Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/e23d30-76e3-4491-8d75-2fda4c273a48/1/nRlhLuRGb0m1aDLCKmLtNkva_eU.roa
File: nRlhLuRGb0m1aDLCKmLtNkva_eU.roa (raw, json)
Hash identifier: pESaJE38sUKElLirPeH4c31Wh05ZMetMCfmTWFub9f8=
Subject key identifier: 9D:19:61:2E:E4:46:6F:49:B5:68:32:C2:2A:62:ED:36:4B:DA:FD:E5
Certificate issuer: /CN=556a5fa0dcfb34433f9b860d95e2c442547c5f9c
Certificate serial: 018CC49340B12021579FF223602C91F188D5
Authority key identifier: 55:6A:5F:A0:DC:FB:34:43:3F:9B:86:0D:95:E2:C4:42:54:7C:5F:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VWpfoNz7NEM_m4YNleLEQlR8X5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/e23d30-76e3-4491-8d75-2fda4c273a48/1/nRlhLuRGb0m1aDLCKmLtNkva_eU.roa
Signing time: Mon 01 Jan 2024 10:30:33 +0000
ROA not before: Mon 01 Jan 2024 10:30:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49037
IP address blocks: 151.0.48.0/22 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:40:b1:20:21:57:9f:f2:23:60:2c:91:f1:88:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=556a5fa0dcfb34433f9b860d95e2c442547c5f9c
Validity
Not Before: Jan 1 10:30:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9d19612ee4466f49b56832c22a62ed364bdafde5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ae:56:fe:90:e5:df:d9:8a:ef:56:22:01:38:
46:13:a9:00:e6:60:a6:2c:e7:19:1c:04:19:0f:d2:
fe:f3:c1:9b:e2:8a:52:64:41:a4:04:06:72:86:07:
de:dc:df:f2:f6:85:6d:35:10:ba:de:81:65:e3:60:
f1:8b:1c:79:a2:1c:9c:79:60:90:67:25:2c:9d:14:
7f:a5:70:b8:c7:4a:ab:36:c0:0f:9e:55:19:2c:f8:
96:7a:40:3f:98:69:77:12:3c:b0:70:c1:8c:32:d3:
d5:b5:7d:74:c6:f9:0a:12:91:ae:e3:d7:db:5e:e5:
fe:fc:63:4a:88:ed:6f:01:f1:eb:3f:01:dd:41:e2:
f2:42:43:5c:53:66:df:11:eb:e8:97:e6:cd:b2:a7:
1d:eb:56:4b:42:92:42:e5:b5:48:75:66:88:60:d3:
21:02:9c:68:81:5d:8d:07:ea:18:15:37:f4:8e:f7:
a7:ed:ef:d5:08:bc:25:ec:8e:ee:4a:8c:a9:ed:23:
62:9c:d4:70:6f:11:8c:01:1c:7e:2a:3c:34:28:0d:
1e:77:71:21:93:d2:9f:b7:aa:01:f2:fa:d6:90:96:
6a:c0:21:ce:ec:c5:5c:79:d8:4d:cf:c1:29:18:16:
10:6f:39:f3:a0:3a:4b:a9:b4:24:c8:8d:f6:5e:0d:
e6:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:19:61:2E:E4:46:6F:49:B5:68:32:C2:2A:62:ED:36:4B:DA:FD:E5
X509v3 Authority Key Identifier:
keyid:55:6A:5F:A0:DC:FB:34:43:3F:9B:86:0D:95:E2:C4:42:54:7C:5F:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VWpfoNz7NEM_m4YNleLEQlR8X5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e23d30-76e3-4491-8d75-2fda4c273a48/1/nRlhLuRGb0m1aDLCKmLtNkva_eU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e23d30-76e3-4491-8d75-2fda4c273a48/1/VWpfoNz7NEM_m4YNleLEQlR8X5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.0.48.0/22
Signature Algorithm: sha256WithRSAEncryption
16:cb:c3:ef:99:7a:fe:5c:a0:9d:51:ca:64:33:a3:05:06:06:
6d:c0:2b:97:98:a2:68:f9:eb:87:4a:f5:77:d5:5e:67:7f:b4:
e1:f8:7f:be:da:34:ad:0e:42:ec:c8:06:53:a8:b3:9a:96:28:
a2:9f:36:fb:15:e6:01:b2:08:14:ef:cb:90:92:c0:63:15:fe:
45:58:d9:77:65:23:28:fd:c7:aa:9d:6d:7d:c1:8a:83:05:6e:
07:27:14:3d:c5:ff:6d:4c:ac:d5:4f:c3:68:5c:9d:00:cf:30:
1a:ae:2e:2a:40:4f:52:a0:55:92:89:53:19:38:29:98:09:5c:
8f:8c:0d:3e:77:3b:52:ba:b9:71:3e:ce:f9:5b:a5:73:17:1c:
51:b0:5e:50:23:f7:7b:a6:28:d2:f1:13:16:7f:33:a5:34:6a:
0c:73:56:fd:ce:a0:80:89:13:dc:85:dc:1f:02:da:b2:41:f4:
79:99:ce:e4:22:95:bd:55:83:81:c7:86:88:fc:b4:73:b4:d7:
99:d1:0d:8f:2b:e5:ec:0f:b4:35:51:c6:3f:e1:ea:89:9a:f4:
5c:50:3a:4d:71:f1:e5:1e:37:43:cb:b0:aa:b6:2b:02:51:3b:
57:de:d3:35:9c:30:04:ef:99:71:4b:b6:f6:6a:0d:09:b1:f6:
00:1c:6a:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 2 09:25:01 2024 by rpki-client on console-fra.rpki-client.org