Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/JCw5rRcfzmvoKrlWZB8wm_EGvxw.roa
File: JCw5rRcfzmvoKrlWZB8wm_EGvxw.roa (raw, json)
Hash identifier: npyUHGIm0S2hSeM58mEnfv0dSwsbD8u557Gg1z3hZHY=
Subject key identifier: 24:2C:39:AD:17:1F:CE:6B:E8:2A:B9:56:64:1F:30:9B:F1:06:BF:1C
Certificate issuer: /CN=624ad4535ac88dd534199f2a726095af71afe44e
Certificate serial: 0647BE09
Authority key identifier: 62:4A:D4:53:5A:C8:8D:D5:34:19:9F:2A:72:60:95:AF:71:AF:E4:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/JCw5rRcfzmvoKrlWZB8wm_EGvxw.roa
Signing time: Sat 01 Jan 2022 14:57:03 +0000
ROA not before: Sat 01 Jan 2022 14:57:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203020
IP address blocks: 45.10.196.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105365001 (0x647be09)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624ad4535ac88dd534199f2a726095af71afe44e
Validity
Not Before: Jan 1 14:57:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=242c39ad171fce6be82ab956641f309bf106bf1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:6a:01:19:12:f9:c5:b1:19:f3:d2:76:20:79:
d5:41:0d:58:bc:90:c0:5a:ae:9e:81:07:36:bc:29:
11:50:62:3b:59:8a:e2:2f:66:af:c7:91:37:01:ca:
1f:57:89:73:c3:eb:bb:f5:c9:bb:d2:34:b3:7e:f6:
15:22:29:6b:59:33:72:b4:50:fc:51:27:a8:0c:c9:
48:e5:2e:0f:d9:6b:7a:02:66:e1:b1:56:be:a6:1a:
2c:fe:a4:36:6e:d1:fb:db:64:56:9f:7e:71:21:3a:
a0:5a:57:2f:38:c0:75:19:93:5c:a5:02:8c:04:98:
ae:ba:5e:9e:91:a8:27:10:e2:b4:83:b7:47:d9:e1:
67:20:8e:6a:b0:c5:4f:2a:d6:ca:25:31:de:53:4a:
a4:d9:7d:97:c7:5e:0f:14:9c:0f:19:e2:3d:3c:86:
a9:15:8e:eb:7e:19:8d:85:ad:de:cd:09:b1:37:1e:
6d:b3:ed:9c:ca:84:78:41:34:7b:6b:64:f8:5d:f3:
fb:bc:30:1c:06:f2:da:b4:62:f7:4a:9b:e0:7d:21:
3b:16:56:39:0b:0e:a0:6d:fa:e9:7d:c8:f4:c7:24:
72:bd:9d:06:53:c3:38:11:6a:49:57:17:32:b2:f3:
1a:4f:5b:2b:ca:aa:37:45:65:0b:71:82:da:40:be:
7a:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:2C:39:AD:17:1F:CE:6B:E8:2A:B9:56:64:1F:30:9B:F1:06:BF:1C
X509v3 Authority Key Identifier:
keyid:62:4A:D4:53:5A:C8:8D:D5:34:19:9F:2A:72:60:95:AF:71:AF:E4:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/JCw5rRcfzmvoKrlWZB8wm_EGvxw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.196.0/22
Signature Algorithm: sha256WithRSAEncryption
61:c2:1d:52:12:22:55:dd:01:74:3f:f8:41:29:92:a2:8a:1c:
9d:b8:a9:5e:74:8d:c4:6e:03:cc:7f:70:cb:82:1c:e2:e1:e1:
1d:f3:2e:82:33:0b:b1:72:6d:a6:8a:50:78:94:08:4a:05:72:
ca:41:98:60:e2:8e:90:22:52:89:15:d6:e9:66:1d:fd:22:25:
84:ff:e8:54:09:cc:61:c2:13:70:20:7a:d1:4b:10:22:73:5f:
a2:88:3b:c4:83:86:fe:c6:da:17:4c:13:d3:54:da:5a:12:a9:
1d:fb:3b:8d:6d:73:bb:b6:c0:8d:fd:05:40:60:24:56:cc:6a:
9a:92:e2:3f:c7:d3:31:e0:5a:bf:0a:da:90:99:e5:ea:ea:1b:
0a:5b:8e:a1:a1:5b:a8:6c:4b:45:78:45:a6:7f:c5:0b:d3:16:
a6:00:6a:7a:88:2f:32:ed:62:22:a2:55:e8:59:fb:18:09:87:
b5:8d:b8:c6:12:12:85:61:09:9a:9d:cd:a9:3e:4b:0c:50:98:
f7:ed:fd:96:14:d1:b9:dc:89:9a:f3:76:12:e4:8d:49:c5:b2:
1b:48:2f:96:fc:fc:6f:34:66:48:28:00:9e:cf:9f:57:04:ce:
83:1c:5c:54:e7:64:b5:5d:55:62:a4:47:5c:1d:2b:c5:5b:bb:
39:28:14:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:35:32 2025 by rpki-client