Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/cfO2oLWIzqG67rdRHdBFFRNgAkw.roa
File: cfO2oLWIzqG67rdRHdBFFRNgAkw.roa (raw, json)
Hash identifier: 7k10dLS1KQJbqO3fL5eKSjOcDSEZNT07y+ZqHlg2pSs=
Subject key identifier: 71:F3:B6:A0:B5:88:CE:A1:BA:EE:B7:51:1D:D0:45:15:13:60:02:4C
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01880A01CA821176C6CA6BF91ACFD2ACFE60
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/cfO2oLWIzqG67rdRHdBFFRNgAkw.roa
Signing time: Thu 11 May 2023 08:51:09 +0000
ROA not before: Thu 11 May 2023 08:51:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1
IP address blocks: 81.161.231.0/24 maxlen: 24
164.40.185.0/24 maxlen: 24
45.139.100.0/22 maxlen: 24
185.221.64.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:0a:01:ca:82:11:76:c6:ca:6b:f9:1a:cf:d2:ac:fe:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: May 11 08:51:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=71f3b6a0b588cea1baeeb7511dd045151360024c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:24:93:e3:a6:b6:a4:81:c2:b9:c8:7e:d7:89:
b8:d4:2c:85:58:fa:cb:18:ab:3f:63:cb:5a:67:08:
10:77:72:6e:e1:b2:fe:33:54:e5:d0:8d:4f:15:ec:
12:cf:f6:6d:fc:c1:0d:d0:40:7f:11:68:a0:dd:06:
34:d1:5e:99:66:03:14:40:cd:ab:00:82:aa:4a:71:
6b:bc:d2:19:43:51:4b:20:46:18:b8:35:e8:b1:67:
e2:b1:7b:5f:fb:68:3a:f0:db:64:35:d5:2e:1b:49:
0b:00:d7:13:c5:e9:3d:a3:7e:ba:7c:f8:22:cf:28:
10:c9:ef:fc:48:cc:e3:07:b5:f5:92:cb:13:99:5f:
72:a0:16:0a:8c:dc:9f:63:9b:13:50:93:27:cf:70:
da:99:3b:6e:ce:6a:2a:80:5d:f3:04:5e:a8:10:8c:
df:fd:83:a3:74:19:c2:ed:9b:fc:61:a5:08:94:10:
6e:f1:c4:7d:07:a8:c5:be:ed:bf:c6:3c:9b:1c:88:
25:4f:e5:41:44:87:d0:8e:f9:92:4b:d4:06:0e:f7:
88:fe:4c:0b:7b:77:e3:37:1c:94:3c:4e:ae:0c:15:
f9:9b:56:1f:51:cc:46:83:28:33:b9:71:61:1b:f6:
b1:74:14:23:1c:5a:38:20:02:55:fb:ed:fe:a8:f2:
0f:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:F3:B6:A0:B5:88:CE:A1:BA:EE:B7:51:1D:D0:45:15:13:60:02:4C
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/cfO2oLWIzqG67rdRHdBFFRNgAkw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.100.0/22
81.161.231.0/24
164.40.185.0/24
185.221.64.0/24
Signature Algorithm: sha256WithRSAEncryption
63:a8:ac:12:b4:c4:67:1d:2d:a9:1c:d5:28:37:9e:7d:e3:76:
ac:ab:b1:f4:ba:eb:29:c9:f8:85:c4:4a:df:37:ce:57:f0:65:
ce:18:ed:8f:d3:f5:25:2a:a7:4b:30:ef:b0:31:e5:42:d3:e6:
0f:94:f4:12:d7:b5:9a:81:f6:2b:35:b4:eb:c2:5a:76:99:4c:
e8:31:ba:e6:99:8d:97:4c:39:10:5b:b5:78:28:14:3e:6d:5c:
e0:82:98:74:95:a1:c5:2d:a4:22:e3:ca:5a:9a:25:90:88:84:
65:ec:28:55:5d:a9:9b:7e:fa:6c:db:99:2e:41:57:db:b9:51:
5b:ab:4a:72:56:b6:8f:8f:df:59:69:69:c4:97:74:eb:29:1a:
ac:1e:ed:aa:d7:ab:5b:b7:5e:1a:81:3e:aa:d2:d7:80:99:7c:
fb:75:8a:6a:23:17:51:59:8b:84:d8:61:aa:5a:a4:da:bd:a3:
15:b9:34:9a:a8:54:73:7b:c6:91:5f:f4:0e:08:76:c4:e1:dd:
a4:00:3e:f7:d5:27:a7:60:13:20:d7:15:81:d8:0a:1b:14:02:
86:3c:5e:16:b3:92:6f:f1:7d:6e:a2:dd:e9:f0:e0:2a:cf:0a:
ed:2d:af:6f:11:b0:2f:5d:e5:00:7a:a7:f8:88:a0:9b:14:00:
04:c1:ee:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:39 2023 by rpki-client on console-ams.rpki-client.org