Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/bAm5SO8p4GuLEWlcUmJm_KzSdGE.roa
File: bAm5SO8p4GuLEWlcUmJm_KzSdGE.roa (raw, json)
Hash identifier: oQgQTRpXZM1LYt+kRlKUuswEwnekAe8s1uKnxA88tBU=
Subject key identifier: 6C:09:B9:48:EF:29:E0:6B:8B:11:69:5C:52:62:66:FC:AC:D2:74:61
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 1C7894CA
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/bAm5SO8p4GuLEWlcUmJm_KzSdGE.roa
Signing time: Sat 01 Jan 2022 01:02:41 +0000
ROA not before: Sat 01 Jan 2022 01:02:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60784
IP address blocks: 37.60.136.0/24 maxlen: 24
31.13.227.0/24 maxlen: 24
87.121.78.0/24 maxlen: 24
87.121.76.0/23 maxlen: 23
94.156.96.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 477664458 (0x1c7894ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 1 01:02:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6c09b948ef29e06b8b11695c526266fcacd27461
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:31:de:69:b9:17:72:97:72:a9:e2:ea:a8:11:
69:a6:ae:63:86:16:ff:69:33:d7:2d:51:3f:99:e6:
c5:a1:09:67:21:c3:69:2c:a6:6e:24:70:ea:2c:2c:
b4:81:0e:dd:ab:10:33:e1:41:c0:0d:ea:fb:f4:7c:
78:f0:38:e8:8a:08:ea:7d:88:1b:21:2f:85:70:ca:
24:ab:a4:6c:32:41:38:57:04:40:b0:bd:ab:72:81:
e9:29:50:19:a7:82:da:8b:ff:66:32:44:ea:64:99:
b8:ac:2a:44:f4:7d:f4:69:10:f5:82:78:05:66:dc:
06:ed:56:dc:24:7c:cb:89:22:53:60:4a:b2:b7:5d:
06:00:23:7d:7c:8b:ea:fb:c7:6a:de:50:e1:d9:bb:
72:e1:0b:81:4c:83:ca:f2:0e:50:29:06:c6:2e:44:
03:6e:1b:1b:43:3b:fe:c5:8c:37:9f:03:6b:39:e8:
84:96:22:5c:9c:9b:9c:b6:3a:10:14:87:08:6d:14:
ab:23:dc:5d:c5:15:38:d7:3d:96:7f:68:0b:76:6e:
5e:d6:18:9d:9d:29:1a:67:5c:a5:3c:58:30:5c:f9:
d7:4a:a9:14:00:ea:8c:71:1d:ba:cd:99:1f:d0:35:
3f:0f:72:11:8f:5c:ac:fe:a5:5c:bf:5a:e0:1d:5d:
94:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:09:B9:48:EF:29:E0:6B:8B:11:69:5C:52:62:66:FC:AC:D2:74:61
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/bAm5SO8p4GuLEWlcUmJm_KzSdGE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.13.227.0/24
37.60.136.0/24
87.121.76.0-87.121.78.255
94.156.96.0/24
Signature Algorithm: sha256WithRSAEncryption
60:87:70:bd:ed:39:ee:9b:30:2a:ed:48:74:9e:e4:e5:cd:a8:
66:92:d7:ff:b3:a3:be:85:f6:35:5c:02:c9:b8:22:ff:e5:cf:
6d:4f:cf:7e:1a:72:c2:14:1d:96:0b:87:33:ca:b8:ab:1f:7b:
66:5a:5a:b7:af:8a:54:46:48:ba:b6:7d:26:f3:5d:66:65:0f:
5b:33:ed:93:96:ba:68:19:a9:97:4b:ed:58:f8:fc:e5:ac:1b:
33:20:c9:d3:44:e1:70:73:f3:44:0e:fd:14:78:61:a2:3a:e9:
42:fe:e0:a8:fd:ce:e5:0d:5e:d3:8c:21:6c:ec:63:6f:ae:86:
2b:3a:8f:77:ac:e5:2c:be:b1:3e:16:12:c6:fa:d4:6e:62:bd:
c1:b0:95:47:c3:a2:45:94:e6:b9:e2:f5:48:5d:a0:b0:b7:7d:
da:eb:4c:e7:d1:d0:79:58:2e:d1:30:76:32:93:3c:e8:0b:46:
6a:76:98:bd:69:9b:f1:85:1f:12:fe:03:06:1c:3e:6f:4d:f0:
d2:0b:ad:6d:bc:6c:e1:00:42:39:b7:e0:0a:46:e5:3d:24:2c:
81:c3:2f:d9:07:5b:9c:64:ed:35:99:cc:ce:11:42:75:d0:3f:
e8:cc:2e:c9:5a:06:93:ba:5a:50:4b:c8:ca:8a:83:84:7b:1d:
25:fd:8c:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:39 2023 by rpki-client on console-ams.rpki-client.org