Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/3KJGfTEC50WJtX6HSUVzD6sEWOQ.roa
File: 3KJGfTEC50WJtX6HSUVzD6sEWOQ.roa (raw, json)
Hash identifier: 6ZM2Lj/KsERkeuj2Icv2+ISXLqRuPc2xDqAZGupYfsc=
Subject key identifier: DC:A2:46:7D:31:02:E7:45:89:B5:7E:87:49:45:73:0F:AB:04:58:E4
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018756C4FAD30D3C87C7582A40F719900F6C
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/3KJGfTEC50WJtX6HSUVzD6sEWOQ.roa
Signing time: Thu 06 Apr 2023 13:32:42 +0000
ROA not before: Thu 06 Apr 2023 13:32:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1
IP address blocks: 45.139.100.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:56:c4:fa:d3:0d:3c:87:c7:58:2a:40:f7:19:90:0f:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Apr 6 13:32:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dca2467d3102e74589b57e874945730fab0458e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ef:d2:af:c5:98:db:0d:dc:ed:39:ad:b6:cb:
5a:9f:ec:22:d0:f0:14:ae:fa:11:d2:e3:1a:d9:f3:
9d:a7:d4:7f:95:d8:55:71:e8:7b:bf:95:bd:80:46:
63:03:5b:25:70:70:b4:dd:22:97:ff:ca:80:38:0b:
c4:55:b1:cf:b5:02:d0:0b:84:0b:39:01:d9:cb:4b:
b4:24:52:e4:05:8a:2d:35:a9:84:f0:85:fe:30:97:
a1:c7:f4:42:f4:84:4e:97:5f:ac:db:e5:95:6b:ba:
4b:73:80:ed:5c:52:69:5d:8e:8e:21:f5:75:31:73:
62:a0:91:60:09:12:9b:ef:17:0a:ba:56:da:11:74:
6a:02:28:95:b2:b2:80:f7:81:71:3d:73:8b:74:a9:
e1:8c:5f:d5:74:2a:24:e3:7f:10:bc:2b:1e:be:3a:
1f:24:7d:f5:04:49:97:68:56:4c:9f:d0:17:bc:8e:
ac:69:56:65:e3:bf:ea:66:2d:8f:d6:ec:06:7b:b9:
ab:ca:36:a3:1c:b2:58:e5:05:81:93:89:71:a1:e7:
ab:47:da:fe:93:da:15:0c:5f:6d:08:65:c4:16:72:
b4:a1:19:83:ec:2f:74:a3:51:d6:ae:f9:2a:ba:2f:
83:f5:a0:65:8b:e1:af:a9:fe:ae:b3:e9:c9:a8:2d:
2c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:A2:46:7D:31:02:E7:45:89:B5:7E:87:49:45:73:0F:AB:04:58:E4
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/3KJGfTEC50WJtX6HSUVzD6sEWOQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.100.0/22
Signature Algorithm: sha256WithRSAEncryption
12:cd:35:67:bf:00:ee:a3:1c:5c:26:9f:2f:1b:2f:ed:f5:8d:
e7:4e:d1:91:a8:ab:f7:85:aa:6b:29:e8:71:e7:cb:b4:be:e5:
17:e6:82:e0:72:83:01:96:64:aa:4a:90:f8:02:0f:01:b9:84:
ab:d5:73:e0:71:8b:d7:56:5c:87:ea:ec:5d:03:b2:37:bf:1c:
bf:2a:41:61:e1:25:49:50:53:30:01:3f:72:06:9b:0e:fe:eb:
2c:46:77:18:80:32:05:da:53:03:b9:c5:1c:43:37:c9:60:a4:
8f:8b:50:fb:70:18:c4:dd:92:b3:ec:34:f1:1f:f5:fd:6e:c3:
8d:49:bb:80:c4:47:92:74:bb:8d:94:33:9b:df:08:43:dc:ed:
c2:e7:fa:0e:46:cc:25:ba:6a:69:dc:29:35:25:fa:61:57:55:
59:4b:f5:c2:94:56:0d:ec:b9:68:e9:1a:6e:f7:60:01:ab:5d:
cf:50:ab:93:02:3a:69:ab:f1:fb:30:04:98:75:c4:58:b6:c4:
5d:7b:1a:f2:d2:b3:dc:d3:8e:bc:22:3a:fc:ee:30:d1:96:dc:
35:f5:f9:f5:47:be:70:35:3b:6d:28:59:4f:1e:5c:d2:e9:46:
c8:03:c9:44:77:ad:cf:47:ce:18:0b:c6:a5:38:45:c2:1e:b2:
66:b7:cd:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:31 2023 by rpki-client on console-ams.rpki-client.org