Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/AEcRPZqqKGFhr_63mFByK_UL3a8.roa
File: AEcRPZqqKGFhr_63mFByK_UL3a8.roa (raw, json)
Hash identifier: 5Q62PUC03CxcvIPcNEQcARkpsKd7rOBmYoTa62L/dtI=
Subject key identifier: 00:47:11:3D:9A:AA:28:61:61:AF:FE:B7:98:50:72:2B:F5:0B:DD:AF
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 018571A7BD0291E3CE1AF89CAC664F3AD64D
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/AEcRPZqqKGFhr_63mFByK_UL3a8.roa
Signing time: Mon 02 Jan 2023 08:44:56 +0000
ROA not before: Mon 02 Jan 2023 08:44:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209396
IP address blocks: 2.58.60.0/22 maxlen: 22
45.151.196.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:a7:bd:02:91:e3:ce:1a:f8:9c:ac:66:4f:3a:d6:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Jan 2 08:44:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0047113d9aaa286161affeb79850722bf50bddaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:7b:d0:d3:83:ef:1b:ae:e7:61:ae:0e:a6:8c:
39:d0:8a:ea:a3:5f:b9:6a:b9:ea:33:d3:c4:32:d6:
a9:ea:07:ba:6d:86:e3:ec:73:21:d2:2d:c4:52:a6:
01:fb:94:55:82:39:b3:95:98:68:1c:a2:09:a0:b1:
6d:b2:98:1f:a3:9a:68:37:0f:ce:89:30:17:97:47:
4e:a2:85:d9:5f:b0:ab:f0:12:a1:04:24:92:80:8f:
02:2c:60:c8:b4:26:c0:0c:a1:a3:d3:45:74:3e:67:
df:cd:81:7a:77:6d:3f:5a:65:27:d5:ca:09:26:5a:
98:e7:c9:8e:c0:94:30:aa:b2:fb:4c:7d:38:2e:e7:
72:1d:ca:6c:b2:5f:7c:5c:12:57:14:db:dc:8d:15:
a2:36:f2:df:c3:a1:97:ac:34:e7:f4:76:20:55:c2:
41:92:b1:9d:e7:56:57:69:c4:0d:5b:7c:79:d0:87:
8b:d7:7c:94:9b:29:a6:9a:e3:e2:72:f0:ed:40:aa:
1f:5b:dd:6e:f3:26:1a:5d:2c:34:f4:b2:0c:7c:49:
e8:7d:97:03:85:1f:36:76:dd:26:40:9a:55:65:5a:
dd:4f:d0:76:74:4a:0c:79:27:9f:e1:a3:99:a8:33:
d5:f2:1d:6f:27:5a:0d:04:e3:95:97:11:cf:28:46:
fe:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:47:11:3D:9A:AA:28:61:61:AF:FE:B7:98:50:72:2B:F5:0B:DD:AF
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/AEcRPZqqKGFhr_63mFByK_UL3a8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.60.0/22
45.151.196.0/22
Signature Algorithm: sha256WithRSAEncryption
60:95:27:fc:03:a3:2c:a5:03:47:a3:57:37:3e:7e:9e:87:52:
10:23:35:da:20:84:1d:68:78:cb:9b:a9:56:f3:b7:11:c7:b9:
30:62:07:34:7e:e4:9d:b9:2b:6b:4d:b2:4c:ee:7d:da:d4:34:
27:6c:2b:83:72:33:5b:4e:3a:5a:17:4c:47:03:70:4f:77:34:
b4:3f:30:e4:b1:83:3f:41:a1:3d:55:d9:e3:1e:42:ab:9a:5b:
46:99:56:e4:f8:b9:7d:f3:4e:a5:61:89:e2:3d:f5:eb:78:48:
02:93:ff:33:6b:fa:8d:c4:b8:af:a4:e8:07:5c:dc:37:5e:ad:
1b:96:2b:d8:3b:30:b6:eb:dc:18:dc:69:0f:8f:6e:52:e6:d5:
80:73:b3:3b:72:6c:84:9a:18:28:3c:87:93:c2:d1:da:84:f5:
f8:48:b8:87:f7:fa:48:3d:ae:21:33:dc:00:f9:59:98:60:32:
78:bf:97:7e:ba:45:8c:36:b2:60:a3:e4:57:78:e8:ce:5b:61:
8a:4c:48:e2:ed:d9:90:b1:45:cd:69:6d:ca:f3:f2:71:6b:ad:
c1:67:a6:31:10:18:2e:b8:06:5f:74:55:f6:82:41:4e:0f:9e:
d5:b4:3f:49:48:78:3a:68:f5:c9:8c:78:4e:ba:4b:eb:22:b2:
03:d9:f4:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:41 2024 by rpki-client on console-fra.rpki-client.org