Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/8J_Pfg5Jo7C_92IufbiocPEr39E.roa
File: 8J_Pfg5Jo7C_92IufbiocPEr39E.roa (raw, json)
Hash identifier: fiLikfuANgQqfNoVO7Iutr9s3v4MAMrt1Ri6/Fg1zVk=
Subject key identifier: F0:9F:CF:7E:0E:49:A3:B0:BF:F7:62:2E:7D:B8:A8:70:F1:2B:DF:D1
Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial: 0BD4D789
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/8J_Pfg5Jo7C_92IufbiocPEr39E.roa
Signing time: Mon 17 Jan 2022 15:56:39 +0000
ROA not before: Mon 17 Jan 2022 15:56:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 21700
IP address blocks: 151.106.80.0/20 maxlen: 24
194.233.240.0/20 maxlen: 24
195.180.168.0/22 maxlen: 22
195.180.172.0/22 maxlen: 22
194.163.224.0/20 maxlen: 24
194.195.232.0/22 maxlen: 22
194.195.16.0/20 maxlen: 24
194.195.236.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 198498185 (0xbd4d789)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Validity
Not Before: Jan 17 15:56:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f09fcf7e0e49a3b0bff7622e7db8a870f12bdfd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:cc:40:45:44:18:1f:63:7c:7e:a8:c6:f3:7c:
95:4c:39:c2:b5:00:13:c7:2e:40:1f:b6:46:59:5f:
ed:b4:ec:f9:e4:60:94:84:38:8b:41:d1:70:d0:c9:
4c:12:20:e4:16:5e:1b:91:dc:39:f6:2c:74:16:cb:
35:86:e0:e1:4f:15:5e:f3:94:c8:16:1e:84:1e:d3:
1f:3d:99:1c:38:0c:cc:f2:c2:2d:30:b7:d3:fc:0d:
ff:15:af:d7:38:74:17:6f:3b:4b:dd:cc:6a:d2:07:
b8:d7:83:10:8a:e6:da:06:8f:8a:fd:0b:9b:62:06:
13:fa:7d:41:f2:4f:9e:52:12:4f:16:96:ad:fc:6b:
49:ff:b5:bb:b3:dc:03:56:e5:b4:c0:6a:69:79:c2:
e2:64:25:e5:df:3a:62:26:e4:95:73:76:14:31:33:
f6:66:18:90:ac:53:db:8b:4d:e5:5c:e9:df:71:03:
2f:ff:50:16:98:79:11:9f:5c:4d:48:8d:d7:77:d7:
ee:7c:b8:eb:22:fd:93:e6:0f:5d:8f:e6:dc:b2:ad:
4a:ba:03:39:c5:64:7a:81:92:0b:eb:0d:b4:e7:f4:
56:a7:4c:28:29:63:67:9a:16:27:f2:17:3c:2f:aa:
3f:48:f4:48:5b:c4:9e:63:48:77:7e:74:5c:1e:94:
62:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:9F:CF:7E:0E:49:A3:B0:BF:F7:62:2E:7D:B8:A8:70:F1:2B:DF:D1
X509v3 Authority Key Identifier:
keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/8J_Pfg5Jo7C_92IufbiocPEr39E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.106.80.0/20
194.163.224.0/20
194.195.16.0/20
194.195.232.0/21
194.233.240.0/20
195.180.168.0/21
Signature Algorithm: sha256WithRSAEncryption
10:06:e0:46:83:dd:35:e3:bf:69:1b:46:34:a2:d6:f6:07:dc:
70:3f:52:7b:04:04:8a:8b:aa:af:70:87:7f:c3:38:3b:0b:33:
b6:ed:76:78:4b:f6:ab:f5:bd:81:af:bb:f7:6e:4f:f5:fd:9e:
35:76:1e:73:9e:d1:22:72:dd:46:55:9b:44:a5:43:21:6d:ef:
e2:d7:d1:04:61:0a:f7:58:50:5e:c1:b1:51:57:83:bf:4f:32:
69:63:fb:0a:b7:1e:fe:d0:72:1a:75:8d:32:4d:84:35:21:c6:
b5:d9:4f:7c:7b:dd:3a:b0:13:73:e7:09:18:20:a4:d3:46:91:
f7:2d:7c:10:9c:76:de:ca:48:59:e3:ed:e7:db:a4:ed:28:ac:
13:a8:5a:55:4d:53:7a:23:f8:8a:6a:6b:11:19:c2:ab:49:ba:
32:02:cc:bd:61:74:61:63:41:f9:e1:c8:c5:ca:ed:10:4b:fa:
05:4a:05:99:97:ab:a3:0c:66:73:1d:a3:c2:01:e9:52:b4:35:
7a:2d:71:12:ea:65:8f:c2:a9:e7:57:c0:64:b2:a3:00:2f:b1:
89:dc:19:7a:26:c1:19:d5:7a:ec:56:ab:a0:33:85:c8:65:fc:
79:dd:40:1d:b9:cd:17:97:39:00:84:e7:eb:b9:2b:a9:2d:30:
54:04:e2:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:29 2023 by rpki-client on console-ams.rpki-client.org