Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/TjPXt7L6_mqo_jU5deasPdidvKI.roa
File: TjPXt7L6_mqo_jU5deasPdidvKI.roa (raw, json)
Hash identifier: aeRF/CV/Q26xNc3gBAUc1QxABuNNq7Bpv57ARoK3vaU=
Subject key identifier: 4E:33:D7:B7:B2:FA:FE:6A:A8:FE:35:39:75:E6:AC:3D:D8:9D:BC:A2
Certificate issuer: /CN=465eba5c1a80f86a4589278edd9304b3f5169f83
Certificate serial: 054469C0
Authority key identifier: 46:5E:BA:5C:1A:80:F8:6A:45:89:27:8E:DD:93:04:B3:F5:16:9F:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/TjPXt7L6_mqo_jU5deasPdidvKI.roa
Signing time: Sat 01 Jan 2022 11:58:48 +0000
ROA not before: Sat 01 Jan 2022 11:58:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209371
IP address blocks: 45.82.13.0/24 maxlen: 24
193.39.171.0/24 maxlen: 24
194.187.122.0/24 maxlen: 24
91.200.149.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88369600 (0x54469c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=465eba5c1a80f86a4589278edd9304b3f5169f83
Validity
Not Before: Jan 1 11:58:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4e33d7b7b2fafe6aa8fe353975e6ac3dd89dbca2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:2d:d2:75:d3:c5:a5:78:b8:b4:a3:48:66:7b:
d7:fe:07:28:19:89:51:e0:7e:5d:c6:f5:5f:3a:68:
2e:ce:f8:84:71:9f:b9:59:93:b0:da:64:e7:9c:68:
f6:d7:ea:75:fb:d7:1e:24:4c:34:45:94:a3:09:01:
9e:f1:a0:5b:15:d1:17:45:e4:ba:bd:9d:90:f6:e6:
08:a2:2f:33:e0:0c:1c:96:78:77:87:91:93:2e:c1:
cb:f1:36:91:56:74:f5:5d:a8:03:1d:c1:5c:16:83:
f2:b2:a0:92:5b:c8:87:0a:f3:9c:96:e2:dc:cf:8c:
b8:40:0d:d5:52:5c:7e:71:40:b5:46:b4:ab:10:f5:
03:bb:df:71:a5:1a:be:23:d7:9c:d1:ed:a4:ef:b4:
a2:f0:59:4e:49:80:01:b9:26:70:ec:cb:91:ef:98:
88:b6:40:e6:41:8b:fa:a7:57:9b:e1:0e:67:b8:b5:
40:5d:5a:c0:57:37:cd:eb:8c:fc:9c:f7:8c:3d:d6:
69:12:29:d3:b3:b7:6c:21:76:75:2a:16:43:20:d0:
ed:aa:4c:6f:2f:0b:55:2f:1d:b6:5a:45:3b:7a:31:
db:85:83:98:04:83:ff:41:9d:5f:4c:44:b5:2b:eb:
d4:87:5c:f3:3b:da:1d:c2:9e:fa:c4:8f:b0:0f:4e:
b7:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:33:D7:B7:B2:FA:FE:6A:A8:FE:35:39:75:E6:AC:3D:D8:9D:BC:A2
X509v3 Authority Key Identifier:
keyid:46:5E:BA:5C:1A:80:F8:6A:45:89:27:8E:DD:93:04:B3:F5:16:9F:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/TjPXt7L6_mqo_jU5deasPdidvKI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.82.13.0/24
91.200.149.0/24
193.39.171.0/24
194.187.122.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:d0:bb:80:28:b1:57:f8:0b:f0:95:0a:1b:9f:84:88:52:9b:
06:87:95:53:92:b4:6d:c5:54:ca:63:1c:41:e0:2f:b0:65:65:
7e:b9:c0:3b:0b:a2:cd:9c:15:65:9e:e7:f6:5c:df:03:cb:6b:
80:9a:56:5c:8b:75:f7:23:2e:bc:b6:22:f5:d5:c7:17:ab:7f:
e9:6f:fa:48:1c:89:f6:ad:fe:60:9e:8f:7a:7e:53:5c:6b:d8:
aa:bc:a8:f4:32:0a:44:2f:68:ec:65:6d:3c:33:c9:23:48:12:
2d:d5:a4:f0:df:e0:98:37:54:53:b6:87:d7:92:70:9e:43:3f:
4c:3a:ba:e4:35:c9:2f:69:ca:e0:9a:42:c8:b4:09:4a:ef:2a:
e8:87:05:bd:ff:75:1c:9a:f7:2a:e3:5b:19:46:eb:79:51:4c:
34:43:f4:27:3f:23:aa:8e:93:1f:8b:88:ac:5a:24:dd:03:25:
f8:91:04:f4:cc:f3:41:61:11:06:09:65:2e:aa:5c:51:42:ba:
ca:a2:7f:50:f2:1b:9e:9a:35:c5:2c:38:bb:c2:d4:e5:a9:df:
9d:5b:81:a4:42:58:0e:79:64:62:b7:c9:68:01:c2:a8:e3:d7:
d2:3c:4d:38:33:0c:f2:19:fb:4a:a1:e3:07:8e:d1:f6:de:e3:
1b:4f:43:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:19 2023 by rpki-client on console-ams.rpki-client.org