Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/1decb3-1593-45db-af56-0cc4c0000858/1/Ud3Upa9Hpi9ok-gddzzP89xafYc.roa
File: Ud3Upa9Hpi9ok-gddzzP89xafYc.roa (raw, json)
Hash identifier: hoITD0clnaq1h0zy1RPy5+/JAEzgofyxK8tmp0OKrVA=
Subject key identifier: 51:DD:D4:A5:AF:47:A6:2F:68:93:E8:1D:77:3C:CF:F3:DC:5A:7D:87
Certificate issuer: /CN=a811a2c9fc8de9679bb158581b10ceaee91ff791
Certificate serial: 085F22BE
Authority key identifier: A8:11:A2:C9:FC:8D:E9:67:9B:B1:58:58:1B:10:CE:AE:E9:1F:F7:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qBGiyfyN6WebsVhYGxDOrukf95E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/1decb3-1593-45db-af56-0cc4c0000858/1/Ud3Upa9Hpi9ok-gddzzP89xafYc.roa
Signing time: Sat 01 Jan 2022 06:05:47 +0000
ROA not before: Sat 01 Jan 2022 06:05:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50247
IP address blocks: 91.224.142.0/23 maxlen: 23
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 140452542 (0x85f22be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a811a2c9fc8de9679bb158581b10ceaee91ff791
Validity
Not Before: Jan 1 06:05:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=51ddd4a5af47a62f6893e81d773ccff3dc5a7d87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a0:e3:39:d1:e5:21:75:f6:99:8d:d6:e2:b9:
5f:18:25:93:1c:9d:3b:13:7d:12:91:b4:fc:30:fc:
88:ec:05:c0:22:cc:66:49:ac:64:47:08:c6:bf:16:
9e:bc:39:80:43:42:1f:06:99:59:58:9b:40:79:53:
b3:b2:b4:ef:aa:69:43:36:e2:b2:62:69:8c:a7:92:
67:8b:d5:13:2d:82:d8:b4:9d:40:b4:d9:3d:95:23:
df:9d:dd:c8:21:b2:41:a3:e4:58:a9:0d:bd:fd:f1:
b6:3d:a5:10:66:8e:db:a2:e8:fc:ac:35:87:69:2f:
67:58:eb:93:10:bf:93:f3:a2:41:42:fb:68:6d:a9:
b2:be:4d:c6:29:59:8b:58:a8:91:6e:53:a1:fe:d7:
b0:e2:57:4b:ce:66:b4:c0:a5:82:5a:a0:1d:a6:8c:
7b:93:37:7f:28:50:9a:f6:17:85:b6:34:a3:67:6e:
77:3d:7d:86:a4:04:02:a9:b7:fb:8d:70:30:94:df:
b1:f5:6f:2e:0f:33:46:c2:71:56:a0:08:3f:39:a2:
d3:7f:de:4d:d0:aa:a1:4c:cc:c9:35:e1:fb:94:41:
08:95:10:19:02:df:b8:59:90:63:0b:4e:d9:ff:86:
e2:f2:79:40:77:02:ee:0b:82:8e:00:ca:8c:68:95:
bd:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:DD:D4:A5:AF:47:A6:2F:68:93:E8:1D:77:3C:CF:F3:DC:5A:7D:87
X509v3 Authority Key Identifier:
keyid:A8:11:A2:C9:FC:8D:E9:67:9B:B1:58:58:1B:10:CE:AE:E9:1F:F7:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qBGiyfyN6WebsVhYGxDOrukf95E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/1decb3-1593-45db-af56-0cc4c0000858/1/Ud3Upa9Hpi9ok-gddzzP89xafYc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/1decb3-1593-45db-af56-0cc4c0000858/1/qBGiyfyN6WebsVhYGxDOrukf95E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.224.142.0/23
Signature Algorithm: sha256WithRSAEncryption
76:c8:e5:24:60:b9:25:b7:9a:f8:9a:84:c4:25:6a:b0:f5:62:
b0:0b:46:12:42:a8:61:f2:11:0e:47:d5:21:13:1a:6b:85:94:
68:c4:0f:9e:6d:23:14:dc:53:d7:7d:f7:77:b7:cd:68:79:2f:
ad:32:87:ae:59:36:82:2b:50:59:89:25:d4:f5:02:3d:04:68:
c9:62:46:b0:7f:95:19:c5:6c:19:23:c8:71:3a:7a:4a:93:1b:
2b:74:e4:9b:e8:02:e4:96:7e:98:31:a8:6a:3b:19:2f:0d:e7:
dc:1a:83:f8:e1:bc:db:43:f1:fb:f0:79:82:c5:9c:ee:b9:9a:
05:78:2a:04:27:49:7a:c5:fb:58:27:d0:5a:8c:33:4a:31:9b:
88:b2:2f:69:1a:12:08:31:78:cd:dd:5e:0b:da:88:ea:da:97:
67:74:c6:dd:a6:be:32:3e:da:7e:12:17:96:8e:71:8a:1c:3e:
1a:ee:97:99:42:ce:81:6e:de:2a:2f:e8:81:b7:ff:19:76:7a:
14:ca:01:6a:98:b1:f7:c3:65:f3:19:07:46:64:ee:ac:fe:aa:
99:ab:0d:c3:b3:85:56:10:a4:92:fd:60:89:ab:cb:5b:ee:3a:
18:fc:15:31:2b:b3:d1:dc:a1:c5:37:d1:d4:ee:e3:13:19:d1:
eb:23:bd:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:59 2024 by rpki-client on console-fra.rpki-client.org