Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/c0fc0a-15d4-46cc-a8b9-47632cb5b854/1/qeypfUB5HujzlHw8l4jhdUdIow8.roa
File: qeypfUB5HujzlHw8l4jhdUdIow8.roa (raw, json)
Hash identifier: XGiTVzN/3h6Ck/k3fHwEv3cgWANS9yK2AuoCmQNjutM=
Subject key identifier: A9:EC:A9:7D:40:79:1E:E8:F3:94:7C:3C:97:88:E1:75:47:48:A3:0F
Certificate issuer: /CN=7de98f48e988790d0e0793537941b413d2e60306
Certificate serial: 09DD0B48
Authority key identifier: 7D:E9:8F:48:E9:88:79:0D:0E:07:93:53:79:41:B4:13:D2:E6:03:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/femPSOmIeQ0OB5NTeUG0E9LmAwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/c0fc0a-15d4-46cc-a8b9-47632cb5b854/1/qeypfUB5HujzlHw8l4jhdUdIow8.roa
Signing time: Thu 03 Mar 2022 10:39:25 +0000
ROA not before: Thu 03 Mar 2022 10:39:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44092
IP address blocks: 185.178.252.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 165481288 (0x9dd0b48)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7de98f48e988790d0e0793537941b413d2e60306
Validity
Not Before: Mar 3 10:39:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a9eca97d40791ee8f3947c3c9788e1754748a30f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:99:ca:e3:20:78:44:a6:ba:66:25:b0:ec:37:
d9:fc:99:ec:3c:20:1b:71:f9:ce:69:f1:b2:40:18:
e0:2c:d6:c5:4c:31:be:f7:82:01:98:3c:83:4c:fc:
9a:2d:37:59:97:c5:67:35:ef:05:76:63:98:f2:cd:
97:82:80:37:29:e9:5e:ca:a8:94:7d:cc:6a:51:ca:
27:81:c1:2b:1f:3a:98:95:8e:58:41:6b:5b:c0:1c:
7a:c4:22:13:7a:87:b2:23:3e:2d:ff:cf:68:d5:f0:
de:61:07:98:72:d6:f7:9b:bd:66:70:a3:70:04:23:
c5:3c:68:dc:a9:04:10:54:78:99:af:65:8a:d7:39:
ef:2c:e8:d3:bc:94:b2:a1:c9:f5:95:b1:ff:a9:a7:
f4:46:f1:85:e2:6b:95:df:8c:a1:f1:64:cc:60:d0:
9f:bf:94:7f:1a:e2:62:b5:10:8b:f2:85:7f:99:b0:
b7:fc:3f:21:1e:fb:0d:87:18:04:66:88:47:84:be:
04:ce:20:92:b7:36:fc:02:72:b5:b5:57:18:d6:76:
a7:b2:00:b1:32:ff:5b:c1:b2:cd:78:5d:63:0c:fa:
bf:5f:bc:0f:3a:7a:2d:13:e6:25:a1:11:3c:d3:0d:
7c:2f:06:11:49:34:9c:06:bf:d7:97:ef:b9:fc:9f:
64:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:EC:A9:7D:40:79:1E:E8:F3:94:7C:3C:97:88:E1:75:47:48:A3:0F
X509v3 Authority Key Identifier:
keyid:7D:E9:8F:48:E9:88:79:0D:0E:07:93:53:79:41:B4:13:D2:E6:03:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/femPSOmIeQ0OB5NTeUG0E9LmAwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/c0fc0a-15d4-46cc-a8b9-47632cb5b854/1/qeypfUB5HujzlHw8l4jhdUdIow8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/c0fc0a-15d4-46cc-a8b9-47632cb5b854/1/femPSOmIeQ0OB5NTeUG0E9LmAwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.178.252.0/22
Signature Algorithm: sha256WithRSAEncryption
00:51:ae:0b:ba:f1:75:50:ea:f3:26:0d:a1:ad:8d:32:85:56:
cd:63:2e:b4:a4:0f:8e:bd:6d:c3:c0:d2:3a:a8:9f:67:25:db:
91:b5:e1:be:65:79:ef:ff:2e:ec:08:b9:4f:48:2e:73:25:7f:
a5:0b:22:52:72:34:7b:dc:07:48:9b:a2:63:90:c1:ae:97:d2:
48:54:14:73:a6:12:99:fb:46:0e:97:b8:36:d0:94:ad:d0:d2:
21:4b:79:f8:ac:f5:8d:eb:51:1a:7f:39:88:81:39:0a:8c:38:
9b:00:a3:2f:bb:d7:fb:6a:66:bc:21:25:9d:2c:84:83:d8:1b:
6f:c4:2f:29:fa:a5:77:f1:26:14:e2:fa:74:2b:d7:8b:e7:d0:
3b:d0:17:1f:f5:76:ea:f6:f9:2f:cb:4c:9a:60:5f:40:59:42:
98:b8:eb:5f:dd:79:06:af:68:1c:3b:35:53:52:b8:cf:62:ce:
79:43:9b:cc:59:73:df:6f:18:b4:2b:b6:67:51:a6:5b:43:a6:
e3:8b:84:0e:b7:ec:d1:c0:a7:5b:07:20:bb:e3:0d:de:50:ea:
37:5d:be:b2:91:7c:c3:e7:ed:3f:75:d6:8e:38:f9:0f:c7:08:
78:1a:c5:a6:0a:38:ef:dd:41:f0:b3:4e:0d:d6:4a:ee:41:a4:
4f:e7:bc:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:47 2024 by rpki-client on console-ams.rpki-client.org