Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/1-C_fuoVH7alYfJo5fIvW3Yu_ato.roa
File: 1-C_fuoVH7alYfJo5fIvW3Yu_ato.roa (raw, json)
Hash identifier: HIc02CnyBqtL3qc0puiKaIT8uHId2Ot9vP15bzJZg8E=
Subject key identifier: F8:2F:DF:BA:85:47:ED:A9:58:7C:9A:39:7C:8B:D6:DD:8B:BF:6A:DA
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 1468878A
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/1-C_fuoVH7alYfJo5fIvW3Yu_ato.roa
Signing time: Sat 02 Apr 2022 04:29:43 +0000
ROA not before: Sat 02 Apr 2022 04:29:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 85.8.164.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 342394762 (0x1468878a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Apr 2 04:29:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f82fdfba8547eda9587c9a397c8bd6dd8bbf6ada
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f8:a0:90:e3:f0:e7:0c:63:38:db:f3:6b:11:
a3:04:40:7d:84:c9:ca:4d:20:5e:64:23:70:f9:1c:
4f:88:6b:d7:85:5d:20:30:01:71:c5:b8:fa:db:e3:
70:15:d7:05:f3:d9:3c:77:64:92:b0:67:30:24:3c:
d3:67:9d:d5:ad:84:c7:ac:18:bf:28:01:e5:6b:cb:
32:7d:f2:5a:ed:23:69:25:ec:21:8d:22:91:79:11:
ef:f6:f7:29:97:29:6a:0d:79:66:d1:b7:28:56:d6:
8c:a0:07:9c:dc:8f:30:9c:d8:8a:f1:5d:f6:f0:7d:
de:29:bb:48:d6:51:d8:2d:90:72:40:5f:0a:3e:55:
6a:b5:0a:cf:a8:b7:72:21:0d:d3:d7:36:0b:75:be:
52:02:b3:e1:02:d3:6a:6a:98:de:27:fb:5f:2e:82:
e5:3e:ab:bc:88:20:49:62:d6:19:74:22:0a:2d:cc:
87:e4:3e:51:60:1d:10:c8:b6:e4:9a:c3:c6:6e:63:
ed:7d:76:a7:82:77:6d:e1:7c:b7:fe:6f:58:fb:d2:
69:0f:86:8d:e0:b2:c7:b4:f8:0e:22:01:a4:58:dd:
27:d0:ca:e6:c6:df:0c:8c:87:3f:cf:7e:2c:d6:a8:
70:78:31:e3:1b:a4:a5:bc:45:dd:1b:0d:ca:aa:0d:
79:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:2F:DF:BA:85:47:ED:A9:58:7C:9A:39:7C:8B:D6:DD:8B:BF:6A:DA
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/1-C_fuoVH7alYfJo5fIvW3Yu_ato.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.8.164.0/22
Signature Algorithm: sha256WithRSAEncryption
a8:4e:3c:a7:c0:f9:82:c7:69:3d:08:3e:c6:b3:d9:52:11:85:
2c:62:71:c5:06:6a:74:a1:34:4c:49:5d:81:b8:f4:ba:9a:43:
96:78:92:7d:f1:74:65:98:4b:30:b6:eb:36:3e:b3:6f:62:28:
c6:7f:b5:54:1a:45:df:f0:0b:76:fc:80:a0:59:b6:a7:23:0f:
52:bd:fe:2c:13:8c:d2:de:98:de:a3:df:35:d2:40:bc:44:7e:
4b:23:1a:db:c7:c9:45:82:e1:99:be:e1:97:b6:1e:49:88:e5:
58:87:0b:fa:7c:3c:13:82:f3:96:1d:09:4e:2d:67:61:fc:46:
19:dd:09:39:c0:c5:45:02:a1:e8:9c:41:4b:c7:ea:50:1d:24:
dd:5b:c9:4e:f6:63:12:9f:b0:92:40:4b:9e:eb:f5:8c:6a:aa:
06:cc:36:a5:d8:65:26:2e:dd:7c:e0:e0:da:a9:b1:e9:d7:df:
55:32:e4:a7:f8:1b:72:0b:6b:b2:04:c4:1d:55:f7:3e:e1:53:
28:77:3e:09:1b:a3:f3:b3:15:32:04:91:b6:ec:ed:eb:e9:8a:
8e:0c:eb:6b:24:f3:65:4a:2a:d6:9c:fa:48:ae:81:d6:d6:46:
84:0b:a2:0a:8c:dc:4a:66:e7:b6:10:bb:f7:ba:ea:a3:b9:77:
85:53:31:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:15 2024 by rpki-client on console-ams.rpki-client.org