Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/1-lbESvil9BcjYfvplVUt7gcks0M.roa
File: 1-lbESvil9BcjYfvplVUt7gcks0M.roa (raw, json)
Hash identifier: kLa6KdA2jfGLGWmkKh4SpxpCb7a9YUnWOYvUOD3hdgw=
Subject key identifier: FA:56:C4:4A:F8:A5:F4:17:23:61:FB:E9:95:55:2D:EE:07:24:B3:43
Certificate issuer: /CN=c04db7623241d7e6678fc25751fa4e0b6665186b
Certificate serial: 0185708CC6915946BC5F97DCDF87FBCED362
Authority key identifier: C0:4D:B7:62:32:41:D7:E6:67:8F:C2:57:51:FA:4E:0B:66:65:18:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wE23YjJB1-Znj8JXUfpOC2ZlGGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/1-lbESvil9BcjYfvplVUt7gcks0M.roa
Signing time: Mon 02 Jan 2023 03:35:52 +0000
ROA not before: Mon 02 Jan 2023 03:35:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20668
IP address blocks: 185.206.53.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:8c:c6:91:59:46:bc:5f:97:dc:df:87:fb:ce:d3:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c04db7623241d7e6678fc25751fa4e0b6665186b
Validity
Not Before: Jan 2 03:35:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fa56c44af8a5f4172361fbe995552dee0724b343
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:db:e9:93:93:3c:ac:45:75:51:d6:53:f5:0d:
4e:55:d8:b2:43:cb:78:e0:4b:d4:83:23:b9:d9:cd:
06:69:f5:cc:3f:f5:57:27:d2:8a:d5:be:bd:2d:97:
54:0d:4d:d0:fb:ff:8e:0e:9b:ef:04:2c:bd:b2:13:
3a:86:73:c6:8c:6a:c9:77:c8:c5:f7:a1:85:c0:86:
89:f9:01:46:d5:85:41:dd:6d:8b:16:32:b3:c4:52:
08:3e:96:80:d4:92:48:5c:60:cb:f4:ec:8e:d9:4a:
a4:1b:1e:31:42:96:6b:45:71:ca:d4:47:0a:af:3f:
3a:e7:de:a6:52:12:3e:7d:92:87:6b:fa:27:45:a7:
2f:f2:fb:ea:6e:8f:aa:d5:c3:60:2f:48:dd:ca:f7:
96:eb:b9:de:49:d2:c0:4d:2c:3a:84:09:a2:95:fc:
c5:d0:42:46:1f:eb:27:40:ff:2c:2b:3e:e6:76:ee:
40:53:d3:a3:d1:8d:f3:4a:38:7b:63:6e:b4:46:59:
b7:2b:84:63:d5:96:b4:ea:58:80:25:a5:83:b6:2b:
3b:d9:4e:f7:0a:12:bb:8c:29:3a:83:5e:0b:6a:30:
09:cf:ac:7e:68:f3:f4:9c:71:f8:da:3c:5c:94:65:
09:0e:13:bd:78:39:29:2b:0f:99:c0:e7:34:56:3d:
41:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:56:C4:4A:F8:A5:F4:17:23:61:FB:E9:95:55:2D:EE:07:24:B3:43
X509v3 Authority Key Identifier:
keyid:C0:4D:B7:62:32:41:D7:E6:67:8F:C2:57:51:FA:4E:0B:66:65:18:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wE23YjJB1-Znj8JXUfpOC2ZlGGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/1-lbESvil9BcjYfvplVUt7gcks0M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/wE23YjJB1-Znj8JXUfpOC2ZlGGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.206.53.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:ae:97:b7:26:d3:1e:09:1c:6e:a2:c9:5e:b3:9c:2a:77:43:
8f:27:5a:b2:bd:86:67:7e:cb:e7:5a:a0:39:94:61:bd:5e:e8:
b3:52:dc:c8:72:05:32:a1:29:33:b4:e1:46:73:f3:e3:da:f8:
c5:9a:56:8a:a3:4e:15:0a:69:31:39:09:31:a0:23:1b:07:3a:
ae:ab:bb:f7:48:e0:8c:f5:a8:1d:02:1a:29:ce:94:a5:6d:a9:
fe:af:b3:4b:9d:67:75:e2:3a:e9:08:1d:03:57:0d:67:1a:a6:
7d:aa:5f:e9:42:24:5f:ff:ea:71:a3:98:61:a6:9e:b6:b0:42:
34:e2:e8:cf:58:19:46:b0:54:b2:8b:20:ab:22:e9:0d:3a:8e:
50:ef:19:90:63:93:96:d4:37:49:11:37:4d:8b:5d:3c:71:6d:
ca:b5:c0:c6:ea:8d:a7:19:4e:81:0f:ce:8e:5b:1b:33:84:e1:
86:5e:bb:68:77:b8:5b:61:23:36:de:f6:dd:1b:ac:1b:dc:dc:
cb:3d:02:10:90:4c:53:54:20:dc:9d:72:25:74:3b:04:a0:85:
aa:3f:7a:09:5b:a4:0e:df:d6:5a:f1:b4:5c:03:57:99:7c:ac:
72:23:12:4a:94:da:61:ce:15:c1:0b:8e:13:d2:48:82:c7:7e:
9a:36:90:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:59 2024 by rpki-client on console-ams.rpki-client.org