Route Origin Authorization
$ rpki-client -vvf rpki.sn-p.io/repo/sn-p-io/0/3139352e3138342e3234372e302f32342d3332203d3e20323035383438.roa
File: 3139352e3138342e3234372e302f32342d3332203d3e20323035383438.roa (raw, json)
Hash identifier: 6I/RC8ncOnLLoJEmqReOrkhzrAI5/fMQ1+k952xfODk=
Subject key identifier: 82:67:09:8B:8B:DF:12:26:0C:FA:A3:E5:1B:89:B3:A8:4D:FF:72:87
Certificate issuer: /CN=3B3E1BDCED8CB89597FE92EAF75BE2DF98AF84A7
Certificate serial: 6CD0980B65FDD16B1953CC97D6B8835FC00799F6
Authority key identifier: 3B:3E:1B:DC:ED:8C:B8:95:97:FE:92:EA:F7:5B:E2:DF:98:AF:84:A7
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/3B3E1BDCED8CB89597FE92EAF75BE2DF98AF84A7.cer
Subject info access: rsync://rpki.sn-p.io/repo/sn-p-io/0/3139352e3138342e3234372e302f32342d3332203d3e20323035383438.roa
Signing time: Mon 04 Mar 2024 13:26:28 +0000
ROA not before: Mon 04 Mar 2024 13:21:28 +0000
ROA not after: Mon 03 Mar 2025 13:26:28 +0000
asID: 205848
IP address blocks: 195.184.247.0/24 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:d0:98:0b:65:fd:d1:6b:19:53:cc:97:d6:b8:83:5f:c0:07:99:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3B3E1BDCED8CB89597FE92EAF75BE2DF98AF84A7
Validity
Not Before: Mar 4 13:21:28 2024 GMT
Not After : Mar 3 13:26:28 2025 GMT
Subject: CN=8267098B8BDF12260CFAA3E51B89B3A84DFF7287
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:2c:46:ac:c3:88:a3:1f:08:12:e7:a7:2b:42:
51:83:90:9c:d5:76:38:c8:e3:9f:f3:4a:01:d8:dd:
55:f7:3c:85:15:58:00:da:2f:b0:78:83:95:5e:70:
66:66:7e:1b:3c:8c:5c:c1:e2:36:49:04:fd:50:b6:
25:f2:af:ce:cc:06:17:19:e8:ae:96:de:0a:f0:02:
45:5e:c5:6e:76:3e:36:61:cd:77:a1:dc:d2:dc:90:
45:5d:9c:4f:22:31:4e:4c:23:a0:d8:33:ad:ee:15:
5c:83:56:05:85:dc:cc:b9:da:3e:26:6a:7b:44:cc:
45:06:63:d9:90:b2:28:5e:94:5d:23:87:71:8b:2d:
5e:eb:d7:9d:39:af:5e:e6:ad:74:b1:16:bc:97:3a:
04:57:b3:97:95:88:18:73:69:f1:76:fb:b1:96:45:
9b:89:06:6b:a3:af:98:76:35:c1:8f:19:d4:cc:41:
b3:0c:78:11:9d:3a:8f:4a:35:6d:ae:d9:d4:f5:b1:
79:12:52:74:a7:89:8e:26:be:af:f8:c9:55:c9:90:
5a:a3:de:dc:2f:ef:63:a3:04:bf:90:7d:00:36:55:
e3:5b:4e:5e:63:c1:c9:c6:24:d5:c2:67:52:29:07:
4d:01:b2:d8:82:27:af:6f:04:b6:1e:69:82:82:8e:
e5:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:67:09:8B:8B:DF:12:26:0C:FA:A3:E5:1B:89:B3:A8:4D:FF:72:87
X509v3 Authority Key Identifier:
keyid:3B:3E:1B:DC:ED:8C:B8:95:97:FE:92:EA:F7:5B:E2:DF:98:AF:84:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sn-p.io/repo/sn-p-io/0/3B3E1BDCED8CB89597FE92EAF75BE2DF98AF84A7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/3B3E1BDCED8CB89597FE92EAF75BE2DF98AF84A7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sn-p.io/repo/sn-p-io/0/3139352e3138342e3234372e302f32342d3332203d3e20323035383438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.184.247.0/24
Signature Algorithm: sha256WithRSAEncryption
45:e8:54:6d:f6:70:f2:04:14:ba:8f:3d:8e:1f:28:cf:e6:d6:
9c:2a:69:0c:d2:9a:ef:66:fa:4d:da:5e:ae:fd:ee:ce:9d:ce:
d7:69:99:09:db:94:d0:8a:32:6f:cd:bb:97:82:a3:66:ee:07:
91:c8:ac:48:f8:4e:63:a8:b0:d1:62:55:e1:8a:57:35:14:72:
a9:99:0c:2b:0d:3b:c2:75:b3:3c:b5:fd:78:35:67:77:02:f2:
97:82:ad:b3:07:40:ec:90:81:d1:1c:87:5c:a2:31:95:07:e5:
18:90:d7:4f:3d:bb:5c:50:53:ed:71:e4:29:df:7f:46:7b:17:
4d:c4:8e:26:73:8e:b5:b6:fa:43:62:be:db:7f:ea:e6:c6:c3:
fe:9c:8e:79:f5:79:85:09:03:c3:29:bf:f6:f4:b4:fc:20:b9:
52:4a:da:6f:b3:23:2a:31:ec:b2:b0:e5:90:41:41:68:8b:e0:
5a:72:96:f4:0d:53:35:5a:65:82:89:9b:5d:14:51:f4:a9:f5:
e6:64:19:92:ed:8b:3f:61:57:1c:b7:49:a9:fa:2d:f0:a4:9b:
d0:b3:71:3f:f0:57:b7:b8:84:b1:e9:bb:af:33:a2:35:6f:16:
9c:d3:78:e6:d9:47:0b:d9:93:c1:c8:de:b8:2c:79:61:39:7f:
9b:53:b5:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:24 2024 by rpki-client on console-fra.rpki-client.org