Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/23d525-8296-4f9c-9de4-91e32c517152/1/EN3G0camIi5-EByZB5SMK4i-A8Q.roa
File: EN3G0camIi5-EByZB5SMK4i-A8Q.roa (raw, json)
Hash identifier: Kk/49xSDZXgTkLbP5lWzpmUvbzNtoqHKhaL0Oa1wF6o=
Subject key identifier: 10:DD:C6:D1:C6:A6:22:2E:7E:10:1C:99:07:94:8C:2B:88:BE:03:C4
Certificate issuer: /CN=56c8a1713c7476e00ed2b77fd98fd89330365d87
Certificate serial: 09E41DC9
Authority key identifier: 56:C8:A1:71:3C:74:76:E0:0E:D2:B7:7F:D9:8F:D8:93:30:36:5D:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VsihcTx0duAO0rd_2Y_YkzA2XYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/23d525-8296-4f9c-9de4-91e32c517152/1/EN3G0camIi5-EByZB5SMK4i-A8Q.roa
Signing time: Sat 01 Jan 2022 06:54:36 +0000
ROA not before: Sat 01 Jan 2022 06:54:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210039
IP address blocks: 176.111.52.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 165944777 (0x9e41dc9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56c8a1713c7476e00ed2b77fd98fd89330365d87
Validity
Not Before: Jan 1 06:54:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=10ddc6d1c6a6222e7e101c9907948c2b88be03c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e3:06:fe:37:d3:60:e2:8a:7d:49:93:82:c2:
90:0f:bf:6f:49:0b:bf:8c:a1:c1:6f:d5:7b:f4:91:
ee:0f:9f:a9:0e:a3:7e:f0:0c:18:a3:3a:00:b6:8a:
32:6d:4d:db:a6:48:5e:93:d9:1e:d9:c7:a9:ee:d3:
8e:12:b9:43:38:dd:4e:1b:8e:87:e3:62:16:22:17:
a8:96:32:17:b5:57:4c:0f:1a:64:d7:2e:9f:83:30:
51:fe:65:31:fe:5a:96:fb:82:ef:c7:16:39:30:14:
59:d3:cb:8d:d1:3b:93:1c:b2:05:c8:ae:69:4a:12:
01:27:b1:61:f8:cf:7b:2b:5a:9a:04:11:5d:ec:6f:
41:47:c3:0f:8c:ad:ca:f9:24:c4:5e:f9:7c:a8:6a:
60:60:42:ca:45:51:08:8e:3a:78:e1:e2:a2:47:5b:
5b:e6:b7:f1:b4:dd:f2:b1:d3:39:3c:b5:13:53:87:
82:98:fe:50:f4:3d:9a:0d:45:02:04:34:99:e4:1f:
df:ea:92:2c:87:3f:d8:10:18:a0:ff:81:80:7a:25:
6f:82:bf:5b:f7:a6:83:c8:a2:1d:11:6a:c4:17:52:
4b:08:5a:d6:3a:84:d6:13:0c:77:74:cf:9b:e7:b3:
3f:01:f5:28:96:e4:f4:ed:78:ec:cd:1f:c3:c9:80:
44:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:DD:C6:D1:C6:A6:22:2E:7E:10:1C:99:07:94:8C:2B:88:BE:03:C4
X509v3 Authority Key Identifier:
keyid:56:C8:A1:71:3C:74:76:E0:0E:D2:B7:7F:D9:8F:D8:93:30:36:5D:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VsihcTx0duAO0rd_2Y_YkzA2XYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/23d525-8296-4f9c-9de4-91e32c517152/1/EN3G0camIi5-EByZB5SMK4i-A8Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/23d525-8296-4f9c-9de4-91e32c517152/1/VsihcTx0duAO0rd_2Y_YkzA2XYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.111.52.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:e2:af:6a:8c:09:18:71:b5:7b:21:2f:01:7e:d1:08:2f:e4:
34:cd:f6:b8:75:2a:43:07:1c:ab:17:30:da:ee:8a:63:e9:79:
1a:69:b4:7d:00:c3:b4:bf:e5:1f:a7:54:fd:c5:f9:a9:66:97:
a0:a0:03:7c:f2:05:e8:38:b7:9e:d8:c5:87:33:73:0b:07:c2:
6e:01:3f:62:f5:a9:1f:f9:3d:b4:23:0c:28:f5:de:42:a3:ef:
b4:53:df:a2:70:3d:66:a6:7a:4e:9d:31:38:5c:ea:20:d7:30:
55:5a:bb:20:53:6f:9c:50:89:aa:aa:a0:9a:7a:45:e1:87:b7:
10:11:1c:c2:b1:34:9a:06:17:02:cb:8a:be:4c:0b:2c:4f:a6:
54:0e:06:a5:2c:18:22:e5:7a:b8:f6:ae:83:5e:af:c6:20:e3:
21:0a:d5:60:dc:9d:bb:8e:14:db:77:9d:d9:a9:f5:5f:a4:04:
2b:75:73:cc:b5:d8:4d:85:99:5f:49:fd:4c:46:2c:72:f4:19:
9f:c9:38:b9:3d:8d:94:b2:dd:88:0c:9f:54:0f:b7:08:cb:14:
a4:81:bf:d2:71:ea:1f:42:3c:5b:3d:9f:1e:5f:40:c9:4f:c6:
c3:85:5f:ac:83:1e:db:72:2e:26:a7:08:dc:3a:1b:e1:8f:32:
7a:85:b4:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:23 2024 by rpki-client on console-fra.rpki-client.org