Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/672883-feb4-414f-9d00-4d9127fba3ad/1/kXseErF1koycSRPVTMck-gzANos.roa
File: kXseErF1koycSRPVTMck-gzANos.roa (raw, json)
Hash identifier: RtUSe0w+U239vADykKLHt64D5mm46POCZzXKnejPq0s=
Subject key identifier: 91:7B:1E:12:B1:75:92:8C:9C:49:13:D5:4C:C7:24:FA:0C:C0:36:8B
Certificate issuer: /CN=c3abdcc49f7d9033b52904679f3c9b783d8c1358
Certificate serial: 0185A7594D17DFE35B93141B1BEC000E6E92
Authority key identifier: C3:AB:DC:C4:9F:7D:90:33:B5:29:04:67:9F:3C:9B:78:3D:8C:13:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w6vcxJ99kDO1KQRnnzybeD2ME1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/672883-feb4-414f-9d00-4d9127fba3ad/1/kXseErF1koycSRPVTMck-gzANos.roa
Signing time: Thu 12 Jan 2023 18:58:45 +0000
ROA not before: Thu 12 Jan 2023 18:58:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 40015
IP address blocks: 45.147.2.0/23 maxlen: 23
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:a7:59:4d:17:df:e3:5b:93:14:1b:1b:ec:00:0e:6e:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3abdcc49f7d9033b52904679f3c9b783d8c1358
Validity
Not Before: Jan 12 18:58:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=917b1e12b175928c9c4913d54cc724fa0cc0368b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:0f:58:26:11:56:c1:7c:1d:c1:04:77:bf:7d:
9e:fb:fb:55:b9:6c:cf:48:5f:03:6d:35:6b:e7:04:
04:c0:5d:2d:75:78:8a:f7:c0:03:55:35:88:74:5b:
c4:f0:64:78:ea:18:e1:9f:51:8a:ce:57:59:0b:37:
fa:a2:87:92:c6:00:35:da:cd:d2:2e:0a:18:53:48:
be:57:73:25:2f:94:69:2b:9a:d3:ba:c5:b3:13:1c:
82:4c:d7:56:c7:27:3e:6f:ff:07:10:cb:5a:87:74:
86:55:28:d7:58:85:76:b2:e7:8b:2f:4e:35:e6:78:
91:84:54:08:07:36:ba:75:53:f6:05:63:f3:2e:92:
36:c8:ec:a1:61:c2:b7:ac:bb:56:ea:5e:cc:03:1f:
ff:f4:2a:38:2f:55:e5:56:3f:36:82:44:97:4c:fb:
d6:a9:28:fb:eb:e7:b7:be:b9:44:fd:36:bc:30:91:
cd:ac:84:d9:f6:86:8f:46:c5:be:06:90:fe:c2:db:
46:6d:ca:70:06:28:95:6f:1e:e7:a0:2f:dd:9b:ae:
f7:4d:03:0c:c7:26:77:d6:8c:ec:a2:44:04:ad:1a:
53:39:4f:f1:30:45:8a:5a:b7:e4:f4:e2:d7:e6:33:
83:4e:42:77:58:c6:3a:90:95:57:24:68:6f:6e:fd:
40:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:7B:1E:12:B1:75:92:8C:9C:49:13:D5:4C:C7:24:FA:0C:C0:36:8B
X509v3 Authority Key Identifier:
keyid:C3:AB:DC:C4:9F:7D:90:33:B5:29:04:67:9F:3C:9B:78:3D:8C:13:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w6vcxJ99kDO1KQRnnzybeD2ME1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/672883-feb4-414f-9d00-4d9127fba3ad/1/kXseErF1koycSRPVTMck-gzANos.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/672883-feb4-414f-9d00-4d9127fba3ad/1/w6vcxJ99kDO1KQRnnzybeD2ME1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.147.2.0/23
Signature Algorithm: sha256WithRSAEncryption
b4:aa:6a:fc:98:9e:a2:79:db:fc:fd:46:ff:f0:cc:46:46:53:
c7:e7:c2:c2:31:77:c9:72:e4:a9:8a:47:3c:ea:19:d0:a2:66:
5f:7f:32:b2:00:28:62:f2:61:6e:16:ec:60:15:63:aa:51:c3:
04:e9:1d:fe:43:03:ee:69:d2:e0:b9:1f:b8:e4:a4:bb:2d:ad:
94:cf:a6:97:fd:b9:4a:91:ae:bd:82:15:3b:2b:8b:af:8b:d4:
10:0c:ac:03:29:20:66:21:76:00:dc:50:40:a4:ca:19:36:50:
f4:ef:2c:95:03:c5:46:e7:d8:c4:f6:5b:fc:15:81:03:d2:5b:
8e:15:80:11:03:e1:86:04:92:05:65:20:57:5a:97:4b:24:1d:
4f:4f:89:86:99:17:4b:85:21:cd:26:a5:fe:b7:25:1b:a8:f6:
e3:1e:24:89:44:93:5b:d6:9a:7f:41:ad:b0:69:fb:6c:17:1e:
5f:d3:62:b8:ef:d8:17:c0:e8:0c:8e:72:f5:29:f0:b7:85:6c:
de:79:79:24:81:e4:a6:16:04:2f:cd:93:6e:9d:ec:35:34:05:
e9:d2:fb:09:d0:2f:91:68:70:0a:ff:f3:24:e9:b0:ab:9c:5c:
d9:46:07:4c:3f:1a:c3:97:98:e8:43:71:e7:11:d2:a8:c9:72:
45:dd:eb:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:35 2024 by rpki-client on console-ams.rpki-client.org