Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/06fe14-d146-4e66-a841-2c64c291353e/1/IhXmqVxBo8fHWd1yCUpVxKSADt4.roa
File: IhXmqVxBo8fHWd1yCUpVxKSADt4.roa (raw, json)
Hash identifier: jlyPuf1U9E2yCqbEcF6/c4tZpmE1+KUlHQGrkolIEew=
Subject key identifier: 22:15:E6:A9:5C:41:A3:C7:C7:59:DD:72:09:4A:55:C4:A4:80:0E:DE
Certificate issuer: /CN=27c007e5082b8e8d8289018718cfd527a7893e5e
Certificate serial: 018DB15CCC27CF77CE0B6AB356BF1ACF0DA4
Authority key identifier: 27:C0:07:E5:08:2B:8E:8D:82:89:01:87:18:CF:D5:27:A7:89:3E:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J8AH5Qgrjo2CiQGHGM_VJ6eJPl4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/06fe14-d146-4e66-a841-2c64c291353e/1/IhXmqVxBo8fHWd1yCUpVxKSADt4.roa
Signing time: Fri 16 Feb 2024 10:01:05 +0000
ROA not before: Fri 16 Feb 2024 10:01:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216188
IP address blocks: 45.10.24.0/24 maxlen: 24
45.133.9.0/24 maxlen: 24
152.89.239.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:b1:5c:cc:27:cf:77:ce:0b:6a:b3:56:bf:1a:cf:0d:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27c007e5082b8e8d8289018718cfd527a7893e5e
Validity
Not Before: Feb 16 10:01:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2215e6a95c41a3c7c759dd72094a55c4a4800ede
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:20:d1:29:7e:39:29:76:ad:03:00:ea:61:de:
2c:f6:fc:b8:68:b2:9b:ed:bc:36:62:d4:d5:e2:22:
08:c4:36:27:3b:10:c4:b1:86:7f:99:89:26:2b:1e:
9d:e9:bd:6f:9c:26:be:f6:b7:d6:cc:86:a9:27:5a:
b1:fd:67:b0:04:3d:5b:d4:86:0d:d3:78:42:c0:a3:
bd:bd:50:59:41:13:55:35:58:dd:1f:d1:5e:0a:3c:
93:75:c5:1d:ff:27:1d:5b:e6:58:a3:26:b9:87:60:
17:9c:01:36:5f:25:91:8a:ea:00:91:88:cc:c2:9a:
a0:7e:30:64:76:9a:7f:f4:a5:af:c7:ae:10:7c:91:
43:af:a0:4d:4f:e9:30:03:45:05:91:87:2b:0c:4e:
c3:5d:5a:1a:60:31:1c:bf:9b:5f:53:1c:eb:78:ed:
b7:2f:19:9f:dd:65:69:7b:de:c8:0a:81:9d:8b:3d:
2f:b5:e2:28:68:e4:15:c1:b3:74:89:40:7a:38:3a:
e8:32:a0:c3:19:d7:c0:40:87:bd:ee:f1:cb:da:0a:
41:28:a3:e2:95:8b:75:00:93:be:90:29:19:c1:c8:
90:40:bb:99:3a:b4:52:24:6e:3a:b0:bd:c7:d2:b5:
a2:53:d5:ed:77:8b:c4:91:b8:a2:6e:3d:f5:80:2e:
05:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:15:E6:A9:5C:41:A3:C7:C7:59:DD:72:09:4A:55:C4:A4:80:0E:DE
X509v3 Authority Key Identifier:
keyid:27:C0:07:E5:08:2B:8E:8D:82:89:01:87:18:CF:D5:27:A7:89:3E:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J8AH5Qgrjo2CiQGHGM_VJ6eJPl4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/06fe14-d146-4e66-a841-2c64c291353e/1/IhXmqVxBo8fHWd1yCUpVxKSADt4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/06fe14-d146-4e66-a841-2c64c291353e/1/J8AH5Qgrjo2CiQGHGM_VJ6eJPl4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.24.0/24
45.133.9.0/24
152.89.239.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:ec:1e:20:3d:d8:45:19:21:42:59:20:8d:24:ab:c3:24:b3:
f3:c6:b7:fc:72:bf:cb:e2:18:d6:54:61:ba:b9:40:13:be:e0:
d7:41:a7:9a:e7:15:f8:53:8c:4d:33:06:cd:4f:c0:e7:e3:eb:
2c:e7:aa:fa:a8:58:fa:3f:e7:8c:09:57:69:7c:94:10:e5:fd:
84:32:79:f8:c6:30:1e:94:69:2c:1d:ef:e8:09:c0:2f:0d:99:
aa:d4:06:d6:aa:77:9d:a7:55:8b:00:87:aa:bb:d3:09:7c:8d:
0f:53:b7:b8:50:7f:08:e6:ae:65:59:be:e0:e9:91:7d:79:ce:
96:94:4e:fc:b3:12:8c:82:b0:be:c3:e5:04:36:dd:e5:fa:5d:
44:b4:09:f8:6f:07:06:d8:47:ab:c0:98:34:32:4d:87:f3:78:
7f:23:65:7d:cc:a1:ee:d8:09:64:47:e8:06:56:97:aa:f8:ca:
ae:49:da:10:fc:08:4c:36:9b:5a:6b:f7:88:72:33:69:ab:27:
6c:0a:e6:73:47:21:cc:8b:08:34:bd:b1:04:e4:f5:ac:b5:b8:
ba:7f:e4:51:e1:d6:b8:76:ef:87:7b:cc:2d:72:74:a3:77:a9:
d4:45:fa:73:9c:66:bf:21:a2:f3:09:3c:70:0d:75:4b:14:9b:
f0:f8:3b:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:54 2024 by rpki-client on console-ams.rpki-client.org