Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/6jQ0pslSJpOFVWaqy2WoGKn-_Es.roa
File: 6jQ0pslSJpOFVWaqy2WoGKn-_Es.roa (raw, json)
Hash identifier: 23YZ9dfvvVtALSEKHL3/DW1Q2rcwV6dZEloAvlnVSnY=
Subject key identifier: EA:34:34:A6:C9:52:26:93:85:55:66:AA:CB:65:A8:18:A9:FE:FC:4B
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0187B5808D557C21FA77EBCE92C95FF9EEC0
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/6jQ0pslSJpOFVWaqy2WoGKn-_Es.roa
Signing time: Mon 24 Apr 2023 23:01:53 +0000
ROA not before: Mon 24 Apr 2023 23:01:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1
IP address blocks: 94.156.8.0/24 maxlen: 24
45.139.100.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:b5:80:8d:55:7c:21:fa:77:eb:ce:92:c9:5f:f9:ee:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Apr 24 23:01:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ea3434a6c9522693855566aacb65a818a9fefc4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:2a:87:67:83:af:4a:0a:ee:6f:2c:4c:74:89:
67:39:00:e5:a0:ab:a9:25:8e:df:0d:09:80:0c:18:
89:07:29:2b:07:6e:79:87:ea:43:ef:0d:86:32:ce:
3a:4e:6b:47:b0:ab:6c:b0:94:1c:4c:21:ef:e3:f9:
d6:12:5a:e0:72:b6:f4:b0:f2:73:06:95:37:df:af:
93:5c:f3:27:99:54:21:bc:0b:b9:ce:0c:7f:1c:d6:
e5:17:96:ab:4f:9f:7c:79:5b:94:2e:63:22:3e:dc:
f6:b0:00:d2:f1:84:b6:a5:cb:d5:b5:f0:29:aa:b0:
00:ba:16:ea:9a:50:a6:72:2d:a3:88:c3:24:62:5e:
8d:a5:49:8c:8f:06:f2:4a:3e:b7:af:b2:78:c3:fb:
e5:87:e4:f3:b0:ad:83:f7:46:ac:16:04:99:08:1f:
af:f6:f7:f5:18:5e:7b:a3:8d:05:c9:65:33:a3:ad:
e3:6b:48:81:e8:db:21:19:7e:59:81:b9:7c:3c:62:
96:0b:03:30:99:5c:71:24:fc:84:5c:f3:d6:b9:a3:
9f:52:b6:7f:ea:3e:4e:63:af:15:c5:c8:db:b9:12:
a8:6c:93:9d:39:23:79:a2:a4:7c:69:e0:71:31:0e:
5e:e4:bc:48:2b:56:ac:46:a1:d2:99:43:3f:32:1e:
86:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:34:34:A6:C9:52:26:93:85:55:66:AA:CB:65:A8:18:A9:FE:FC:4B
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/6jQ0pslSJpOFVWaqy2WoGKn-_Es.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.100.0/22
94.156.8.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:7f:eb:d3:00:96:7c:0a:f6:46:97:c1:50:65:71:4a:f0:90:
dc:43:99:25:03:09:4c:d4:75:e4:c8:eb:fb:bc:db:d9:e3:e1:
c1:33:31:d8:79:6e:3f:19:03:96:87:b6:e4:c4:55:73:73:1a:
79:63:0b:15:a4:0a:1a:09:8a:16:63:94:c1:e3:6f:94:13:f9:
15:82:91:bc:52:e6:36:ad:ef:e1:40:c0:32:7f:89:b4:2d:ea:
1a:93:ae:f6:f0:0f:fd:9b:17:0e:e9:44:00:b5:54:c9:6b:84:
26:c0:be:20:9f:79:19:aa:82:cd:67:78:b4:40:68:2c:90:12:
31:c7:7c:26:67:04:a2:89:99:3f:e3:56:51:14:7a:81:60:65:
95:c0:2b:09:1b:16:ab:d9:40:c4:28:76:c0:e0:b0:67:4d:51:
16:e3:9c:a9:43:de:8c:3b:c1:b6:95:12:d4:e6:57:93:3e:42:
ea:98:2d:0c:8a:95:d1:2c:e2:ed:31:6f:e7:24:26:19:00:c5:
fd:3b:88:38:d3:58:96:b3:27:83:9e:d1:dc:20:01:b9:86:87:
34:84:9a:9c:b1:dd:33:89:57:fe:a7:1d:d7:19:b5:fb:ad:8b:
93:56:19:2e:6c:19:49:0d:03:9b:d9:4a:e9:a4:72:1e:c6:ed:
09:08:cb:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:32 2023 by rpki-client on console-ams.rpki-client.org