Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/373bcf-79d6-4863-9bf0-d8c964591afa/1/ozr5ktiCye9x1FprjIiGxx5sjMI.roa
File: ozr5ktiCye9x1FprjIiGxx5sjMI.roa (raw, json)
Hash identifier: MmYo7mGgdNg6vDjFz0GKJPVze+qNgM6GGypZcPGRrGs=
Subject key identifier: A3:3A:F9:92:D8:82:C9:EF:71:D4:5A:6B:8C:88:86:C7:1E:6C:8C:C2
Certificate issuer: /CN=7c46a3cad80965af86cbb0083dfb40ab2ff1bacf
Certificate serial: 0192A4D3
Authority key identifier: 7C:46:A3:CA:D8:09:65:AF:86:CB:B0:08:3D:FB:40:AB:2F:F1:BA:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fEajytgJZa-Gy7AIPftAqy_xus8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/373bcf-79d6-4863-9bf0-d8c964591afa/1/ozr5ktiCye9x1FprjIiGxx5sjMI.roa
Signing time: Sat 01 Jan 2022 10:54:00 +0000
ROA not before: Sat 01 Jan 2022 10:54:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60949
IP address blocks: 130.185.160.0/21 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26387667 (0x192a4d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c46a3cad80965af86cbb0083dfb40ab2ff1bacf
Validity
Not Before: Jan 1 10:54:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a33af992d882c9ef71d45a6b8c8886c71e6c8cc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:14:4d:ba:b2:ca:5a:2a:f2:0e:d0:2f:11:0a:
60:e8:33:78:fa:ed:41:43:67:52:cb:e0:cc:f2:20:
d7:04:ba:55:8b:67:e3:45:62:6c:01:3d:f6:05:02:
2b:81:10:31:e0:d8:fc:1b:29:8b:03:8c:b0:90:79:
88:92:69:92:e8:7b:88:5d:9f:0c:d4:dc:1b:7f:6a:
64:29:90:79:57:ec:75:41:43:5e:4a:25:0b:cc:bd:
96:0a:19:91:0c:24:13:14:ec:13:0f:dd:04:43:3a:
52:18:8f:b9:01:f8:7e:37:ee:95:3e:51:06:70:66:
e1:79:8c:19:a6:7f:a5:1c:be:2c:5a:47:24:80:fb:
fc:f1:ef:a8:5d:0e:f2:32:31:85:43:e4:d0:5a:50:
89:a9:53:3d:92:7c:f4:eb:1f:b9:80:b0:71:90:15:
3c:08:51:c3:15:28:ea:89:83:d8:79:7a:5d:c7:21:
a4:e5:fc:96:10:74:ca:ea:7d:96:3b:5b:53:62:d9:
00:4e:54:85:66:6e:f0:34:40:93:bd:e0:36:7b:84:
1a:a5:84:93:1a:14:43:2b:c7:6b:9e:7b:7c:30:44:
6f:52:9c:cc:b3:c3:4d:a7:f1:c1:96:06:9f:8d:f2:
5a:36:ea:94:e1:d3:9b:10:6c:f1:c6:8d:a6:d4:e4:
b4:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:3A:F9:92:D8:82:C9:EF:71:D4:5A:6B:8C:88:86:C7:1E:6C:8C:C2
X509v3 Authority Key Identifier:
keyid:7C:46:A3:CA:D8:09:65:AF:86:CB:B0:08:3D:FB:40:AB:2F:F1:BA:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fEajytgJZa-Gy7AIPftAqy_xus8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/373bcf-79d6-4863-9bf0-d8c964591afa/1/ozr5ktiCye9x1FprjIiGxx5sjMI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/373bcf-79d6-4863-9bf0-d8c964591afa/1/fEajytgJZa-Gy7AIPftAqy_xus8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.185.160.0/21
Signature Algorithm: sha256WithRSAEncryption
86:cf:8a:21:68:f0:b2:be:f8:86:af:68:24:0c:da:36:6c:2d:
46:ce:34:70:83:50:0d:df:03:d7:0f:45:8e:bf:13:d0:45:2f:
90:8b:35:41:b4:af:3d:7a:69:6c:2f:57:b5:52:ac:54:72:b2:
c4:e1:b8:e3:e9:05:d8:1f:bd:42:cd:96:59:4e:1b:28:3d:9d:
98:f7:37:38:49:33:6d:23:a9:01:ca:56:97:88:13:5c:0f:99:
9a:7b:49:11:1a:c2:39:a8:26:65:d7:46:e6:71:85:e1:82:87:
07:07:b2:a9:3c:d5:70:33:37:e1:5e:d0:59:43:92:80:87:ba:
64:76:32:83:85:cf:17:49:3e:fb:c7:45:45:5f:f0:9d:01:54:
c4:0e:5a:91:36:f4:2e:ce:b2:2b:3f:4f:e7:15:4f:a7:d2:e3:
cf:17:f9:04:4e:58:fc:61:b5:a8:66:ac:7e:ee:4a:4f:7d:a3:
61:31:18:84:c8:fe:ae:f4:52:eb:97:f9:dd:93:98:db:11:b3:
19:5a:74:3d:f3:2f:66:21:fe:1e:57:c5:85:5e:51:68:be:58:
88:22:28:18:d6:2d:fd:5f:3e:0f:33:22:5c:9b:94:a5:36:41:
36:b0:79:9a:4c:bd:46:30:9c:ea:d6:a6:44:f0:82:78:8a:df:
05:9f:72:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:45 2024 by rpki-client on console-fra.rpki-client.org