Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/HX_vfjZIja-M2062RWgmCzBIXV8.roa
File: HX_vfjZIja-M2062RWgmCzBIXV8.roa (raw, json)
Hash identifier: RX9A7w/+/Y3kdulV+bTJhY4CN2ZzB1ifXGGxw5ChFF4=
Subject key identifier: 1D:7F:EF:7E:36:48:8D:AF:8C:DB:4E:B6:45:68:26:0B:30:48:5D:5F
Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Certificate serial: 0815745F
Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/HX_vfjZIja-M2062RWgmCzBIXV8.roa
Signing time: Sat 01 Jan 2022 16:03:22 +0000
ROA not before: Sat 01 Jan 2022 16:03:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212001
IP address blocks: 94.232.244.0/22 maxlen: 24
46.161.213.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 135623775 (0x815745f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Validity
Not Before: Jan 1 16:03:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1d7fef7e36488daf8cdb4eb64568260b30485d5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:27:98:ae:0f:cd:cb:59:4f:98:de:85:93:e3:
5c:74:41:70:60:b2:39:14:6a:e9:a3:7f:f4:44:98:
41:6e:10:58:72:9a:98:57:44:21:2e:e6:72:0e:66:
55:55:8a:ca:9a:2b:3b:90:18:bd:fb:c5:c8:75:6b:
23:02:16:72:79:43:4e:86:f3:ff:22:d1:0a:4c:3d:
2d:f8:2d:f3:81:3a:9a:b9:89:d5:c5:05:d0:e5:10:
a0:da:17:9f:53:9c:32:13:43:33:4c:55:3d:bb:79:
50:60:35:a1:76:03:82:54:7f:ba:cb:61:ea:96:1d:
b9:58:b4:e5:70:db:fd:bc:1e:6a:b5:2f:70:e7:0e:
8a:e8:a3:bf:39:a2:4e:24:6c:92:f4:62:57:e9:39:
55:6a:a8:2c:90:08:32:6c:07:e3:45:2a:90:7e:02:
11:1c:ea:68:e2:7b:60:1b:01:67:87:32:33:55:3f:
60:12:9b:9e:c3:59:35:7c:7f:3d:b7:52:8f:d8:f8:
66:9e:7f:ba:66:29:17:cc:6c:5e:7f:88:a2:75:3c:
35:46:6d:8c:73:3d:d3:38:a3:26:bc:a3:26:55:06:
2c:14:5d:95:02:38:e0:82:12:c2:9e:be:fe:63:33:
a5:94:44:e3:0a:53:fd:49:4f:95:4a:da:be:9d:bb:
57:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:7F:EF:7E:36:48:8D:AF:8C:DB:4E:B6:45:68:26:0B:30:48:5D:5F
X509v3 Authority Key Identifier:
keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/HX_vfjZIja-M2062RWgmCzBIXV8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.161.213.0/24
94.232.244.0/22
Signature Algorithm: sha256WithRSAEncryption
af:b6:ad:7b:ed:aa:9a:a0:14:6a:f6:b2:9b:e8:26:f5:3d:ad:
96:e8:d9:68:f3:17:d9:d1:c5:a0:7d:a6:d0:94:73:c8:2a:34:
00:47:a3:70:6c:f1:c9:db:09:f6:95:8c:cb:2c:69:ce:99:c5:
82:d2:7f:4a:59:ea:6a:0a:af:11:0b:3c:54:8a:5f:c7:91:cc:
40:2e:c9:cd:9a:61:ff:c2:29:c9:d5:d3:27:d5:33:8d:f7:9a:
2b:db:5f:b6:80:d8:41:7f:e0:e4:cd:63:2d:07:2c:c6:ba:42:
92:f0:64:00:90:6f:cc:f5:30:2c:6d:bd:81:88:e9:7c:35:b7:
ae:a8:ff:bd:6d:a1:fe:2a:73:c0:f4:84:cc:4e:81:eb:96:84:
59:57:f1:a0:ab:ae:fc:15:a0:5f:31:1f:fa:f3:34:c0:57:79:
e1:36:2d:6b:cb:bb:77:79:7d:50:16:7a:ef:35:7c:5f:1e:9e:
c8:bb:80:f3:73:8f:48:2b:53:3b:f8:e5:2d:28:06:02:74:08:
0e:76:ce:63:35:fb:95:99:3d:aa:ac:eb:22:25:f4:fb:3e:b2:
ae:fa:69:df:ed:5d:9e:13:00:d9:24:d0:2c:1f:31:30:2a:63:
14:1f:85:40:28:b0:de:1c:ec:0f:98:9a:1f:78:d1:0e:15:df:
1c:ab:35:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:17 2024 by rpki-client on console-ams.rpki-client.org