Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/UB5PnEGNGjsBTxCgtzGV_URVDkg.roa
File: UB5PnEGNGjsBTxCgtzGV_URVDkg.roa (raw, json)
Hash identifier: du/MxYb5Yc6hBgYVd7fE+KVZKmYeYFfv+IbNsU8t+3g=
Subject key identifier: 50:1E:4F:9C:41:8D:1A:3B:01:4F:10:A0:B7:31:95:FD:44:55:0E:48
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 1CF79C2E
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/UB5PnEGNGjsBTxCgtzGV_URVDkg.roa
Signing time: Wed 02 Feb 2022 09:44:28 +0000
ROA not before: Wed 02 Feb 2022 09:44:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 393398
IP address blocks: 81.161.237.0/24 maxlen: 24
185.218.136.0/22 maxlen: 24
82.115.208.0/22 maxlen: 24
193.37.40.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 485989422 (0x1cf79c2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Feb 2 09:44:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=501e4f9c418d1a3b014f10a0b73195fd44550e48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7d:78:da:9b:c1:a1:95:28:ae:6e:dd:db:27:
63:04:00:57:81:01:33:84:26:ab:92:ce:0b:1e:73:
c4:ae:62:0d:72:41:89:7c:e0:24:78:6e:40:53:b0:
81:7c:3a:9d:72:75:45:24:4b:c6:fc:66:28:55:1c:
3c:9a:d5:7d:0f:9c:8c:ce:71:41:42:37:1f:0f:16:
71:7f:08:99:8e:00:2f:f7:cf:88:8e:a1:56:38:56:
f2:45:d2:5a:b4:2e:2c:55:b8:25:2a:12:1e:76:d6:
7d:71:d3:cb:b1:b7:29:2f:29:12:66:64:f2:cf:1e:
31:54:00:8d:6b:36:46:ff:81:bc:f6:a2:da:0a:03:
f6:30:4f:7f:60:a0:3c:61:78:1f:7a:6e:da:5d:d5:
26:c6:dd:12:f3:f4:f6:3a:0a:fe:0d:1d:24:9e:55:
5b:fd:7d:ec:da:bf:cd:9b:58:ba:7d:6b:dc:41:8c:
cc:db:4e:b6:b0:84:02:f8:88:04:f1:51:8a:e5:29:
77:52:31:25:9f:9a:20:68:48:67:3e:8d:4d:63:fa:
ab:2a:c8:b7:fd:6a:89:8d:58:91:3c:71:9f:33:2e:
50:cf:a0:a2:a0:2a:f3:56:ab:fb:53:d4:57:4c:76:
79:4f:c9:99:96:73:4e:10:68:86:a9:46:8b:ff:9f:
b5:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:1E:4F:9C:41:8D:1A:3B:01:4F:10:A0:B7:31:95:FD:44:55:0E:48
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/UB5PnEGNGjsBTxCgtzGV_URVDkg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.161.237.0/24
82.115.208.0/22
185.218.136.0/22
193.37.40.0/22
Signature Algorithm: sha256WithRSAEncryption
1c:d2:6f:20:ef:24:39:70:5d:9b:da:12:4c:76:5e:0a:a2:15:
89:d1:72:0e:cb:92:ac:57:7d:70:37:39:88:50:87:1f:6b:18:
06:c3:56:80:2d:fa:2a:68:19:7e:2a:f6:89:51:d4:0a:d8:d2:
ca:c8:04:fc:c7:ad:d3:a4:00:3c:c5:d2:ad:3b:29:e2:c5:77:
84:c8:97:b5:31:d1:3f:1e:27:fc:e5:6f:2e:80:2b:ce:7e:e3:
b3:58:6f:c3:d3:c2:de:d7:b4:dd:bb:67:b7:da:a4:bb:4d:5d:
6d:b0:39:33:66:f4:d3:a0:c6:ee:ca:ec:67:7c:11:15:db:04:
37:a4:5f:90:3c:c2:6e:12:25:d9:ec:e7:9d:36:d2:19:64:df:
5a:ea:f9:cd:d8:d0:d5:6b:a2:76:c0:37:01:fa:bf:dd:9a:a8:
b3:6c:5d:6b:85:83:19:10:0a:a8:b3:40:a0:f5:4b:ba:2b:dc:
10:59:22:7c:20:d3:65:29:c1:87:f9:0e:41:1d:59:3b:95:f5:
69:ae:ed:b8:40:bc:55:3c:4c:57:8d:a6:a1:96:4f:d0:a2:ce:
62:8b:9e:c7:26:3a:f3:aa:fc:be:2f:10:63:9f:3c:88:31:ff:
e9:a6:e0:75:4b:b0:55:6e:c8:cf:ef:03:e8:8b:58:97:42:c7:
38:e1:77:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:37 2023 by rpki-client on console-ams.rpki-client.org