Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/217a7c-4cfd-4174-8dca-77405adaa11f/1/QqcmIveJHY14cKKQMH_pWzE9mMY.roa
File: QqcmIveJHY14cKKQMH_pWzE9mMY.roa (raw, json)
Hash identifier: BqAjTavjh7e94K7w+0HR9NSOGply7xxhSizlRw/AHuo=
Subject key identifier: 42:A7:26:22:F7:89:1D:8D:78:70:A2:90:30:7F:E9:5B:31:3D:98:C6
Certificate issuer: /CN=94ce9c4c165f1c89cb7e12b2939967dbf33c74c4
Certificate serial: 0250D2
Authority key identifier: 94:CE:9C:4C:16:5F:1C:89:CB:7E:12:B2:93:99:67:DB:F3:3C:74:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lM6cTBZfHInLfhKyk5ln2_M8dMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/217a7c-4cfd-4174-8dca-77405adaa11f/1/QqcmIveJHY14cKKQMH_pWzE9mMY.roa
Signing time: Wed 23 Mar 2022 23:09:04 +0000
ROA not before: Wed 23 Mar 2022 23:09:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61130
IP address blocks: 212.1.200.0/23 maxlen: 23
212.1.204.0/23 maxlen: 23
212.1.200.0/21 maxlen: 21
212.1.202.0/23 maxlen: 23
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 151762 (0x250d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94ce9c4c165f1c89cb7e12b2939967dbf33c74c4
Validity
Not Before: Mar 23 23:09:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=42a72622f7891d8d7870a290307fe95b313d98c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:4c:4b:e6:4d:0e:9a:53:33:1c:31:c9:83:e5:
77:8b:90:90:99:69:24:6f:ac:68:c4:b8:48:c0:4a:
84:f6:ba:6f:15:ef:07:9c:3d:fb:9c:fa:a2:ab:87:
3b:4d:48:36:03:c0:48:eb:3e:b9:4d:ef:4f:c6:7e:
15:f3:a0:40:f1:7b:f2:30:be:73:c9:c4:10:a6:b4:
29:96:36:3c:0b:20:3d:4b:4f:8e:8b:5f:33:6e:5b:
00:5e:90:85:9a:93:c2:bc:46:e8:b7:50:2d:3e:a1:
72:b5:10:93:32:c0:73:83:7b:83:8c:41:1d:5f:86:
3a:0d:a8:1b:18:9a:10:dd:ee:fc:60:08:ff:7d:08:
06:8a:b9:de:0d:a3:65:d9:a0:11:1b:e0:bf:70:34:
98:4f:99:0f:d1:49:ae:31:10:74:c8:f6:de:f8:60:
61:b7:0c:de:b7:50:60:b4:5f:ae:15:9f:bd:26:31:
c5:65:5a:a9:08:b4:9f:06:1d:6a:07:cd:de:ea:46:
a2:c8:78:65:90:a9:a3:6f:06:e1:67:9a:96:0b:d2:
4e:a3:79:3a:31:ec:7d:8c:41:69:6f:fb:6a:76:6d:
e7:14:0e:a4:85:ff:a9:ad:d2:da:9b:f5:8d:7f:36:
71:19:d9:09:37:18:27:e8:00:f8:83:ea:37:8b:ea:
e8:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:A7:26:22:F7:89:1D:8D:78:70:A2:90:30:7F:E9:5B:31:3D:98:C6
X509v3 Authority Key Identifier:
keyid:94:CE:9C:4C:16:5F:1C:89:CB:7E:12:B2:93:99:67:DB:F3:3C:74:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lM6cTBZfHInLfhKyk5ln2_M8dMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/217a7c-4cfd-4174-8dca-77405adaa11f/1/QqcmIveJHY14cKKQMH_pWzE9mMY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/217a7c-4cfd-4174-8dca-77405adaa11f/1/lM6cTBZfHInLfhKyk5ln2_M8dMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.1.200.0/21
Signature Algorithm: sha256WithRSAEncryption
89:99:3d:ec:41:fd:e1:4d:93:bf:58:0a:43:f9:3f:cc:08:74:
51:ad:d3:c0:d7:a3:8c:de:39:62:94:c1:c0:c0:e6:b1:0b:af:
80:f8:45:7d:31:67:a2:66:93:44:eb:98:13:ed:f1:40:2c:c9:
fa:ce:25:a9:a0:19:de:ab:4a:6e:4b:9b:12:ca:fd:35:e5:15:
65:44:69:dc:43:5e:3f:b9:14:5f:20:03:b6:15:e3:7c:b6:b1:
13:37:28:02:4a:64:62:1f:49:e2:50:45:d7:7a:92:2e:03:5d:
2e:9a:b6:27:a1:ab:58:5f:2f:d1:93:40:7a:d1:83:1d:d0:d0:
b4:ba:41:53:bd:d4:fd:58:82:19:c8:94:e5:1b:5b:e1:0e:82:
d4:d6:58:12:66:f4:bc:56:a7:91:5f:85:34:77:e4:c4:f2:39:
92:9e:56:86:9a:00:a6:47:dd:d7:6c:f8:bd:80:f0:8f:cf:51:
a6:1b:d2:46:ed:90:d6:94:55:d4:dd:5b:67:b1:0d:0f:0f:2e:
c9:95:8b:fc:74:c1:32:e9:42:06:04:a9:8c:9f:e5:73:f5:b7:
5b:50:79:a5:c6:c7:f5:cc:53:91:05:a2:d6:ef:0f:30:73:12:
b4:2a:c8:f7:bb:1c:ff:98:0e:7d:ef:bc:fa:9d:b8:24:e4:28:
d1:fe:38:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:28 2023 by rpki-client on console-ams.rpki-client.org