Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/e1gerQ4GMONUY3PR7uh1Fsmb8QU.roa
File: e1gerQ4GMONUY3PR7uh1Fsmb8QU.roa (raw, json)
Hash identifier: IZIx3gnhVzoLvbkefka0hsCeD4dq+YEoan1/vOifgA4=
Subject key identifier: 7B:58:1E:AD:0E:06:30:E3:54:63:73:D1:EE:E8:75:16:C9:9B:F1:05
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 1C6D3C58
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/e1gerQ4GMONUY3PR7uh1Fsmb8QU.roa
Signing time: Sat 01 Jan 2022 01:02:35 +0000
ROA not before: Sat 01 Jan 2022 01:02:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48115
IP address blocks: 94.156.36.0/24 maxlen: 24
94.156.32.0/23 maxlen: 23
94.156.101.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 476920920 (0x1c6d3c58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 1 01:02:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7b581ead0e0630e3546373d1eee87516c99bf105
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:e8:f4:62:4e:d0:82:05:8d:ca:ab:0f:4d:fd:
67:49:e4:39:3a:0c:bd:ea:95:0b:2b:e9:10:ad:05:
c8:3e:44:e7:75:5c:a8:b0:05:94:89:06:03:b1:62:
7a:65:36:72:7e:79:c7:9b:3a:7e:5a:83:a3:40:89:
24:f1:6c:0a:d3:c0:6c:04:28:e6:40:40:96:6c:e8:
d5:17:ca:31:58:d8:90:ea:3a:fc:2e:f9:48:63:d4:
6e:7d:ad:63:c9:f3:ac:c4:ee:df:cd:40:de:20:dc:
96:29:fe:8b:3d:03:21:9f:7c:f8:80:ed:2e:d0:f6:
e2:e3:05:24:94:2b:c4:d5:6f:6f:ec:33:24:ba:ae:
70:01:1f:19:b2:a4:db:e1:cd:ec:b7:19:a9:dd:5f:
c5:b0:81:f2:cc:b8:e7:fa:bc:ea:af:fe:5a:90:02:
2d:0e:7c:18:3c:8e:26:c4:12:65:b2:66:57:7a:b7:
c9:fb:07:53:bd:07:a5:ae:73:5c:12:86:d4:b3:e3:
6c:8b:99:0b:cb:df:51:82:85:58:46:67:c5:78:c1:
4c:66:c8:7d:06:1c:38:a0:5b:fb:38:65:f9:e9:e7:
29:65:db:96:57:a4:34:1f:a9:fb:f0:3b:fb:f5:94:
24:19:24:2d:a8:62:66:e7:b8:df:e1:a2:29:04:d6:
9c:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:58:1E:AD:0E:06:30:E3:54:63:73:D1:EE:E8:75:16:C9:9B:F1:05
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/e1gerQ4GMONUY3PR7uh1Fsmb8QU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.156.32.0/23
94.156.36.0/24
94.156.101.0/24
Signature Algorithm: sha256WithRSAEncryption
34:5f:dc:c3:d4:45:f0:f1:e2:45:44:52:ae:9f:a0:c3:fd:fd:
d0:bd:bb:6b:ce:52:e6:0c:93:e4:52:46:58:af:95:ca:e5:1b:
d3:fd:17:ee:f3:ab:bc:f4:e2:00:9a:76:1f:ef:46:63:cd:d7:
84:e0:f6:6d:1e:40:77:a4:79:06:d7:5d:27:12:8a:a0:32:a4:
ba:07:2d:07:1d:c7:45:e8:8b:00:fc:9c:d3:8b:ec:32:9e:32:
d8:12:d0:04:28:ca:23:6a:36:00:88:41:9a:ef:44:43:e8:98:
24:e9:53:a8:7f:9a:7a:eb:e3:6d:40:1a:c2:34:3a:a4:44:d2:
0e:b0:87:0a:58:bc:f1:cf:a3:c3:a8:c3:45:d8:c9:30:44:dc:
53:59:b1:fa:3c:07:2f:c5:c4:5d:7c:37:47:e5:41:b9:79:9a:
0d:0a:c4:6d:df:a7:b9:3b:c6:3c:e6:0c:b5:56:72:38:e6:86:
09:e8:01:ab:84:9a:02:bf:9e:09:28:80:f9:c2:50:e9:d9:c0:
6b:41:db:0c:af:11:6d:92:4f:a7:d2:9d:51:82:d4:13:93:bd:
8a:53:4e:da:0b:f6:6f:dc:86:6e:22:00:77:b2:9c:4c:33:28:
82:ad:2d:fc:37:a7:88:18:5c:58:a2:ce:24:04:4b:af:d8:13:
10:77:c9:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:40 2023 by rpki-client on console-ams.rpki-client.org