Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/Ejyusfr2qg2rrS7kkX8AJg0_mZg.roa
File: Ejyusfr2qg2rrS7kkX8AJg0_mZg.roa (raw, json)
Hash identifier: GjoyHe5sLnpwPNn6FAdz1M/hkjhQnLn206+lkBPnonw=
Subject key identifier: 12:3C:AE:B1:FA:F6:AA:0D:AB:AD:2E:E4:91:7F:00:26:0D:3F:99:98
Certificate issuer: /CN=3a00807698f0b097d69ab3926917d1dcc838a624
Certificate serial: 018571DE820809D337102B9B50D1BE406B48
Authority key identifier: 3A:00:80:76:98:F0:B0:97:D6:9A:B3:92:69:17:D1:DC:C8:38:A6:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/Ejyusfr2qg2rrS7kkX8AJg0_mZg.roa
Signing time: Mon 02 Jan 2023 09:44:45 +0000
ROA not before: Mon 02 Jan 2023 09:44:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 55933
IP address blocks: 45.10.172.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:de:82:08:09:d3:37:10:2b:9b:50:d1:be:40:6b:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a00807698f0b097d69ab3926917d1dcc838a624
Validity
Not Before: Jan 2 09:44:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=123caeb1faf6aa0dabad2ee4917f00260d3f9998
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:5b:0b:89:fa:8f:fe:35:ac:a0:55:eb:40:35:
28:34:72:2f:90:45:78:c3:bd:72:f3:a8:b9:05:40:
2b:42:e7:7f:91:0c:33:95:76:84:ea:ef:f7:6f:0f:
79:1a:44:bc:e9:15:dd:8e:a6:16:fa:c1:f2:08:a5:
67:cc:a7:e8:7b:48:21:16:78:ad:86:cb:05:cf:63:
ef:14:78:e3:3e:51:16:ce:6e:76:4a:e2:9c:5c:d8:
1d:5c:13:dc:d6:12:5a:2b:e4:e2:d0:3f:80:5e:ec:
96:f5:30:45:f8:06:48:ee:42:87:18:45:4e:93:73:
ae:8e:82:aa:86:93:b8:89:e3:7b:2c:9d:3d:6f:1e:
02:60:c0:5c:cc:60:ad:27:9a:39:68:2b:f4:bc:50:
8e:fa:32:bb:c3:0d:58:f4:60:22:38:a1:68:ad:b5:
9c:8b:51:11:41:e6:21:a4:c9:5a:63:60:ba:cb:bf:
e2:e2:bd:27:5f:de:49:5d:20:c0:31:ad:56:6b:aa:
a9:dc:5d:e9:6c:70:d1:b8:4f:8e:3d:de:ad:9d:7b:
49:1d:2d:fa:ff:28:1b:c7:41:91:19:43:be:c5:15:
b7:f7:0b:92:0f:51:c3:19:03:3d:b1:8a:06:c6:b1:
d6:47:2f:0e:b4:1f:e3:92:07:ea:2e:5c:cd:00:44:
70:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:3C:AE:B1:FA:F6:AA:0D:AB:AD:2E:E4:91:7F:00:26:0D:3F:99:98
X509v3 Authority Key Identifier:
keyid:3A:00:80:76:98:F0:B0:97:D6:9A:B3:92:69:17:D1:DC:C8:38:A6:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/Ejyusfr2qg2rrS7kkX8AJg0_mZg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.172.0/22
Signature Algorithm: sha256WithRSAEncryption
20:90:ea:0e:9e:99:f9:f4:0c:1c:60:e0:cc:98:75:b0:4d:20:
04:8a:f5:61:d8:a5:2b:dd:8c:2e:dd:50:28:d7:28:00:10:7a:
0b:36:3c:78:fa:28:c2:b2:0b:f9:a0:a4:a9:85:82:8d:4b:e4:
4c:3b:6e:64:27:48:ea:b9:52:41:3b:64:49:07:34:02:a2:49:
aa:87:4a:9e:7c:4d:2d:93:b4:57:51:6a:d0:17:bc:7b:04:0e:
d7:5c:53:40:95:65:8c:c2:6f:75:ca:c0:9b:03:49:ff:e8:91:
69:a0:1e:fd:d9:29:cd:b2:30:ae:f1:71:51:e6:11:5d:e5:d6:
e4:51:78:49:dc:99:db:66:58:8f:10:58:44:aa:ca:be:2b:2e:
aa:16:04:6f:cb:dd:a7:48:2a:ce:6b:86:91:e2:71:e2:24:13:
04:d6:35:a1:36:c9:8d:bf:e3:9c:5b:e1:1b:fc:53:a9:41:65:
63:1f:4f:d8:c2:0b:0b:d2:c7:c6:c9:9b:c6:b1:f1:5e:c6:75:
0f:06:c2:6a:74:57:88:e7:1d:33:ad:10:54:75:83:72:84:fe:
d1:e0:bf:a5:15:43:6a:7a:d8:65:d1:fb:f6:89:18:71:be:90:
7d:d0:24:aa:05:6e:3f:26:fb:19:33:2e:a4:d7:5d:62:c8:2d:
52:11:6e:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:26 2024 by rpki-client on console-fra.rpki-client.org