Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/N5YqiNkfxxgQZhnvrv-kkuvaUhw.roa
File: N5YqiNkfxxgQZhnvrv-kkuvaUhw.roa (raw, json)
Hash identifier: nXxvtSn6KNDJToD56p5nUBDHbkLlBp8LPqT3I4kqHtM=
Subject key identifier: 37:96:2A:88:D9:1F:C7:18:10:66:19:EF:AE:FF:A4:92:EB:DA:52:1C
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01881AF9FC20ABCBEA9CD13F7C2B18611BE6
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/N5YqiNkfxxgQZhnvrv-kkuvaUhw.roa
Signing time: Sun 14 May 2023 15:56:10 +0000
ROA not before: Sun 14 May 2023 15:56:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1
IP address blocks: 81.161.231.0/24 maxlen: 24
164.40.185.0/24 maxlen: 24
45.139.100.0/22 maxlen: 24
185.221.64.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:1a:f9:fc:20:ab:cb:ea:9c:d1:3f:7c:2b:18:61:1b:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: May 14 15:56:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=37962a88d91fc718106619efaeffa492ebda521c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:4e:92:74:fe:1f:72:87:fe:f8:37:0e:ac:cb:
eb:f5:9a:f8:26:0b:21:2b:83:14:c6:55:ed:31:39:
11:84:50:e2:40:f5:28:99:9b:d5:71:f5:50:ed:de:
1c:f3:cb:4e:ac:a6:4c:d2:86:87:d2:02:23:5b:84:
4d:3f:98:a7:54:96:86:e1:11:98:f8:04:9e:05:07:
05:b8:2b:ad:38:48:c3:a7:10:66:87:03:63:ca:12:
a8:35:5e:38:7f:37:fe:3a:38:9e:13:a1:50:dc:80:
ed:b5:4d:fd:0a:33:8a:04:7d:13:ef:b0:2e:74:29:
82:c2:97:bc:b2:8e:fd:3a:40:42:7b:aa:be:16:e7:
53:6c:4d:df:d6:f3:5c:ad:4c:50:e9:0e:ea:0c:79:
1f:e5:ea:57:b9:6d:87:9f:65:68:43:d3:7b:30:ca:
e0:ed:cc:aa:2d:78:c3:a3:e4:6b:e1:85:80:9f:96:
d2:73:b9:b4:9b:cb:11:93:e3:ba:cd:84:70:bf:08:
82:fe:de:b2:7c:23:d4:c4:ce:95:20:09:cb:79:76:
7d:77:eb:b9:32:50:81:80:ed:49:30:75:7f:fc:1f:
f9:a5:a6:7a:81:fe:11:31:23:d3:1e:92:9f:f9:b3:
f4:3d:4b:97:ba:62:65:bc:a4:55:11:3e:e5:57:04:
36:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:96:2A:88:D9:1F:C7:18:10:66:19:EF:AE:FF:A4:92:EB:DA:52:1C
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/N5YqiNkfxxgQZhnvrv-kkuvaUhw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.100.0/22
81.161.231.0/24
164.40.185.0/24
185.221.64.0/24
Signature Algorithm: sha256WithRSAEncryption
91:3a:68:65:89:f8:1a:2d:36:36:fa:92:3b:8a:dc:53:8a:51:
c3:e2:c0:ef:ef:45:e2:4f:a9:52:1f:e5:c2:2f:06:56:94:2d:
f1:d5:a1:a1:99:a6:36:06:c9:70:09:e9:6d:b9:fa:7f:3e:cf:
a4:1e:0a:09:66:85:a9:ef:0d:3a:26:49:08:34:ad:44:86:59:
0a:65:3e:e1:b8:f4:42:c4:bb:1d:9f:e5:ad:7e:c7:66:a4:0e:
1f:2e:ae:c9:2b:07:87:2a:96:05:76:4f:49:95:47:a1:0d:e7:
7f:48:d1:53:6a:db:ed:f3:ff:cf:3b:81:0e:c7:c2:96:32:33:
9d:3e:3d:4a:0d:2c:1b:e8:6e:f7:33:c5:16:0a:a5:b3:2c:20:
c3:c4:e1:7f:3d:62:51:7b:07:2b:5f:65:a6:76:bb:39:57:e5:
16:1f:1a:05:37:7b:1b:00:61:fd:3f:ca:04:d9:37:5b:95:b3:
26:25:dc:ef:53:b7:35:bf:e1:1e:04:20:c7:0f:9a:ad:47:10:
98:8b:4f:33:9b:a7:f6:cc:95:c1:e4:e2:0b:9e:19:cc:c2:c9:
01:c1:a2:30:62:44:f6:e1:ee:02:00:30:26:8d:7b:13:5e:ab:
03:de:0d:fe:f1:f1:b4:f7:e2:e6:30:28:c4:33:ca:3c:99:cf:
ca:83:2f:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:35 2023 by rpki-client on console-ams.rpki-client.org