Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/hTNl4UaSIwbVAB4x0HKIfB0pVnU.roa
File: hTNl4UaSIwbVAB4x0HKIfB0pVnU.roa (raw, json)
Hash identifier: f7UMiLbUNcvUmF++cjg7iU+wUNWqlEtqCB8DgxHNW0Q=
Subject key identifier: 85:33:65:E1:46:92:23:06:D5:00:1E:31:D0:72:88:7C:1D:29:56:75
Certificate issuer: /CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
Certificate serial: 03CEFEE5
Authority key identifier: 24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/hTNl4UaSIwbVAB4x0HKIfB0pVnU.roa
Signing time: Sat 01 Jan 2022 14:04:24 +0000
ROA not before: Sat 01 Jan 2022 14:04:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209132
IP address blocks: 45.129.137.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63897317 (0x3cefee5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
Validity
Not Before: Jan 1 14:04:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=853365e146922306d5001e31d072887c1d295675
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:8c:8f:fb:49:13:ac:bc:54:90:27:41:a4:76:
10:f5:7e:61:6a:bd:11:e6:99:ae:f7:67:17:f1:5c:
67:3b:02:27:1b:3e:88:4b:b5:8e:f6:d5:69:b2:66:
dd:4d:82:df:48:1e:a6:34:f4:4c:e6:a6:e7:56:7e:
1a:49:2c:c1:c8:1e:f2:c8:8a:d0:4d:49:fc:2b:3c:
c3:7c:28:46:fd:0b:61:85:c3:fe:ab:8a:dc:e4:3d:
9d:01:01:84:74:47:be:b6:7a:de:bd:d0:ad:61:ce:
b7:78:2a:71:7f:63:ee:cd:d3:d0:ac:2d:de:be:c8:
00:4b:e3:1f:e9:43:ba:68:d6:79:cb:84:70:b4:1b:
f2:d4:91:64:d2:09:e1:70:53:04:05:89:1f:42:dd:
2a:dc:2e:33:fd:e8:63:ac:f8:af:52:28:ee:ca:0f:
1f:45:a7:90:4a:96:9e:d7:60:dd:26:43:75:ff:2a:
a1:d2:ba:82:91:fd:fb:68:e6:7c:ea:84:d1:54:b7:
23:c7:56:8f:b3:67:a1:78:e1:23:ec:2e:a6:54:21:
cf:c0:37:fc:81:4d:da:a0:15:a6:1b:42:f5:8b:47:
14:93:80:cb:38:06:8b:83:8a:ef:b9:e7:0a:7a:bb:
49:eb:c0:cf:8c:57:c8:b8:48:a5:14:8f:d5:f8:68:
12:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:33:65:E1:46:92:23:06:D5:00:1E:31:D0:72:88:7C:1D:29:56:75
X509v3 Authority Key Identifier:
keyid:24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/hTNl4UaSIwbVAB4x0HKIfB0pVnU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.137.0/24
Signature Algorithm: sha256WithRSAEncryption
78:fc:d0:b6:93:f4:bf:4e:22:cc:b0:ee:3a:0c:49:39:2b:46:
f3:65:4a:63:8a:64:13:87:3d:85:bf:86:51:66:62:ea:ef:e5:
73:75:ca:29:b1:8c:e1:79:bc:d3:9b:8f:59:b1:d1:9a:9f:a3:
c5:f1:48:51:ca:40:b3:85:fb:0c:b7:9b:b8:15:12:72:54:cf:
c8:a6:ee:ad:05:a4:ab:ed:0b:02:0c:24:24:31:78:9b:4e:35:
7e:38:be:28:7a:34:fc:ff:50:8e:d7:8f:25:2d:d2:54:32:0e:
50:44:fe:89:9b:f9:fd:9f:e5:41:eb:b7:01:ac:89:ef:4f:70:
41:06:6a:c9:a2:16:32:97:67:85:73:76:e2:1d:26:9d:35:2c:
d2:12:3d:ca:82:d7:fa:d2:6a:20:35:45:64:37:fc:e5:1a:f9:
2b:ab:48:5a:8f:13:0c:25:85:de:dc:dc:29:03:c1:49:95:37:
12:a2:bf:31:73:49:04:0a:64:19:e0:8d:b9:0a:89:7a:28:62:
51:a0:44:9e:90:63:70:9f:94:dc:a2:05:34:4a:51:c8:7b:75:
dc:09:1e:7c:3d:4a:ff:3b:95:60:fc:14:d6:5a:47:cf:0f:ae:
2b:5c:1f:48:2f:1d:05:dd:1a:5c:15:74:0b:ea:d1:26:17:46:
ac:0f:27:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:28 2023 by rpki-client on console-ams.rpki-client.org