Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/FXQkINWJP40BVYVSZ_RczGPnDRE.roa
File: FXQkINWJP40BVYVSZ_RczGPnDRE.roa (raw, json)
Hash identifier: Q3WjHUKxBYUQlVVLI4ahOZdLjn5BS2dYGijpsTtFJKw=
Subject key identifier: 15:74:24:20:D5:89:3F:8D:01:55:85:52:67:F4:5C:CC:63:E7:0D:11
Certificate issuer: /CN=3c4ed942e5c742e77bfb9beb954f872534f52848
Certificate serial: 0185719541655368568DC2F50926FE9F7846
Authority key identifier: 3C:4E:D9:42:E5:C7:42:E7:7B:FB:9B:EB:95:4F:87:25:34:F5:28:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PE7ZQuXHQud7-5vrlU-HJTT1KEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/FXQkINWJP40BVYVSZ_RczGPnDRE.roa
Signing time: Mon 02 Jan 2023 08:24:45 +0000
ROA not before: Mon 02 Jan 2023 08:24:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 194.15.152.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:95:41:65:53:68:56:8d:c2:f5:09:26:fe:9f:78:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4ed942e5c742e77bfb9beb954f872534f52848
Validity
Not Before: Jan 2 08:24:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=15742420d5893f8d0155855267f45ccc63e70d11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:5f:75:d6:88:25:8f:f7:e5:cc:b8:4c:c0:22:
bf:11:77:76:af:6e:f6:fb:c4:bf:2e:8b:e8:29:b2:
fc:fb:4b:99:3e:42:3b:b5:61:e5:a6:d0:3f:67:c1:
30:93:60:63:aa:e5:09:a1:16:d7:05:04:08:83:51:
1d:76:f1:9b:b7:a1:73:7b:50:61:45:21:13:39:e1:
51:05:de:9d:6e:32:69:cc:5a:87:dd:9f:68:68:e1:
e2:e3:71:10:e9:fd:62:ee:96:dc:a8:be:ad:e9:fa:
54:00:d7:9f:94:65:30:39:01:75:56:e7:62:94:79:
55:be:9c:37:fa:d0:e4:d6:6c:be:95:14:17:c5:2a:
fc:e6:ff:47:72:14:05:67:25:cb:d3:e4:c5:d9:b1:
a3:31:b9:f8:ec:88:3b:1e:e5:b6:8a:83:45:41:ca:
90:2e:3d:06:57:9c:57:cb:48:83:62:91:71:ea:b9:
2d:57:22:68:27:a3:22:cd:a6:0c:2a:06:f7:42:85:
17:53:b1:53:4b:d1:87:52:ef:f3:aa:da:db:e8:6a:
46:40:4b:3d:dc:94:37:1a:26:6f:24:97:cc:ee:26:
bb:a5:e9:1f:c2:6d:56:dc:0e:48:a1:20:1f:8e:ca:
26:3e:e3:41:bc:16:80:12:14:f5:cf:5d:8c:74:a6:
9d:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:74:24:20:D5:89:3F:8D:01:55:85:52:67:F4:5C:CC:63:E7:0D:11
X509v3 Authority Key Identifier:
keyid:3C:4E:D9:42:E5:C7:42:E7:7B:FB:9B:EB:95:4F:87:25:34:F5:28:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PE7ZQuXHQud7-5vrlU-HJTT1KEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/FXQkINWJP40BVYVSZ_RczGPnDRE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/PE7ZQuXHQud7-5vrlU-HJTT1KEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.15.152.0/22
Signature Algorithm: sha256WithRSAEncryption
50:c8:5b:81:69:dd:cd:22:d0:53:a2:63:27:4b:50:6c:58:c0:
ac:53:be:e2:27:0d:9d:13:9c:8c:47:94:b9:46:35:c8:ca:37:
9a:1f:40:9a:5d:d2:45:d2:34:73:84:02:91:b9:45:63:19:1c:
0a:f9:d2:54:67:fc:19:84:e2:23:2c:7c:85:57:00:ce:3d:26:
f0:78:9d:4d:0d:32:ea:e8:1b:23:d0:80:07:c3:87:ef:b8:04:
d4:5e:6b:b8:58:31:a7:2f:79:2a:f3:7e:cc:52:32:e3:44:65:
18:1f:9d:f3:7f:16:2f:b9:79:45:d6:7e:00:84:a3:94:7c:92:
9c:e3:12:96:7f:bd:bc:7d:c9:9e:62:c6:51:c4:2a:b3:fc:08:
f3:4c:e0:24:ba:e6:ff:9e:ee:9d:65:ee:fc:d6:85:ed:eb:a9:
da:8d:51:5c:1c:97:21:94:ab:54:ff:12:97:a9:22:41:d2:57:
61:ab:d8:f5:3c:99:51:1c:18:d8:aa:e7:d8:d5:0b:77:b9:2a:
61:ee:17:57:d2:af:24:f7:69:3e:58:19:1b:f2:8f:ac:14:20:
81:68:dc:cd:c3:a2:bf:51:42:29:42:60:90:12:f1:cc:01:dc:
18:c3:ad:53:05:f0:d4:45:a4:2f:68:ee:ec:af:b3:2c:96:c8:
29:69:e5:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:09 2024 by rpki-client on console-ams.rpki-client.org