Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/41AZoOQHdZEB-KD_ICkpD6TQiqY.roa
File: 41AZoOQHdZEB-KD_ICkpD6TQiqY.roa (raw, json)
Hash identifier: YVTg/6M5IPW+x8D0lPxr7Sld7V20g/UHqVkrt8YYGh0=
Subject key identifier: E3:50:19:A0:E4:07:75:91:01:F8:A0:FF:20:29:29:0F:A4:D0:8A:A6
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 1C6CF63A
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/41AZoOQHdZEB-KD_ICkpD6TQiqY.roa
Signing time: Sat 01 Jan 2022 01:02:34 +0000
ROA not before: Sat 01 Jan 2022 01:02:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48057
IP address blocks: 93.123.75.0/24 maxlen: 24
93.123.74.0/24 maxlen: 24
87.121.68.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 476902970 (0x1c6cf63a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 1 01:02:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e35019a0e407759101f8a0ff2029290fa4d08aa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:91:7c:e1:77:d9:a8:89:45:6f:b8:2e:0f:5c:
a3:51:a1:ad:18:d1:4f:7f:e7:d3:cb:57:f5:2d:76:
79:6d:34:8d:ba:52:b9:1f:32:63:ab:1c:04:af:18:
d3:5b:89:fd:76:06:89:78:44:fa:5d:14:31:12:61:
0a:95:3c:3f:aa:53:50:13:43:e0:f5:49:c3:5b:2b:
bd:74:7e:bc:6c:8a:13:77:c0:1c:a4:fa:ca:f6:83:
ad:a9:75:25:b8:33:19:53:e8:bb:c8:dd:5a:80:34:
fe:7e:24:dd:fe:ce:1c:6b:a2:98:b0:9d:b8:1e:fc:
02:5e:35:2c:0d:23:d8:9e:2b:ac:b4:34:00:3f:ec:
76:b7:6b:86:1c:66:d1:bb:4a:58:be:b1:32:88:8c:
33:d0:16:cd:90:0c:c2:85:ff:26:21:13:6e:5c:20:
a6:6c:46:57:90:2b:1d:9c:ab:ad:09:77:69:8c:16:
8f:33:9b:64:d6:61:fd:6d:b3:f1:f6:aa:b0:66:fd:
36:8b:e3:98:71:f6:0d:b3:67:2b:7a:d3:be:7d:ef:
09:54:f4:5c:10:68:92:22:52:19:ec:f0:ee:cb:2b:
f2:5e:96:47:53:a3:3f:06:8e:cc:f2:1c:13:f8:c9:
07:b3:c8:55:c7:0a:43:aa:42:c5:ff:b0:25:e8:1b:
1b:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:50:19:A0:E4:07:75:91:01:F8:A0:FF:20:29:29:0F:A4:D0:8A:A6
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/41AZoOQHdZEB-KD_ICkpD6TQiqY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.121.68.0/24
93.123.74.0/23
Signature Algorithm: sha256WithRSAEncryption
2a:98:36:3b:ea:8e:c2:e1:7f:af:84:62:4e:ad:d7:5d:27:60:
e3:4e:f0:c6:2b:c6:0a:77:2d:f1:cd:35:cd:cd:72:09:9b:58:
8f:d6:73:ad:a9:8a:52:f8:d4:db:b7:2c:d6:65:77:09:d0:43:
4e:c8:1c:04:7b:56:f5:33:93:83:50:ae:d8:36:be:97:a7:b4:
0e:e6:1a:19:66:67:e3:88:b7:be:9d:66:31:3a:08:e7:b8:af:
92:ad:f4:cd:05:04:21:65:dd:ed:46:7e:9a:4d:16:54:a6:0b:
4c:05:ec:ff:df:a1:34:66:41:25:23:79:8b:05:fe:12:cc:da:
dc:39:02:0d:a6:0d:e8:da:7a:04:67:7a:ef:9a:3e:c9:f5:e2:
87:b9:f2:83:a0:7b:e2:71:5b:c0:b7:97:d6:13:df:e9:a3:ba:
b7:39:1a:e7:ce:10:71:2c:e7:04:1d:c5:da:ea:e1:54:34:c5:
07:39:f3:57:3d:d5:2c:47:95:96:28:0f:8d:6a:ab:19:2b:e5:
40:4a:51:14:6b:2c:16:eb:46:18:0d:a5:b3:6f:3e:55:ce:7d:
69:ec:18:ed:75:a4:9d:1f:2f:75:16:b9:69:46:9f:49:e6:08:
d6:32:7e:f6:15:0d:5b:e4:94:ab:d6:5e:57:a9:83:a5:70:c0:
5f:9e:c4:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:31 2023 by rpki-client on console-ams.rpki-client.org