Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/AS142594.roa
File: AS142594.roa (raw, json)
Hash identifier: iGyh8GmXxcVASNoI++HhXZjot5rjeHlAuEF+LNVBBY0=
Subject key identifier: A2:EC:88:B4:89:01:81:36:F9:CE:F0:E3:8F:B1:89:6B:95:DB:9C:D9
Certificate issuer: /CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
Certificate serial: 63779D478A7E45A9B85DE73D875BB1863F501B73
Authority key identifier: D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/AS142594.roa
Signing time: Sat 11 May 2024 09:46:52 +0000
ROA not before: Sat 11 May 2024 09:41:52 +0000
ROA not after: Sat 10 May 2025 09:46:52 +0000
asID: 142594
IP address blocks: 2a13:df80:61::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:77:9d:47:8a:7e:45:a9:b8:5d:e7:3d:87:5b:b1:86:3f:50:1b:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
Validity
Not Before: May 11 09:41:52 2024 GMT
Not After : May 10 09:46:52 2025 GMT
Subject: CN=A2EC88B489018136F9CEF0E38FB1896B95DB9CD9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:b4:a4:09:47:6d:f0:bd:0a:19:45:11:13:72:
4f:89:5b:21:53:45:26:ca:7c:9d:32:3c:73:f6:d9:
0f:41:ce:13:24:21:98:d6:b6:2f:fd:e5:d1:82:d2:
01:c6:78:c9:46:35:1d:07:7c:fc:d9:46:84:22:72:
2f:5e:9d:dc:c0:85:94:1a:d0:11:58:74:b4:78:24:
5a:e1:de:88:44:fd:a3:0d:e6:42:95:8d:48:58:1b:
46:10:9a:63:18:50:0b:8f:48:7d:d5:59:e5:38:12:
50:da:97:f9:84:20:86:6a:95:d1:e8:1e:57:27:6d:
4f:a0:20:e1:d3:f0:11:26:86:c2:86:9b:48:28:80:
c8:ac:64:65:62:56:ac:45:6f:c4:de:20:1c:83:e7:
cf:e5:84:a9:ed:37:2b:89:90:31:9b:3e:23:ac:3b:
8e:02:bd:13:b0:f2:77:ba:0d:c9:5b:97:92:73:65:
64:f6:f2:f7:88:94:17:e0:ff:98:77:e5:c1:8a:04:
d5:0b:a0:6b:5a:64:8d:4a:fb:81:05:c8:9b:0f:10:
5b:02:d9:c5:a4:ad:ac:10:3d:b8:ac:7c:70:62:83:
95:56:ec:f4:3a:5a:24:a3:12:b8:0a:bc:60:72:50:
52:77:5b:40:6e:7e:3f:db:01:bc:ec:b6:24:c7:2a:
55:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:EC:88:B4:89:01:81:36:F9:CE:F0:E3:8F:B1:89:6B:95:DB:9C:D9
X509v3 Authority Key Identifier:
keyid:D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/D5C3D5E70FC9AD10BA90D45DC66454E9E3A146A8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/AS142594.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:df80:61::/48
Signature Algorithm: sha256WithRSAEncryption
95:62:61:fe:a3:a3:15:96:fe:6e:62:39:ac:d1:e2:84:87:bd:
4f:55:a0:db:c5:48:04:56:e1:b0:b4:24:4d:4a:51:4d:7a:8b:
77:30:5f:dd:5d:0c:8f:0d:e8:56:43:a6:0e:dd:27:b9:79:51:
98:ef:be:b3:29:0d:b4:da:24:a2:34:ca:65:29:83:48:3c:d8:
f8:25:09:7b:88:30:82:46:fa:55:c0:c5:61:2c:a1:90:8a:a8:
16:cd:54:bc:5d:b8:76:d9:bc:c4:1c:19:65:d4:c5:ab:d2:7e:
53:75:cb:38:01:2e:7c:ec:b9:52:7c:4b:97:a9:5e:19:d8:c4:
e9:44:d3:05:d6:9d:19:88:4c:5b:17:c5:f7:60:b2:c2:3f:88:
e6:ca:e3:bc:f6:61:a9:e1:71:fd:9c:c8:ec:31:65:a4:90:7a:
87:c0:45:50:48:3f:ba:db:14:55:52:3b:b8:04:a5:9c:61:fc:
6d:80:33:d1:2f:0b:50:6f:d9:df:25:be:fc:79:4f:fb:7f:de:
be:0d:71:6c:43:7a:be:d5:02:8f:0f:eb:57:e0:08:34:42:94:
86:ff:06:4c:39:69:51:5a:38:df:fa:b1:77:90:ab:39:5f:42:
cd:3c:ed:35:f8:38:15:19:2b:1a:ef:a7:95:16:90:1f:f4:8e:
1d:09:23:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 14:01:40 2024 by rpki-client on console-fra.rpki-client.org