Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/SOa8HBYvM4hxw98jJXUJaw2n5nk.roa
File: SOa8HBYvM4hxw98jJXUJaw2n5nk.roa (raw, json)
Hash identifier: qRsRsQT6ZbcDf8fVEY1SiHV1ToHzNnghL+HbVkNkTLU=
Subject key identifier: 48:E6:BC:1C:16:2F:33:88:71:C3:DF:23:25:75:09:6B:0D:A7:E6:79
Certificate issuer: /CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Certificate serial: 0185EC72EE499174F8BFA9744469EA7EFD9B
Authority key identifier: 05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/SOa8HBYvM4hxw98jJXUJaw2n5nk.roa
Signing time: Thu 26 Jan 2023 05:00:33 +0000
ROA not before: Thu 26 Jan 2023 05:00:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 26548
IP address blocks: 91.222.236.0/24 maxlen: 24
91.222.239.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:ec:72:ee:49:91:74:f8:bf:a9:74:44:69:ea:7e:fd:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Validity
Not Before: Jan 26 05:00:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=48e6bc1c162f338871c3df232575096b0da7e679
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:08:cf:15:07:59:d0:dc:ed:91:6e:3c:a1:32:
57:59:bc:2a:d0:d0:31:97:59:ba:ea:b9:9b:1d:fa:
93:a3:bf:c4:69:ea:e6:1e:2e:0d:11:b6:87:21:1f:
ae:9b:76:2b:49:8f:39:2d:e7:9e:59:3a:6c:a3:9b:
9f:54:55:28:b6:2c:48:b1:a0:9f:48:f4:3f:8e:fe:
3b:59:c5:ff:70:62:dc:42:d0:e2:72:d7:58:ea:75:
15:52:3d:ad:a2:28:54:a6:73:ef:90:e4:02:f9:3a:
cf:47:59:36:45:0a:8d:94:d7:1f:f3:65:de:0d:12:
54:e7:c6:e4:61:82:f2:02:4a:62:a0:4f:de:8d:a5:
96:a1:ad:a9:19:4c:e3:e7:79:8a:10:b3:9e:09:82:
7c:7f:61:2c:bd:4f:70:21:0b:77:a6:18:57:15:3d:
37:5d:41:61:39:f3:01:e0:0f:f1:75:99:e6:85:52:
6a:25:6e:13:08:44:a8:c8:8e:3e:0f:03:8b:a1:1d:
79:22:df:e4:e0:42:59:a2:22:fa:68:4e:bb:7f:32:
67:90:32:65:28:6b:60:88:2b:98:45:2d:1e:b6:52:
98:ab:ab:b8:72:24:da:37:f3:35:dd:1f:a3:8c:9b:
b0:58:6d:69:62:a8:25:f3:d9:ac:8a:86:ef:dd:90:
37:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:E6:BC:1C:16:2F:33:88:71:C3:DF:23:25:75:09:6B:0D:A7:E6:79
X509v3 Authority Key Identifier:
keyid:05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/SOa8HBYvM4hxw98jJXUJaw2n5nk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.222.236.0/24
91.222.239.0/24
Signature Algorithm: sha256WithRSAEncryption
55:cf:2f:0d:f8:d4:91:8d:a4:12:4d:3c:de:b6:39:e1:fe:b9:
4c:36:78:0c:c7:34:70:f4:59:87:d5:4b:10:29:31:ed:51:2b:
aa:f9:8e:49:25:55:a1:56:55:19:0d:56:0f:d5:70:a7:39:f0:
11:d3:29:cc:aa:c7:1f:0f:8d:8a:2d:b7:24:d6:da:6f:93:18:
12:7c:a2:99:21:da:84:ba:1d:e7:bf:93:3c:6c:60:6b:c8:bd:
43:60:f6:4b:22:3b:e9:cc:86:03:06:ec:33:ea:8b:3a:96:fc:
e1:ab:4e:ee:76:0c:70:6e:32:87:01:0d:ed:2a:0d:33:e2:a8:
de:8f:e1:25:68:4c:be:9a:03:10:38:00:fc:d6:3a:29:bd:ec:
ce:54:fb:16:f2:85:f1:af:20:f0:00:67:8c:d5:ed:13:b9:ad:
10:41:e8:cd:ba:f8:12:ec:de:d8:0b:20:8e:9f:e4:40:c5:0b:
0f:b9:4d:ed:1a:96:4e:f3:0d:a0:ff:7c:29:de:ee:32:d3:3f:
5c:a0:8f:ef:15:1c:3b:b1:fa:d1:77:66:e0:13:34:70:e2:1d:
9a:00:c8:83:d1:3a:5d:52:ba:c7:c3:80:d1:d1:69:50:da:a9:
bf:36:ae:e3:97:d9:3e:c3:1b:ea:c7:4b:e3:5d:68:de:2c:55:
3b:d1:e3:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:54 2023 by rpki-client on console-fra.rpki-client.org