Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/gEM7JpjWoyz7sszUK7QUHmzRyUc.roa
File: gEM7JpjWoyz7sszUK7QUHmzRyUc.roa (raw, json)
Hash identifier: 0EuQlqVsBeVJXbFY+Uu5Cka5Kj+Qp5HsCpfhmYH9vhM=
Subject key identifier: 80:43:3B:26:98:D6:A3:2C:FB:B2:CC:D4:2B:B4:14:1E:6C:D1:C9:47
Certificate issuer: /CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Certificate serial: 0185A514D7EB3C8B5AB368D9404E8CC0E488
Authority key identifier: 05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/gEM7JpjWoyz7sszUK7QUHmzRyUc.roa
Signing time: Thu 12 Jan 2023 08:24:44 +0000
ROA not before: Thu 12 Jan 2023 08:24:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 395800
IP address blocks: 194.5.92.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:a5:14:d7:eb:3c:8b:5a:b3:68:d9:40:4e:8c:c0:e4:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Validity
Not Before: Jan 12 08:24:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=80433b2698d6a32cfbb2ccd42bb4141e6cd1c947
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b5:a6:7f:ac:c0:c4:6e:95:fc:f3:f8:0b:97:
9f:0a:18:b5:63:86:91:39:98:d2:f0:6a:bc:1f:72:
a3:ea:e8:07:e8:2e:12:b2:0c:8c:87:99:57:bf:af:
6e:23:b2:ca:fa:7f:a9:6b:19:62:75:77:bf:78:c2:
71:b8:fe:60:68:a3:7a:c4:73:42:b1:b9:65:3a:37:
7a:1b:f8:06:56:a5:59:2b:39:1e:d8:e3:79:b4:93:
b9:84:df:a0:c9:06:3b:1b:5e:d4:4b:8a:d8:a6:a8:
bb:5a:94:c4:86:7f:8e:ef:e6:1e:64:b8:fd:1b:ab:
69:14:03:39:44:04:73:f4:be:7b:ec:ff:c2:a2:8a:
0c:62:b0:6d:b3:22:1e:e3:60:83:35:c1:d4:d7:4e:
82:16:1b:d7:4b:81:88:9e:32:8f:61:f7:c7:95:bf:
4e:f5:f1:4f:2a:cc:f7:ed:74:e7:3e:fa:b8:1e:19:
41:24:83:c1:9b:63:06:fa:3e:ee:db:17:3c:2a:4b:
74:3c:c3:6a:59:e4:c5:85:ad:09:30:e8:3b:70:77:
69:99:76:52:14:5a:27:2b:51:37:40:c3:72:3d:32:
7a:18:74:93:e7:d0:3f:56:3e:8a:59:a5:73:4f:a8:
96:56:b5:14:ef:f4:7a:32:e5:07:bd:57:43:eb:4a:
09:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:43:3B:26:98:D6:A3:2C:FB:B2:CC:D4:2B:B4:14:1E:6C:D1:C9:47
X509v3 Authority Key Identifier:
keyid:05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/gEM7JpjWoyz7sszUK7QUHmzRyUc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.5.92.0/24
Signature Algorithm: sha256WithRSAEncryption
90:11:28:9b:93:07:e8:be:5e:ef:e5:8e:ad:66:de:bc:39:bd:
d5:2a:0a:57:bd:6c:35:a2:b1:14:8d:f4:9f:d5:93:52:5f:e6:
32:95:c0:f3:22:2b:50:12:17:58:ef:b1:f7:0e:c0:b6:fe:eb:
99:76:9e:53:e9:f1:03:3d:b6:7b:4d:5a:fd:26:d6:bd:b7:2d:
91:b7:ec:f7:85:46:04:02:64:96:f6:e2:be:1b:da:81:62:91:
ac:c4:c3:f7:db:e0:09:8e:01:22:e5:76:9e:6b:8b:a6:30:f0:
dd:74:7c:07:20:2b:85:5d:5f:31:d2:7d:72:44:e7:d5:5e:96:
b4:89:6a:97:22:38:6b:de:a1:45:89:1a:55:3a:c4:90:d4:0b:
ed:ad:82:9d:e1:ee:68:4b:36:0c:9e:23:10:d3:d0:1f:25:25:
59:d8:66:22:bf:38:d4:62:4e:0e:b1:8d:3b:1b:79:ad:d6:e4:
a7:56:ee:a9:a6:78:37:63:79:74:8b:c7:48:cf:11:c7:17:ec:
31:62:9b:98:ac:29:e8:14:42:6e:2a:ed:2a:ac:2f:72:68:f7:
8f:0c:de:6a:80:b5:6f:43:61:bd:0e:21:9b:58:63:8b:59:ab:
64:bf:43:67:bb:31:1b:b3:78:e5:e1:d4:bf:9e:ab:7b:d5:9e:
63:0b:ff:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:54 2023 by rpki-client on console-fra.rpki-client.org