Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Oq8ValIQJFz80WdRrjNm0blDrmc.roa
File: Oq8ValIQJFz80WdRrjNm0blDrmc.roa (raw, json)
Hash identifier: R69ILIFzF+AMeb5HCWp+zU8b5ogI7aVQ31tY2+p3ROA=
Subject key identifier: 3A:AF:15:6A:52:10:24:5C:FC:D1:67:51:AE:33:66:D1:B9:43:AE:67
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 1EBA1BA7
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Oq8ValIQJFz80WdRrjNm0blDrmc.roa
Signing time: Mon 30 May 2022 12:51:13 +0000
ROA not before: Mon 30 May 2022 12:51:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49849
IP address blocks: 94.156.108.0/24 maxlen: 24
94.156.111.0/24 maxlen: 24
94.156.110.0/24 maxlen: 24
94.156.109.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 515513255 (0x1eba1ba7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: May 30 12:51:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3aaf156a5210245cfcd16751ae3366d1b943ae67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:1a:75:bd:ae:88:89:af:3f:3b:a1:da:19:07:
af:2c:b2:c4:a3:e2:58:d9:ab:a8:fb:c0:ba:aa:47:
0e:c4:cd:90:71:ca:d7:26:b4:56:89:55:52:31:d1:
e0:d6:e2:67:22:d2:90:a7:6b:10:77:26:fd:e0:ad:
82:ec:72:9a:9c:18:59:8e:db:2a:98:cc:ad:a4:12:
32:74:12:57:b7:58:cd:c9:4f:6a:ea:2b:5a:a5:c1:
0d:4c:05:25:f6:10:c7:ee:bb:7d:ac:95:a7:09:1a:
46:da:30:8a:3b:fb:5b:b3:0b:a8:74:1b:06:30:ec:
db:45:81:68:dc:45:26:97:ae:99:ab:e1:13:24:a1:
9d:47:71:f4:85:d9:82:47:5c:d3:02:6c:76:bc:43:
66:51:1c:da:49:1d:a0:c9:b6:37:74:08:4d:bb:da:
0e:65:a0:0b:c5:28:d9:56:ae:6a:56:eb:b0:95:b9:
0c:4e:e9:cd:1e:42:fe:34:cc:52:ed:a2:b0:10:14:
c6:df:46:98:d7:cc:00:4f:c2:96:e7:4f:4f:92:64:
a9:fb:b1:01:a4:d2:21:0f:94:8b:04:c6:09:36:df:
f1:d0:b6:e3:71:1a:5c:3f:1b:28:a1:96:4e:6c:e2:
36:f1:80:fd:86:66:f2:16:99:61:12:97:88:37:e3:
0b:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:AF:15:6A:52:10:24:5C:FC:D1:67:51:AE:33:66:D1:B9:43:AE:67
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Oq8ValIQJFz80WdRrjNm0blDrmc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.156.108.0/22
Signature Algorithm: sha256WithRSAEncryption
80:6a:08:9d:9b:ce:a1:a7:28:01:24:be:c9:e8:d1:61:93:1a:
28:fb:d9:0b:3b:5f:47:56:a2:68:6c:37:d3:28:3d:0a:f6:50:
c1:31:37:fe:92:6f:cd:3f:dc:2f:d7:26:25:1f:4f:49:ac:03:
a0:6c:d1:92:45:52:00:33:de:4a:5b:97:5a:5c:18:c9:8c:53:
8f:4c:90:49:41:68:61:fd:1c:a5:2f:25:53:69:2a:a2:8e:a4:
85:61:e0:33:98:54:43:67:79:2c:31:77:fc:3b:81:07:e2:9e:
f0:c7:f7:1b:be:7f:6b:2a:65:b3:b6:eb:36:47:86:82:7a:43:
62:72:ee:32:6b:7e:7a:ec:e8:61:e6:8a:38:3a:73:83:4e:e2:
14:b4:5c:c2:29:07:83:2b:47:4b:cf:72:ca:ed:0d:38:ea:6e:
cd:cc:2f:fe:76:85:d6:0c:36:b9:24:3e:ae:6a:f9:f2:6e:c0:
d8:f9:b1:1f:7f:31:50:a0:c0:47:a9:98:42:cd:3f:80:99:8c:
e8:3d:70:9c:48:22:93:3f:7f:57:ec:e8:50:38:82:db:14:ba:
80:5d:3f:37:24:30:98:89:d3:3e:d8:0c:a5:1a:df:e0:b1:b2:
ed:45:0b:28:c1:2b:2e:64:51:91:77:dc:fc:b9:0c:5f:10:7b:
85:93:e7:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:36 2023 by rpki-client on console-ams.rpki-client.org