Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/RHO9w3Y9fXmK9PbJFV9kgePwaeo.roa
File: RHO9w3Y9fXmK9PbJFV9kgePwaeo.roa (raw, json)
Hash identifier: IgPl4I8Ve2hlr7Qbw0pMNWfRj4wLcZh6qbJzO7LX2h4=
Subject key identifier: 44:73:BD:C3:76:3D:7D:79:8A:F4:F6:C9:15:5F:64:81:E3:F0:69:EA
Certificate issuer: /CN=3a00807698f0b097d69ab3926917d1dcc838a624
Certificate serial: 05370306
Authority key identifier: 3A:00:80:76:98:F0:B0:97:D6:9A:B3:92:69:17:D1:DC:C8:38:A6:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/RHO9w3Y9fXmK9PbJFV9kgePwaeo.roa
Signing time: Sat 01 Jan 2022 11:58:01 +0000
ROA not before: Sat 01 Jan 2022 11:58:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 55933
IP address blocks: 45.10.172.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 87491334 (0x5370306)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a00807698f0b097d69ab3926917d1dcc838a624
Validity
Not Before: Jan 1 11:58:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4473bdc3763d7d798af4f6c9155f6481e3f069ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e8:3c:7b:75:21:70:9d:8a:92:16:1b:e6:7b:
5a:8f:a7:a0:05:5d:5d:09:64:8a:44:93:ff:3a:c6:
61:74:2d:5f:f0:f9:62:3a:11:99:d9:40:05:b6:21:
2e:cb:76:00:85:a7:7a:49:da:97:da:88:29:9c:7f:
f3:f7:71:a9:a0:a7:fe:80:95:64:19:2b:b3:12:87:
f3:6e:b3:19:62:98:44:bc:41:88:44:6d:cb:7c:fd:
1a:37:09:64:1b:00:1f:ae:ca:57:9a:23:15:c5:be:
82:88:c5:a1:14:57:d7:42:f3:40:0a:9c:fa:9a:bc:
ab:6c:29:6c:d8:ae:fa:83:6d:37:ad:4d:6c:60:7e:
70:be:19:70:40:35:23:f4:c6:73:79:b1:6a:1e:92:
f4:59:d4:03:6f:06:80:6f:4d:0f:5d:91:1b:32:56:
07:22:5b:08:0e:e7:4d:3a:eb:19:83:8b:8a:06:42:
21:7c:b4:0c:22:af:c8:5d:0d:67:eb:8d:9d:f9:1c:
c9:da:e4:e0:af:71:c7:5c:b5:17:23:6a:79:bd:29:
7b:96:57:82:00:d5:89:70:48:80:f2:3c:f3:46:1a:
2f:df:23:5d:8d:dc:b5:66:ee:0f:d9:2f:44:c0:fb:
13:4a:06:99:9c:76:07:c7:cf:d7:d1:89:89:7c:77:
01:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:73:BD:C3:76:3D:7D:79:8A:F4:F6:C9:15:5F:64:81:E3:F0:69:EA
X509v3 Authority Key Identifier:
keyid:3A:00:80:76:98:F0:B0:97:D6:9A:B3:92:69:17:D1:DC:C8:38:A6:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/RHO9w3Y9fXmK9PbJFV9kgePwaeo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.172.0/22
Signature Algorithm: sha256WithRSAEncryption
20:63:92:81:ca:0f:fd:31:3d:18:5f:24:88:92:f2:cf:f2:b4:
c1:9b:0f:82:c9:80:1b:75:64:ff:96:9d:5b:f3:f4:21:b5:f1:
24:98:a6:fd:b6:2d:0f:62:69:d1:4e:e9:37:f3:cd:be:2a:4d:
44:78:59:24:dd:7f:26:57:2a:a6:99:80:0e:15:f0:eb:ad:8f:
3b:48:78:8e:50:46:39:d4:6d:0c:cf:7c:5b:b7:b8:2f:14:e9:
37:99:26:f0:c0:82:72:d8:3d:3e:85:06:a3:ec:89:91:93:7e:
df:8a:cf:22:b4:24:57:e3:54:96:6b:61:28:98:98:cc:ff:ff:
4f:e4:fa:35:63:c8:51:69:3b:aa:d8:77:5b:ad:9a:d2:f0:f9:
d2:7c:04:32:01:96:30:91:6e:ac:16:b5:27:5d:9f:7b:de:05:
14:8a:05:bf:45:31:5e:e2:5c:b4:ee:f9:0e:40:4c:f5:0d:06:
8f:cf:d4:c8:b9:ab:8a:8a:1e:31:84:ba:0a:2a:91:a7:8d:ca:
5f:d9:fa:f4:03:3c:1d:87:f9:bd:19:34:06:ff:74:0e:ba:e2:
7c:09:ee:49:e3:b2:8c:72:da:04:f1:f1:d6:8a:fb:97:a2:98:
72:df:ff:df:9b:7f:e9:10:76:cd:bd:71:1d:0c:00:46:87:8d:
55:1d:7e:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:26 2024 by rpki-client on console-fra.rpki-client.org