Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/JvLcEA6LcQjYtTpuaEfow_Yu8d4.roa
File: JvLcEA6LcQjYtTpuaEfow_Yu8d4.roa (raw, json)
Hash identifier: b6C4b7vu09XOm0H3sW+Bl7vAQC/rn8+hvGiGTbKuvfw=
Subject key identifier: 26:F2:DC:10:0E:8B:71:08:D8:B5:3A:6E:68:47:E8:C3:F6:2E:F1:DE
Certificate issuer: /CN=9cd0758825dd89cfee5fdecc7dcb651f0a5d1018
Certificate serial: 01922EE7FE758A765FE86DC37F7C6C20E3F6
Authority key identifier: 9C:D0:75:88:25:DD:89:CF:EE:5F:DE:CC:7D:CB:65:1F:0A:5D:10:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nNB1iCXdic_uX97MfctlHwpdEBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/JvLcEA6LcQjYtTpuaEfow_Yu8d4.roa
Signing time: Thu 26 Sep 2024 15:16:48 +0000
ROA not before: Thu 26 Sep 2024 15:16:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47952
IP address blocks: 45.139.220.0/24 maxlen: 24
45.145.22.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:2e:e7:fe:75:8a:76:5f:e8:6d:c3:7f:7c:6c:20:e3:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cd0758825dd89cfee5fdecc7dcb651f0a5d1018
Validity
Not Before: Sep 26 15:16:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=26f2dc100e8b7108d8b53a6e6847e8c3f62ef1de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4b:93:4d:03:0c:77:58:2c:b5:cb:4c:97:ec:
f7:46:91:fc:9a:cb:a6:6b:82:be:63:92:70:83:22:
93:67:e7:1d:62:17:32:c3:3d:00:0d:fe:b9:d3:23:
4f:5c:2f:d4:cf:21:ed:df:7f:57:8a:5c:d1:f3:fd:
c5:bc:88:34:ac:0f:f4:0f:38:4f:ff:05:a9:86:aa:
55:68:64:c3:f8:bc:c5:bc:6c:42:f6:96:be:6c:f7:
19:d6:e4:dc:8f:01:6d:3d:03:70:32:ba:94:f8:a3:
39:45:58:74:68:32:82:d3:8d:6a:9c:f1:95:1c:e2:
87:7c:84:18:81:33:19:ac:0b:51:ea:66:a6:b7:71:
1b:57:a9:2c:80:9d:49:40:a2:3b:10:77:a5:fd:1f:
e9:ed:e9:2c:d9:d7:16:90:5d:63:b2:31:dc:fa:1d:
19:5c:43:0d:ca:e8:c6:27:45:c6:62:6e:fe:a9:72:
9f:0c:a2:11:ab:cf:6e:2e:f5:50:4c:6f:fa:41:b5:
16:0e:90:cc:eb:60:d4:a2:b0:4d:bf:ec:5f:e8:cb:
ce:08:73:77:a9:ce:f0:e1:b6:9e:12:5a:41:a8:01:
d5:cd:48:4c:26:85:46:68:83:39:30:90:11:bd:a3:
3f:0c:1b:43:b5:5f:5d:1e:b7:cb:57:34:46:d5:e7:
de:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:F2:DC:10:0E:8B:71:08:D8:B5:3A:6E:68:47:E8:C3:F6:2E:F1:DE
X509v3 Authority Key Identifier:
keyid:9C:D0:75:88:25:DD:89:CF:EE:5F:DE:CC:7D:CB:65:1F:0A:5D:10:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nNB1iCXdic_uX97MfctlHwpdEBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/JvLcEA6LcQjYtTpuaEfow_Yu8d4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.220.0/24
45.145.22.0/24
Signature Algorithm: sha256WithRSAEncryption
36:15:3e:09:11:ec:4a:25:25:fc:ab:b4:bc:30:3e:b0:f8:76:
be:e4:e0:1c:27:d7:46:fb:4f:f9:db:99:a8:80:89:ca:17:90:
f7:a7:c4:c2:74:88:03:cb:22:dc:62:f4:20:c4:d4:1e:28:cc:
a7:e4:09:dc:75:fe:7c:a6:e6:09:c0:82:2c:f4:e2:47:1a:8a:
4e:20:5f:0e:df:78:f2:75:5c:0f:a4:75:de:38:06:53:8b:60:
51:31:07:20:ff:3e:6c:86:b0:73:e2:1d:da:cf:a6:b6:30:0f:
64:6a:6e:55:16:51:1b:1a:db:e8:2c:fd:0d:e9:df:df:1b:f8:
c7:80:52:ff:bc:42:c1:56:70:fd:68:7c:c1:8b:2e:94:4d:54:
0c:a7:a7:0f:c5:d2:2d:fc:09:81:0a:52:5f:f1:0e:74:53:f8:
c5:4f:a5:f4:7d:01:3c:87:88:9b:fb:8f:06:23:e4:13:ab:48:
71:17:de:10:7f:1d:11:bb:3e:15:92:5f:c9:20:ee:cb:82:2b:
ce:0d:71:43:00:57:17:9f:7b:8e:d0:c3:de:75:58:21:63:53:
51:3a:09:70:48:9e:49:51:6d:9b:fd:1f:b7:8f:df:72:cc:8d:
e9:74:2c:b2:35:b0:68:75:cd:8f:4e:eb:2c:30:5f:30:50:a2:
24:7c:a1:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 1 12:52:17 2024 by rpki-client on console-fra.rpki-client.org