Route Origin Authorization
$ rpki-client -vvf rpki.sn-p.io/repo/sn-p-io/0/3139352e3138342e3234372e302f32342d3234203d3e20323035383438.roa
File: 3139352e3138342e3234372e302f32342d3234203d3e20323035383438.roa (raw, json)
Hash identifier: nDym7Onx2pudB19QFatcY4m2YYdXJn6QVQ+UQtGeMfk=
Subject key identifier: 48:94:84:94:64:B5:4F:5F:AB:25:C8:FA:2E:ED:70:6D:87:60:22:98
Certificate issuer: /CN=3B3E1BDCED8CB89597FE92EAF75BE2DF98AF84A7
Certificate serial: 47661F3F45BCE00AB2DEA7F437D2949ACF7A753A
Authority key identifier: 3B:3E:1B:DC:ED:8C:B8:95:97:FE:92:EA:F7:5B:E2:DF:98:AF:84:A7
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/3B3E1BDCED8CB89597FE92EAF75BE2DF98AF84A7.cer
Subject info access: rsync://rpki.sn-p.io/repo/sn-p-io/0/3139352e3138342e3234372e302f32342d3234203d3e20323035383438.roa
Signing time: Fri 02 Feb 2024 17:43:31 +0000
ROA not before: Fri 02 Feb 2024 17:38:31 +0000
ROA not after: Fri 31 Jan 2025 17:43:31 +0000
asID: 205848
IP address blocks: 195.184.247.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:66:1f:3f:45:bc:e0:0a:b2:de:a7:f4:37:d2:94:9a:cf:7a:75:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3B3E1BDCED8CB89597FE92EAF75BE2DF98AF84A7
Validity
Not Before: Feb 2 17:38:31 2024 GMT
Not After : Jan 31 17:43:31 2025 GMT
Subject: CN=4894849464B54F5FAB25C8FA2EED706D87602298
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:18:78:58:ec:40:1f:7a:68:17:79:0a:d9:2a:
43:20:ab:ec:30:99:b2:1d:81:09:b3:e2:a7:98:00:
4b:32:cb:07:f0:17:b1:4a:1c:c7:18:8f:19:8c:c9:
fc:7c:4b:22:10:40:6c:2d:5b:69:3c:13:c0:5b:7b:
cb:ba:b4:37:39:08:a4:54:06:9f:5f:f6:41:05:3a:
b6:6a:2c:0e:d5:e5:81:29:e0:fe:d3:03:74:7a:14:
ff:86:ae:17:72:c2:83:c3:54:4f:71:f2:b4:65:1f:
e0:99:12:05:36:7b:98:fe:14:80:26:84:c8:fb:4f:
bb:19:7b:5b:64:27:7a:a7:bb:13:ac:67:0b:47:d4:
8d:98:3f:07:43:0d:5f:b8:26:e5:60:8d:57:52:a4:
af:54:95:c8:fa:79:86:26:de:d3:78:40:d7:a0:ec:
cd:22:2c:4b:a7:6c:d2:f5:55:83:6f:02:21:32:1d:
eb:4b:9e:8d:23:46:02:a5:7d:09:c1:d0:61:7f:c3:
3c:ab:1c:36:93:c5:9d:8a:87:8d:0a:b7:9f:e7:d7:
81:2b:13:37:19:4b:b6:3c:e6:82:c8:b0:e8:16:17:
ba:d4:92:34:c1:0a:c7:ce:23:66:ed:7d:ee:cc:78:
12:06:f3:84:68:27:29:a2:aa:27:ce:42:98:99:ff:
d4:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:94:84:94:64:B5:4F:5F:AB:25:C8:FA:2E:ED:70:6D:87:60:22:98
X509v3 Authority Key Identifier:
keyid:3B:3E:1B:DC:ED:8C:B8:95:97:FE:92:EA:F7:5B:E2:DF:98:AF:84:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sn-p.io/repo/sn-p-io/0/3B3E1BDCED8CB89597FE92EAF75BE2DF98AF84A7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/3B3E1BDCED8CB89597FE92EAF75BE2DF98AF84A7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sn-p.io/repo/sn-p-io/0/3139352e3138342e3234372e302f32342d3234203d3e20323035383438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.184.247.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:b1:97:6d:d2:a5:c1:d1:ce:7d:16:0a:fd:13:28:81:26:66:
e2:66:85:c9:f9:61:ce:4c:13:9e:ff:0a:c1:89:6a:97:ca:53:
40:23:3b:9e:33:48:c7:53:bd:23:c2:be:a4:c4:22:21:97:02:
a1:1c:d0:5d:80:2a:81:17:6e:3a:62:e5:fc:10:5d:e7:e2:86:
a3:53:29:50:3c:d6:1c:2e:89:11:f5:6e:20:f5:e9:c6:f3:1f:
06:cb:76:ee:c5:db:c5:96:6a:51:dd:e7:bd:4d:f9:7b:be:c7:
cb:ab:b8:cc:41:0a:1d:65:ec:31:91:76:8c:95:03:e9:d1:7c:
bc:17:75:08:4e:27:1e:37:da:7f:a8:89:0e:4c:73:f9:58:e7:
3b:e4:0f:27:43:0e:59:ea:c6:dc:3b:a4:21:3e:07:9b:2c:df:
cf:35:57:19:87:23:df:ce:9b:9c:00:00:ce:e9:11:bc:95:17:
aa:b5:6e:b0:8a:b1:11:c7:e5:68:21:31:d4:9d:5b:e0:6a:13:
8a:12:c1:44:bf:e4:d7:10:b0:03:22:88:93:3b:11:0e:de:4a:
ad:a5:b9:bb:1b:0d:ad:76:1d:c0:1b:a9:e7:98:a7:26:fe:fd:
6f:58:71:95:96:56:aa:44:bb:c3:18:b8:da:b7:57:6c:5c:48:
bb:11:83:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:49 2024 by rpki-client on console-ams.rpki-client.org