Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/uIR5WDxk6HE3V1fauW_EMkq0wX4.roa
File: uIR5WDxk6HE3V1fauW_EMkq0wX4.roa (raw, json)
Hash identifier: mBXKOFGjQVQpvToya8jYyaABPfXHTibinCAmRlAc0J0=
Subject key identifier: B8:84:79:58:3C:64:E8:71:37:57:57:DA:B9:6F:C4:32:4A:B4:C1:7E
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 1C88327A
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/uIR5WDxk6HE3V1fauW_EMkq0wX4.roa
Signing time: Sat 01 Jan 2022 01:02:50 +0000
ROA not before: Sat 01 Jan 2022 01:02:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203095
IP address blocks: 91.92.110.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 478687866 (0x1c88327a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 1 01:02:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b88479583c64e871375757dab96fc4324ab4c17e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:69:e1:79:01:38:43:ba:d3:e2:4a:4b:16:b2:
a3:16:61:97:c8:91:0e:2d:9f:58:2b:d6:52:bf:0d:
8d:29:63:dd:9c:06:ad:be:2c:d9:1f:30:6e:b2:ca:
f1:36:91:33:41:a5:49:fc:e5:61:4e:ab:9b:ae:b3:
28:a9:96:c7:ad:eb:5f:31:6e:69:c9:6f:38:6a:aa:
ee:f1:c3:39:1c:58:6b:33:55:1d:b5:f9:62:5a:40:
77:92:8b:2e:6d:7b:8a:2d:72:07:3a:8a:8a:12:69:
16:e8:12:28:5b:46:75:90:97:2f:24:84:2c:dd:76:
52:cc:b9:de:a0:f3:3a:8f:38:4e:30:3b:a8:e6:a7:
b5:58:a4:83:64:d7:52:00:f6:8d:71:bf:ec:d8:c1:
08:df:01:96:68:f1:01:d1:e2:fe:be:8f:d4:2d:d3:
b2:50:b4:69:36:ed:07:07:25:4a:84:0e:6f:1a:3c:
91:d8:45:4f:8b:e7:b3:51:fb:93:c1:62:7b:c6:1d:
f1:8a:70:7d:f5:f2:4c:e6:8e:b1:f4:bb:12:e5:ed:
28:a3:44:eb:e9:99:66:13:9c:ef:4a:90:ac:07:1f:
bc:f0:b2:a6:e3:95:73:45:c0:2a:da:70:8c:ca:51:
6a:e5:6c:72:8c:57:d0:37:e5:0a:be:92:03:cf:96:
42:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:84:79:58:3C:64:E8:71:37:57:57:DA:B9:6F:C4:32:4A:B4:C1:7E
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/uIR5WDxk6HE3V1fauW_EMkq0wX4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.92.110.0/24
Signature Algorithm: sha256WithRSAEncryption
07:59:3a:34:07:79:d9:e7:89:a2:32:6d:0e:b8:54:8a:80:4f:
cf:9d:b4:fa:38:ed:51:7b:39:61:31:f2:1f:2b:0a:66:2d:ca:
a5:2c:6b:31:de:e3:27:84:46:f0:22:b0:8a:85:98:55:dd:aa:
a5:d8:d7:bf:3f:5b:92:12:3b:9d:07:b2:05:5f:f0:59:e4:c5:
b7:6a:7d:a6:70:c5:25:13:8a:68:d8:37:e3:5d:95:de:b9:80:
8a:e7:f3:05:b7:ef:42:a7:90:d3:04:1f:dd:13:f3:82:44:f7:
67:4d:6d:95:17:91:d5:76:ad:1f:00:40:72:cc:19:98:62:b8:
eb:31:e7:9b:b4:08:1b:d6:4d:f1:6f:9b:77:16:6e:d7:10:cb:
83:00:2b:d9:57:13:05:01:ce:48:08:de:7b:d8:ee:b9:71:4a:
33:40:7b:b4:a2:e1:05:fd:f5:c6:d4:eb:99:ad:8b:e7:49:c6:
f6:5f:86:8e:d1:f7:12:5b:9e:10:4a:88:a1:6c:88:6e:b3:44:
d7:00:f1:6c:c8:72:e7:c7:80:e8:17:d9:a3:01:6d:81:85:dd:
4c:6b:27:f8:fb:35:89:55:c0:18:1e:c9:b8:69:8d:ad:32:b6:
97:60:61:29:63:b5:52:34:d8:b8:c4:46:f3:47:af:f6:54:8d:
11:e7:da:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:43 2023 by rpki-client on console-ams.rpki-client.org