Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/J9lEgP9NdzErbaY5h1_X1PxJWpQ.roa
File: J9lEgP9NdzErbaY5h1_X1PxJWpQ.roa (raw, json)
Hash identifier: WdxOWzf+osNHenqubo1RG/0ZQXi840Ewh2CaBqoc+hQ=
Subject key identifier: 27:D9:44:80:FF:4D:77:31:2B:6D:A6:39:87:5F:D7:D4:FC:49:5A:94
Certificate issuer: /CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Certificate serial: 0184AE8D5E12021616E3972AAE2C5A3BF3AD
Authority key identifier: 05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/J9lEgP9NdzErbaY5h1_X1PxJWpQ.roa
Signing time: Fri 25 Nov 2022 11:30:11 +0000
ROA not before: Fri 25 Nov 2022 11:30:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207713
IP address blocks: 5.44.42.0/24 maxlen: 24
45.80.128.0/24 maxlen: 24
195.80.49.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:ae:8d:5e:12:02:16:16:e3:97:2a:ae:2c:5a:3b:f3:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Validity
Not Before: Nov 25 11:30:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=27d94480ff4d77312b6da639875fd7d4fc495a94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:9b:6b:3e:f4:d2:9b:84:05:35:e7:ae:b8:6b:
a8:73:36:7d:94:c1:1a:f7:84:10:8b:a0:56:91:98:
d6:86:7f:be:c3:45:e3:6b:12:ec:5f:92:ef:57:97:
93:1e:7a:31:9d:2f:2c:cc:36:92:c7:30:5a:95:cd:
9e:32:15:2b:6c:82:78:b7:26:f2:af:a6:24:b8:9e:
92:28:22:26:af:06:56:d9:fa:5d:e3:8b:ee:49:18:
b1:f0:84:bd:da:e6:0e:bd:96:f9:a2:e8:40:00:e2:
3d:2e:e6:8d:80:7f:d1:49:9f:e6:1d:2f:52:1d:48:
b3:4c:e6:25:4d:f1:f1:d0:99:50:cf:6d:0e:22:4a:
56:f7:89:f6:c2:39:12:9e:cc:f4:81:2f:a8:50:d3:
84:c6:40:43:fd:e4:a6:12:40:8a:42:29:d1:52:91:
33:87:f6:fc:5a:34:53:8b:57:d2:e5:4a:ea:23:da:
1a:9b:02:7f:6b:f8:0c:e4:a2:61:e2:1d:02:f9:c1:
f5:3a:9e:cc:c2:a4:f7:8a:c3:2d:9c:6b:f2:a3:d6:
57:5a:8f:b9:5e:c2:1f:58:d8:1b:ac:a2:69:bd:fc:
3b:39:57:55:c2:bc:e6:2e:d7:47:3d:9c:06:db:10:
32:84:0d:c9:d9:02:f0:37:79:05:84:77:32:06:63:
a0:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:D9:44:80:FF:4D:77:31:2B:6D:A6:39:87:5F:D7:D4:FC:49:5A:94
X509v3 Authority Key Identifier:
keyid:05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/J9lEgP9NdzErbaY5h1_X1PxJWpQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.44.42.0/24
45.80.128.0/24
195.80.49.0/24
Signature Algorithm: sha256WithRSAEncryption
89:58:5d:13:34:17:d0:0d:b7:32:79:16:43:82:37:d6:78:57:
cf:35:3e:0b:f5:c9:e0:35:f1:f1:30:f7:d0:bf:1e:e3:d2:c2:
0f:58:63:ac:a9:3c:80:d4:3f:3f:04:fd:84:00:f6:94:9b:e1:
77:e8:f1:14:90:fb:3c:4b:95:40:9c:e9:2a:69:80:2e:08:fb:
0d:4f:ee:02:1e:4c:a4:ba:9f:12:5c:c4:15:45:c8:42:2a:23:
cf:ce:7c:a1:09:45:78:94:bc:27:d6:4f:dd:e4:a9:62:b3:21:
c3:44:1a:20:38:f4:1b:22:a0:f4:b7:fc:31:82:ef:38:1a:82:
47:bb:6e:29:6d:d5:b1:16:17:5b:13:2f:e6:36:4c:61:8b:8e:
32:19:95:e9:1e:74:39:cb:fb:58:b5:9e:b4:88:db:0a:ba:9a:
a7:fd:41:b9:11:56:3d:b7:4a:41:f1:c5:97:38:e3:ae:9c:16:
a7:89:9e:2d:a8:c1:f8:a2:c4:63:3f:ec:dc:9c:51:68:d0:3e:
6c:72:1f:9f:b6:aa:62:8f:15:30:de:ce:53:a9:8f:fd:64:79:
ab:58:6c:72:7d:be:df:10:25:d6:9f:2a:42:40:1f:6c:6c:95:
c0:b4:9d:7b:4f:94:be:85:02:86:af:ea:21:a0:18:1f:7d:a5:
5f:71:1b:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:54 2023 by rpki-client on console-fra.rpki-client.org