Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/X4JIdUs9mo5hO4agEAU0aI9eLb0.roa
File: X4JIdUs9mo5hO4agEAU0aI9eLb0.roa (raw, json)
Hash identifier: MnWfcTrwjoU6K/8JZW+NygLnF+0Zrn4NU3AaRsqd8Is=
Subject key identifier: 5F:82:48:75:4B:3D:9A:8E:61:3B:86:A0:10:05:34:68:8F:5E:2D:BD
Certificate issuer: /CN=e8403b5e45cd58be5f6c5d33fa565ab49223e3db
Certificate serial: 018572FA5AC1C8613CE5F17C205BA1EAC028
Authority key identifier: E8:40:3B:5E:45:CD:58:BE:5F:6C:5D:33:FA:56:5A:B4:92:23:E3:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6EA7XkXNWL5fbF0z-lZatJIj49s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/X4JIdUs9mo5hO4agEAU0aI9eLb0.roa
Signing time: Mon 02 Jan 2023 14:54:47 +0000
ROA not before: Mon 02 Jan 2023 14:54:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35461
IP address blocks: 212.49.136.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:fa:5a:c1:c8:61:3c:e5:f1:7c:20:5b:a1:ea:c0:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8403b5e45cd58be5f6c5d33fa565ab49223e3db
Validity
Not Before: Jan 2 14:54:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5f8248754b3d9a8e613b86a0100534688f5e2dbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:bf:83:b0:25:06:8e:4a:c1:dc:f6:6f:76:de:
cb:c4:a5:df:8b:62:ab:f3:1a:9e:16:ad:7c:e4:f3:
3c:44:ae:ac:c5:c3:75:b3:d7:a3:69:b0:8f:51:4f:
c5:24:fc:5b:e0:7d:8d:f0:0a:cc:4e:b4:36:57:75:
bc:11:2f:4b:4d:e7:c2:a2:5a:10:3c:b1:ff:e3:68:
3d:6a:b2:86:b3:f5:e3:30:b9:c9:a1:5f:85:7d:e2:
b0:96:ff:99:15:c3:5d:de:ca:bd:cd:c6:ea:24:c6:
86:af:2d:f7:83:bd:8f:b8:f0:89:8c:98:d6:4b:5b:
89:5f:5f:d0:98:8f:0b:46:80:a0:f5:6b:1e:84:90:
a0:0a:ca:56:ae:6a:45:75:9b:f0:b3:6f:3c:9c:0f:
91:c9:7f:c5:ce:9a:24:4a:6d:40:70:2e:dc:f8:c6:
bf:72:fb:89:db:b8:6e:ed:1d:de:a9:fe:27:0f:04:
e5:c7:c8:89:c4:d7:ad:d7:4b:17:e9:17:97:45:36:
40:df:3c:7a:4b:55:b0:32:47:b3:ea:a4:a5:3b:87:
01:58:af:32:91:ca:8d:c7:37:8c:f6:e6:c3:be:f2:
01:bc:84:c5:3b:56:4e:f8:43:fd:54:ff:6e:95:ce:
76:05:a9:c2:55:2a:56:b8:a8:d3:60:a2:26:4c:d1:
cd:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:82:48:75:4B:3D:9A:8E:61:3B:86:A0:10:05:34:68:8F:5E:2D:BD
X509v3 Authority Key Identifier:
keyid:E8:40:3B:5E:45:CD:58:BE:5F:6C:5D:33:FA:56:5A:B4:92:23:E3:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6EA7XkXNWL5fbF0z-lZatJIj49s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/X4JIdUs9mo5hO4agEAU0aI9eLb0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.49.136.0/24
Signature Algorithm: sha256WithRSAEncryption
87:2a:1b:25:cf:5a:52:e8:77:26:40:02:6b:a9:25:2d:cf:17:
00:35:8f:ab:51:7b:7a:56:fc:f8:d3:db:81:cd:e4:68:92:87:
e7:10:9d:86:5c:a9:0b:ab:8f:71:0f:0d:46:40:32:77:b9:f9:
d2:03:0b:78:b9:0e:4f:ed:62:75:9a:56:73:37:75:58:29:a3:
a0:a1:3e:d8:80:64:d0:48:52:99:91:c8:6d:b3:a1:bd:e9:71:
3d:6e:56:e1:9c:90:b4:c0:12:13:f2:49:ca:49:3b:1a:bc:c6:
80:55:bf:43:8b:bf:32:0c:cb:2a:fc:17:95:3a:e3:14:51:f9:
cd:e0:a2:c8:fd:f2:15:59:74:83:da:56:fd:57:3c:2b:9a:3e:
e3:f7:7c:88:0e:e5:1b:bd:c5:3e:c2:74:1b:88:4e:6e:a4:a9:
49:1a:4c:ea:32:63:83:6a:21:20:7c:8e:6f:25:73:f1:e8:d2:
6b:30:7b:e1:22:f6:e5:10:48:5e:47:fb:7a:d6:42:36:3d:12:
7f:70:92:0f:38:16:62:8f:79:00:33:6f:e9:09:21:77:c4:70:
38:15:d3:61:e1:70:d7:99:fb:8a:7e:8c:e9:79:9e:47:2d:e8:
85:da:17:b3:c4:81:b8:57:39:f6:ae:0c:0f:b3:eb:df:84:0d:
21:70:f4:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:37:51 2025 by rpki-client