2:07:FA:69:52:55:F5:5A:90:7A:C1:60:8B:E0:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/21ptfL1iJhtbkF1_eiJ1tU6NBno.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.205.0/24
45.129.186.0/24
185.244.50.0/24
185.251.38.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:f1:b0:02:74:34:db:35:d1:f3:c4:88:48:d8:2a:1a:c0:23:
75:4d:55:fe:fa:87:04:53:ff:72:a7:5b:e8:ef:39:4e:19:db:
4e:22:49:10:87:73:8d:ed:96:b4:12:97:a3:e4:a7:69:05:bf:
fa:35:12:c7:db:ad:5b:54:85:60:db:b2:05:44:42:65:2a:20:
b8:03:49:03:85:00:17:a9:1c:6f:f5:20:d9:f8:3e:90:1d:72:
c2:9b:3c:3b:5e:7b:45:ea:46:fb:42:bb:d1:40:c4:ea:16:d8:
cb:89:67:62:c2:8a:96:09:59:7a:65:7a:89:70:04:4a:b3:82:
29:da:a8:48:54:82:48:88:3e:79:f4:c4:f0:06:f5:7c:74:27:
16:0c:df:a5:ab:5b:c6:2d:04:04:2c:cf:50:5a:bd:16:01:36:
0c:59:2a:f8:89:51:5b:d9:e2:c9:a3:87:26:55:c8:3a:9e:f9:
fc:f2:2b:e5:09:c1:19:6d:c7:59:d7:45:ad:ec:c2:df:4f:7f:
a5:ed:b5:10:66:f6:b1:2e:2a:e5:ca:16:95:fa:1a:0a:c5:74:
97:54:62:6e:ea:28:ca:33:70:a4:18:99:84:3a:f5:93:52:8c:
b6:32:41:6c:b7:90:6b:fd:a2:bb:0e:0b:34:38:e4:06:ab:7c:
0a:8d:8d:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 31 19:17:34 2024 by rpki-client on console-ams.rpki-client.org