Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/YhxDHhEJzzmVsAkP-cKDG_uwsfg.roa
File: YhxDHhEJzzmVsAkP-cKDG_uwsfg.roa (raw, json)
Hash identifier: Hnsfk3kz48G2nPtXJ4Pl+GuKT2mDFt+4ttgvZTIAk1M=
Subject key identifier: 62:1C:43:1E:11:09:CF:39:95:B0:09:0F:F9:C2:83:1B:FB:B0:B1:F8
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 01856FD51C661ECB869C06CB96DFF72524EE
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/YhxDHhEJzzmVsAkP-cKDG_uwsfg.roa
Signing time: Mon 02 Jan 2023 00:15:15 +0000
ROA not before: Mon 02 Jan 2023 00:15:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41043
IP address blocks: 86.105.4.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:d5:1c:66:1e:cb:86:9c:06:cb:96:df:f7:25:24:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jan 2 00:15:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=621c431e1109cf3995b0090ff9c2831bfbb0b1f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:61:07:e4:33:0d:9f:8c:2e:45:a4:03:84:4e:
ab:02:c6:5d:49:45:0f:31:1f:dc:68:13:11:fc:c2:
ec:e2:53:57:d9:3b:77:7e:b0:44:27:01:47:df:e3:
18:ae:1d:7d:52:ac:5c:d0:09:c1:95:1c:60:6d:94:
90:40:65:ab:76:ab:ae:c0:15:ab:f0:d0:f8:8e:bf:
3d:9b:01:68:77:77:63:85:70:e7:cd:e8:6d:d6:ea:
4f:42:e6:27:d1:44:64:7c:40:50:bb:9b:80:ab:6f:
2b:d8:55:d7:bf:28:85:86:57:96:d7:48:8e:03:61:
00:e6:f2:ef:56:a7:56:63:67:f6:92:54:75:2e:08:
a4:a9:4d:c5:9c:b1:8a:02:6e:2a:4e:c1:0c:c8:09:
b1:b3:53:c6:19:33:0a:dd:c1:97:99:d7:8f:68:af:
0e:c3:9b:91:a7:d5:b0:a7:9e:0f:06:73:f0:56:1b:
ea:6f:1b:5b:ac:37:14:11:84:52:c1:c3:f4:34:27:
30:40:d8:5c:e4:85:8a:e9:ac:ad:e1:d2:4c:a8:10:
42:5a:ae:8f:78:32:22:36:c4:29:fd:33:08:24:6e:
c6:4b:14:d2:9c:d1:a6:25:d3:88:9c:e9:cb:43:1b:
b5:9f:ce:0d:82:83:d7:0b:45:d6:ca:09:93:a3:7a:
03:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:1C:43:1E:11:09:CF:39:95:B0:09:0F:F9:C2:83:1B:FB:B0:B1:F8
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/YhxDHhEJzzmVsAkP-cKDG_uwsfg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.105.4.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:45:a9:83:cd:41:1e:f0:14:c8:c9:b1:20:97:7b:30:45:ea:
c4:55:98:03:5a:39:6e:e4:af:a7:3b:a4:fe:73:bf:c9:f6:f6:
b6:0d:18:fa:3a:d8:be:9b:48:b6:4f:2e:e1:c1:c9:48:e9:45:
5d:43:1c:1b:22:81:95:ea:96:a8:11:45:83:41:53:fd:33:e4:
5b:8a:d6:6d:16:4d:a6:77:b6:ad:5a:89:bc:1a:e2:db:6f:f1:
0c:02:d0:4d:91:51:47:38:2b:a1:88:a8:de:15:d1:7c:75:26:
bf:4d:d1:26:74:52:69:13:fb:2b:f2:d4:75:45:0e:e3:c3:42:
d2:73:e8:2e:65:4a:4c:e6:d0:25:55:c0:3d:f6:28:ba:3d:f3:
5a:46:45:aa:53:f8:37:e3:59:81:15:a2:9c:5d:65:91:ef:98:
01:4f:2d:28:3b:3c:4b:5a:5a:b4:56:3d:b8:a8:db:9e:38:8e:
83:b8:b0:3d:b4:ba:be:08:20:44:6c:f0:17:b9:57:a3:61:aa:
65:38:b1:ec:07:68:3d:ff:c2:95:3a:34:b1:94:da:20:5d:de:
ea:d2:b0:bf:b5:55:62:15:8e:5f:e1:e8:1e:9c:ee:53:25:42:
57:64:bb:51:cb:ba:88:95:00:c4:28:76:47:2b:2a:f1:4f:53:
ac:2d:a1:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:52 2024 by rpki-client on console-ams.rpki-client.org