Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/zYqaHSsUcraq2TxmhHI5utA26HE.roa
File: zYqaHSsUcraq2TxmhHI5utA26HE.roa (raw, json)
Hash identifier: buU93f+t+25MrhX1nMWSK1AqpHiBulD4RoJrODqz6m0=
Subject key identifier: CD:8A:9A:1D:2B:14:72:B6:AA:D9:3C:66:84:72:39:BA:D0:36:E8:71
Certificate issuer: /CN=b0c20ae1dacca31815b274702927c1a5a9dbc7b3
Certificate serial: 01857139B8BE241E253841504BE5805E9ECB
Authority key identifier: B0:C2:0A:E1:DA:CC:A3:18:15:B2:74:70:29:27:C1:A5:A9:DB:C7:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/zYqaHSsUcraq2TxmhHI5utA26HE.roa
Signing time: Mon 02 Jan 2023 06:44:46 +0000
ROA not before: Mon 02 Jan 2023 06:44:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39712
IP address blocks: 5.154.186.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:39:b8:be:24:1e:25:38:41:50:4b:e5:80:5e:9e:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0c20ae1dacca31815b274702927c1a5a9dbc7b3
Validity
Not Before: Jan 2 06:44:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cd8a9a1d2b1472b6aad93c66847239bad036e871
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:18:3c:18:ed:9a:52:d1:68:3e:76:15:ec:08:
a4:5a:4e:83:ef:c5:84:91:a2:cd:5e:a8:6a:54:d2:
7c:8f:36:63:8a:19:a8:c4:fe:a0:58:83:47:6c:08:
38:61:1f:98:e1:1e:23:15:6e:22:08:38:53:5b:0c:
d4:12:82:ba:4b:0f:cc:1b:a5:61:3c:76:6a:0e:cb:
cc:60:73:8b:0d:88:21:18:c0:d4:fa:42:b4:1e:be:
cf:b7:24:e9:d4:5f:31:07:9a:36:9a:1f:df:4a:68:
1e:2d:ab:fc:52:ec:81:26:4f:af:5d:82:6c:c6:c9:
0a:47:bb:d5:cf:80:4f:7b:d8:d5:f3:82:27:9c:e2:
28:83:29:d1:5e:53:b4:4d:11:bc:88:20:da:5c:ea:
78:9d:5f:76:7b:e2:1c:cf:8c:d6:08:22:fb:f2:e8:
41:78:1e:f1:2c:35:f9:1b:e8:34:2a:2b:ab:2d:19:
e4:53:a3:48:35:7d:94:24:36:68:bc:ec:07:25:ac:
20:a8:31:30:e4:74:b4:be:ba:dc:fd:c2:53:54:14:
70:12:df:df:e2:4f:50:b7:96:cb:68:8d:cb:79:6e:
8a:2e:b9:87:c5:67:ff:e9:c3:65:4a:30:ee:69:21:
06:be:64:75:09:96:d2:c2:81:87:95:13:50:df:ce:
18:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:8A:9A:1D:2B:14:72:B6:AA:D9:3C:66:84:72:39:BA:D0:36:E8:71
X509v3 Authority Key Identifier:
keyid:B0:C2:0A:E1:DA:CC:A3:18:15:B2:74:70:29:27:C1:A5:A9:DB:C7:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/zYqaHSsUcraq2TxmhHI5utA26HE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.154.186.0/24
Signature Algorithm: sha256WithRSAEncryption
31:bf:50:76:a2:f7:f3:de:97:7d:05:d2:4d:1f:4b:b7:0c:07:
31:5d:0e:02:c4:79:54:2c:c0:d0:4c:60:a5:5a:3f:f4:71:be:
55:c2:f7:93:bd:d4:ef:e5:d8:41:dd:b7:d3:3b:f6:89:65:e8:
e2:af:54:cb:ff:b7:b6:9d:f8:1e:62:eb:1c:a0:74:32:e6:fc:
d2:8b:df:ef:8c:21:f6:41:d7:31:72:dc:a2:1c:62:de:be:23:
a5:dd:a4:74:07:31:33:14:09:f7:58:de:fd:a4:2c:cd:51:c9:
8e:8a:0d:89:da:04:9b:94:86:ce:4b:bb:20:2e:bb:66:58:31:
fa:05:2b:e9:50:f3:4e:81:f3:e4:f6:98:10:fe:fd:73:aa:a7:
15:ff:e4:47:7f:21:3c:0a:c4:d4:c6:d8:67:25:fd:a3:7f:9b:
b4:57:07:70:eb:e0:0d:1e:fe:ba:59:0d:74:48:58:0d:85:4e:
7e:01:76:ea:dc:4c:36:32:10:e0:76:03:0b:cb:81:16:0b:84:
c8:98:75:7b:0d:e1:42:7c:9e:bb:77:3a:fa:35:a0:07:76:2f:
25:43:3e:fa:a0:6e:5a:22:af:c5:02:88:3f:cd:b9:41:0c:a3:
00:89:8e:08:26:04:ac:94:7d:27:fd:7f:fd:89:01:c5:f1:e6:
e7:2f:4a:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:08 2024 by rpki-client on console-ams.rpki-client.org