Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/tKOYYhAoBqGaNJ9U0iZly5izke8.roa
File: tKOYYhAoBqGaNJ9U0iZly5izke8.roa (raw, json)
Hash identifier: nCMXq7wTTn+Ns7cmlHS/CD2T40OndLcpNf67sPcOSDo=
Subject key identifier: B4:A3:98:62:10:28:06:A1:9A:34:9F:54:D2:26:65:CB:98:B3:91:EF
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018776D854CC9CEB6DFEAEECCC2D231B6531
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/tKOYYhAoBqGaNJ9U0iZly5izke8.roa
Signing time: Wed 12 Apr 2023 19:01:41 +0000
ROA not before: Wed 12 Apr 2023 19:01:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 38337
IP address blocks: 45.88.66.0/24 maxlen: 24
94.156.235.0/24 maxlen: 24
185.225.75.0/24 maxlen: 24
45.128.235.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:76:d8:54:cc:9c:eb:6d:fe:ae:ec:cc:2d:23:1b:65:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Apr 12 19:01:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b4a39862102806a19a349f54d22665cb98b391ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:94:12:ae:d4:aa:4b:23:0c:a7:c5:20:d9:59:
c7:82:53:3c:3f:47:7a:bf:61:25:69:28:b0:55:b3:
55:81:63:72:9b:23:99:b4:37:d6:75:92:63:1c:4d:
5a:70:22:45:bb:22:42:59:20:3f:aa:fc:65:4f:65:
fb:fc:c4:c1:71:e3:a3:a8:52:06:2f:15:f4:93:ec:
d1:c0:44:fa:12:f7:bf:2a:27:39:94:95:c7:ab:3e:
3d:c0:73:37:4d:57:f7:a6:20:da:cd:42:80:f4:d2:
a3:3b:f6:22:62:85:db:52:9d:48:da:51:8b:d8:25:
6a:8e:43:54:46:79:03:c2:b0:90:0e:0f:fb:75:fb:
5b:30:5e:19:50:22:9c:31:ff:97:a3:4a:f7:f6:68:
99:85:63:11:68:ea:73:b8:dd:d2:12:9b:9e:63:2f:
f5:98:0b:db:59:85:e5:e5:8f:9f:c0:95:7b:59:7d:
df:a5:5a:d3:48:19:37:8c:c5:4a:34:61:87:fb:45:
96:90:a1:29:10:c9:31:d2:8a:e9:5d:b6:f5:b4:a6:
47:a3:80:5a:ea:e8:bb:4a:70:25:fc:9c:79:95:67:
b6:42:a5:d1:3a:65:ee:71:90:e1:7b:0f:01:b5:3c:
ee:79:53:27:9d:d4:41:97:19:cc:3a:ef:1b:6a:2d:
b9:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:A3:98:62:10:28:06:A1:9A:34:9F:54:D2:26:65:CB:98:B3:91:EF
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/tKOYYhAoBqGaNJ9U0iZly5izke8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.66.0/24
45.128.235.0/24
94.156.235.0/24
185.225.75.0/24
Signature Algorithm: sha256WithRSAEncryption
84:d3:fe:70:cc:68:9d:0f:0d:b5:6a:36:90:8b:5e:1f:72:81:
34:d0:86:5f:b4:90:aa:29:66:f8:92:1d:50:eb:37:42:a5:27:
3c:58:5d:f4:0a:40:62:7c:2d:66:1f:f6:0d:a1:3c:30:eb:0c:
2d:f5:58:0e:f0:05:8b:6e:3a:01:a5:bd:a1:29:07:d2:77:1d:
3a:90:05:b3:32:a3:2e:b7:39:b1:c7:d5:b7:d7:d1:4f:5b:23:
e4:1d:51:e3:c0:87:5f:50:9a:55:22:83:92:cd:6d:1e:90:9b:
13:67:31:86:9c:94:26:a1:60:49:44:a8:b2:89:4a:ce:c9:87:
1b:44:ea:2a:54:4c:cd:34:37:bb:05:b9:a5:d8:6c:74:73:73:
d0:9b:32:6b:f0:6e:f2:50:d1:d5:8c:22:5a:9e:0a:2d:35:7c:
92:7a:91:e9:9d:5d:92:0f:f6:b5:e3:85:ef:cc:0a:25:26:c4:
0e:80:36:c8:1b:a2:3c:8d:f5:f1:04:59:16:91:ea:4c:48:8d:
41:3a:6f:d0:46:f6:41:53:5c:1c:0f:c3:32:15:4e:16:ce:cf:
39:e3:d7:1a:9e:e8:1c:86:89:e3:57:f6:4c:71:30:8a:ee:7a:
f9:eb:3f:e8:69:89:25:13:30:33:5c:4f:bb:5e:d8:bc:d0:0f:
9a:00:bb:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:43 2023 by rpki-client on console-ams.rpki-client.org