Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/e64398-9601-4b7c-b783-079ba0570f75/1/uaeFIQmRVU8qsuEUNpIcplelP1s.roa
File: uaeFIQmRVU8qsuEUNpIcplelP1s.roa (raw, json)
Hash identifier: Dhw3f3qAG/v3n2GmCC2z63QB5azC6Rbe30w7cvvxmT8=
Subject key identifier: B9:A7:85:21:09:91:55:4F:2A:B2:E1:14:36:92:1C:A6:57:A5:3F:5B
Certificate issuer: /CN=a29d9751f3675f51332734da68ea960260045b12
Certificate serial: 0182B4DFB3B40528F8FFE38EBA0BF0F4F209
Authority key identifier: A2:9D:97:51:F3:67:5F:51:33:27:34:DA:68:EA:96:02:60:04:5B:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/op2XUfNnX1EzJzTaaOqWAmAEWxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/e64398-9601-4b7c-b783-079ba0570f75/1/uaeFIQmRVU8qsuEUNpIcplelP1s.roa
Signing time: Fri 19 Aug 2022 06:52:15 +0000
ROA not before: Fri 19 Aug 2022 06:52:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39577
IP address blocks: 185.230.243.0/24 maxlen: 32
92.118.74.0/23 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:b4:df:b3:b4:05:28:f8:ff:e3:8e:ba:0b:f0:f4:f2:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a29d9751f3675f51332734da68ea960260045b12
Validity
Not Before: Aug 19 06:52:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b9a785210991554f2ab2e11436921ca657a53f5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:c0:e6:47:a6:09:8c:42:24:62:c4:0a:2c:04:
0e:74:bf:2e:60:8e:d8:bf:b3:32:0e:0a:d3:63:13:
70:b3:9b:e1:5a:15:ec:ec:69:ac:89:d2:4d:01:53:
ac:f9:34:8b:93:03:42:03:99:83:a9:45:3f:10:39:
e6:48:66:32:c2:8d:06:2b:74:da:e8:29:75:81:08:
91:09:5e:1e:fb:50:a7:08:76:d7:b2:78:93:a1:a9:
5d:df:31:ea:45:12:29:98:78:07:66:87:dd:b8:1d:
de:4c:59:1e:79:91:48:76:61:75:22:d4:1c:91:09:
5e:d8:c3:ae:5d:c8:93:57:bf:dd:06:73:9d:ac:f2:
ce:48:42:fe:70:ba:08:60:36:ec:cb:ef:d9:30:12:
71:b4:ed:f3:3d:6b:50:23:26:9b:22:d8:cc:06:f0:
32:60:c0:fc:e0:92:13:2c:4c:ca:e0:5d:67:02:98:
2d:b5:2a:7a:1c:aa:13:e6:25:2f:9f:05:b6:9f:ab:
70:80:7b:3d:26:fb:6a:c7:c2:0e:21:f0:cf:bb:9d:
a0:9c:26:51:cb:f0:cb:17:8a:57:c6:a1:75:c3:85:
4b:4c:0f:72:61:26:77:b3:b7:f5:ac:f0:99:f4:52:
4a:e9:b6:83:c2:99:01:c8:66:a6:b2:ff:82:35:79:
88:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:A7:85:21:09:91:55:4F:2A:B2:E1:14:36:92:1C:A6:57:A5:3F:5B
X509v3 Authority Key Identifier:
keyid:A2:9D:97:51:F3:67:5F:51:33:27:34:DA:68:EA:96:02:60:04:5B:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/op2XUfNnX1EzJzTaaOqWAmAEWxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/e64398-9601-4b7c-b783-079ba0570f75/1/uaeFIQmRVU8qsuEUNpIcplelP1s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/e64398-9601-4b7c-b783-079ba0570f75/1/op2XUfNnX1EzJzTaaOqWAmAEWxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.118.74.0/23
185.230.243.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:c6:6b:95:ac:3f:a5:8e:a4:e8:6f:48:fc:69:be:aa:73:36:
05:20:8e:2c:3c:b5:7c:1d:d8:cc:b6:8b:66:3e:b7:7e:9a:2d:
9c:5d:33:4d:00:6d:e1:91:4f:02:6a:45:29:96:f9:0e:7f:f5:
54:0a:78:cf:2a:1b:3e:f2:2e:70:89:92:82:31:5e:31:13:77:
33:f7:9e:4a:b8:05:b0:64:b5:0b:fc:70:ec:17:da:3c:c9:ae:
21:7f:ea:32:29:0d:ff:2f:e8:06:75:59:10:84:fc:d3:e3:ae:
e9:94:37:29:7f:df:0c:ad:a8:7c:3a:2a:cb:7e:2d:58:ab:c3:
52:53:8e:cb:a8:6c:aa:a6:80:2c:6f:4d:ef:98:46:2d:31:89:
02:b5:e0:f6:a6:46:bf:fb:57:4a:06:0c:48:3f:0a:25:35:2b:
13:ae:2a:49:32:5e:f0:67:d0:59:a2:52:36:43:55:0c:27:8f:
d9:de:a9:bd:c1:38:2d:9f:7a:ae:30:22:4b:fb:1d:79:08:04:
a1:0c:e1:04:ac:8a:c4:ed:77:1b:7f:7c:72:1b:0c:a3:dd:ab:
84:11:97:1a:ac:d0:fa:33:b1:2f:7d:9f:9f:a1:85:43:9a:15:
d3:04:45:e0:30:80:90:95:25:aa:a8:39:a6:ef:29:8a:33:30:
bf:54:a2:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:05 2024 by rpki-client on console-fra.rpki-client.org