Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/aKBTekFp63zpM2iY1aC1DwIibqM.roa
File: aKBTekFp63zpM2iY1aC1DwIibqM.roa (raw, json)
Hash identifier: SxxuT7anMTuPW4nVDxba6adxnRnb7S66h46JgQYDh48=
Subject key identifier: 68:A0:53:7A:41:69:EB:7C:E9:33:68:98:D5:A0:B5:0F:02:22:6E:A3
Certificate issuer: /CN=2b145a8bdf2bca150f25ed54a277b8f653efdb3e
Certificate serial: 364BDC
Authority key identifier: 2B:14:5A:8B:DF:2B:CA:15:0F:25:ED:54:A2:77:B8:F6:53:EF:DB:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KxRai98ryhUPJe1Uone49lPv2z4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/aKBTekFp63zpM2iY1aC1DwIibqM.roa
Signing time: Tue 22 Mar 2022 11:58:47 +0000
ROA not before: Tue 22 Mar 2022 11:58:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29405
IP address blocks: 193.57.27.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3558364 (0x364bdc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b145a8bdf2bca150f25ed54a277b8f653efdb3e
Validity
Not Before: Mar 22 11:58:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=68a0537a4169eb7ce9336898d5a0b50f02226ea3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:70:d1:9d:73:ea:7c:e5:9f:a8:c8:a5:2c:4e:
c4:d1:cf:1b:c5:23:b3:9f:68:70:63:b4:87:1c:4c:
29:87:1e:96:99:38:30:95:d3:94:96:01:54:77:70:
e2:cc:41:27:5e:83:b8:b5:eb:e0:cf:09:b6:59:49:
68:21:01:9d:ae:09:b2:7c:95:51:c8:55:fc:ce:71:
d2:4c:3e:93:1e:47:36:b2:8d:fb:df:6c:af:e1:33:
9f:65:bf:26:6c:68:95:66:77:36:e1:4e:b3:db:ac:
3e:e0:ea:31:9a:d8:c1:03:84:12:ab:86:e5:75:b6:
dd:3e:9c:41:65:e7:3b:51:f0:d6:da:c5:ef:5b:b8:
b2:67:f5:e9:71:41:05:c0:ba:f2:81:0b:08:4e:bb:
bb:e1:a1:3c:57:f7:37:42:49:03:b8:23:37:6b:58:
2e:c5:68:16:f4:b5:7d:a6:16:17:a9:99:43:2a:6b:
51:b6:c5:0b:8f:38:80:d0:19:5d:bb:3c:37:6c:be:
e6:cf:12:40:62:91:16:69:d8:95:8e:33:f2:f7:ba:
58:98:85:c2:6f:b7:93:fe:ac:1d:8b:0e:33:9a:b7:
17:31:4c:da:9a:cd:94:65:e4:21:02:12:8a:fa:9c:
49:32:e5:fc:04:96:8f:dc:dd:24:ba:3d:78:07:95:
ce:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:A0:53:7A:41:69:EB:7C:E9:33:68:98:D5:A0:B5:0F:02:22:6E:A3
X509v3 Authority Key Identifier:
keyid:2B:14:5A:8B:DF:2B:CA:15:0F:25:ED:54:A2:77:B8:F6:53:EF:DB:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KxRai98ryhUPJe1Uone49lPv2z4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/aKBTekFp63zpM2iY1aC1DwIibqM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/KxRai98ryhUPJe1Uone49lPv2z4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.57.27.0/24
Signature Algorithm: sha256WithRSAEncryption
52:35:1b:eb:bf:be:7c:d3:54:95:7b:bb:5b:d4:cf:6c:32:a0:
57:33:2a:ef:ec:ad:0c:ca:8b:55:0b:19:44:5a:b4:ef:c3:b6:
ee:dd:f3:08:7e:34:7b:0f:b4:b2:2a:26:38:ae:44:e4:66:51:
66:c9:c2:c6:17:fd:0d:42:87:15:a5:b7:55:e9:d7:f9:94:95:
03:73:ef:e7:ed:1d:6d:87:b4:1f:80:f3:0f:ab:12:28:e4:7f:
02:c9:ac:6f:37:c7:1d:bf:b2:5d:aa:94:85:f1:45:b4:dd:0f:
cf:0c:e3:df:43:a8:dc:cd:b2:3a:c8:6a:4c:8e:8e:cb:a6:4a:
be:e8:d3:49:a6:79:5b:b8:53:6f:9c:da:5a:0c:2a:8c:75:02:
27:ce:42:78:56:c0:5d:d2:66:5d:68:e7:29:46:d6:47:a0:4d:
24:8b:a8:9e:5f:43:14:ca:e4:85:ba:ec:48:77:cb:45:ff:b5:
6a:62:23:8e:82:69:69:f6:a5:95:c5:11:64:67:be:bf:bc:ca:
40:ed:f3:42:84:29:53:60:93:e8:80:16:28:e4:d1:f0:8e:09:
7d:35:71:b7:c6:8f:8b:de:4c:7e:0f:2d:d2:79:65:8e:e4:7c:
1f:3c:60:3c:18:af:c8:51:79:88:64:3c:4e:e6:59:ad:b6:69:
9d:30:fe:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:57 2023 by rpki-client on console-ams.rpki-client.org