Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/StTQHtwSeUWGD2XSERNwPUrfh8w.roa
File: StTQHtwSeUWGD2XSERNwPUrfh8w.roa (raw, json)
Hash identifier: i/a1RON4ZsZE6GEToxulJ4p1vkCIjb8mTEuRSOD0Lw0=
Subject key identifier: 4A:D4:D0:1E:DC:12:79:45:86:0F:65:D2:11:13:70:3D:4A:DF:87:CC
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 1392A25F
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/StTQHtwSeUWGD2XSERNwPUrfh8w.roa
Signing time: Sat 01 Jan 2022 05:56:26 +0000
ROA not before: Sat 01 Jan 2022 05:56:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209396
IP address blocks: 2.58.60.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 328376927 (0x1392a25f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Jan 1 05:56:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4ad4d01edc127945860f65d21113703d4adf87cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b1:37:5f:be:33:aa:be:69:0d:f1:0b:ce:c8:
df:4c:4a:63:0d:82:f3:b2:13:0e:e3:c6:ab:32:15:
ba:5b:b2:65:aa:e6:d4:43:e9:d5:d3:6b:aa:14:88:
a1:97:75:1f:ec:d5:8d:68:f9:d4:ce:b6:cb:6e:fd:
bc:8b:08:66:84:cb:eb:15:71:03:f0:8a:83:78:ff:
40:38:de:7f:11:33:c0:be:96:9f:4c:7b:d7:2a:44:
9d:0c:85:e6:b0:ab:93:1d:c5:c4:97:34:2b:af:8b:
50:0b:2d:b4:0e:b5:9c:da:7b:e4:5b:7e:3c:c8:1d:
3e:11:82:86:28:64:16:4a:68:01:cb:d3:1d:01:5c:
64:42:60:5f:a1:d3:e5:51:68:cc:3b:c9:a1:69:c4:
51:6d:a7:77:54:60:37:13:dd:3e:29:b5:46:13:8b:
7b:e0:61:84:1a:23:ba:e7:21:f1:59:56:a0:db:7d:
22:4c:1a:06:f1:c9:24:05:81:62:c9:e0:99:36:62:
91:73:e0:c1:7f:a7:9c:42:c8:b3:d1:33:e3:23:f1:
bc:a0:bf:9c:e9:33:eb:21:91:ad:70:0d:e1:ae:ce:
0c:87:4c:60:d2:12:5f:59:b7:6b:c3:01:c6:6e:b7:
e0:b0:0d:97:b8:bc:f2:b9:a6:ae:63:b0:f2:dc:02:
ce:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:D4:D0:1E:DC:12:79:45:86:0F:65:D2:11:13:70:3D:4A:DF:87:CC
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/StTQHtwSeUWGD2XSERNwPUrfh8w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.60.0/22
Signature Algorithm: sha256WithRSAEncryption
64:42:fa:dd:83:3a:89:8f:e0:db:e1:e3:49:79:1b:ec:a0:b5:
ee:c6:c9:1f:e5:41:ff:76:22:ac:b9:dc:3e:5b:d6:6f:a8:b0:
83:f0:ca:70:2d:4f:98:38:be:8e:b5:e3:b2:47:57:96:f2:b8:
7d:ee:42:d8:22:e5:87:09:2c:ce:8e:c9:b7:30:86:a5:41:ed:
bb:66:fe:89:20:5a:d2:2e:47:16:41:d6:a4:f2:5e:fe:92:7b:
7b:f8:ff:52:73:03:0e:5a:ad:90:6f:8a:b5:09:aa:77:37:cc:
56:d0:89:f2:75:d4:9a:f4:a3:39:77:56:b9:d4:e1:24:24:d8:
82:37:68:5d:f0:d6:00:1f:3d:f5:ff:43:33:19:08:50:45:f8:
56:a5:32:0b:08:a3:af:55:18:d3:29:a1:61:f6:95:8f:71:85:
15:d6:07:e1:8b:ba:95:bd:a2:78:d2:61:0c:b9:0e:29:b1:31:
f8:50:c0:73:7b:2b:b3:e4:9e:f3:db:d9:ba:92:ef:ae:6a:0e:
60:83:77:e4:62:fc:14:2e:31:47:0a:e6:6b:b4:3a:eb:ae:8a:
4b:ad:d0:bd:29:b4:6d:1a:77:ec:97:d6:61:af:59:9a:e8:bd:
67:2a:13:71:37:eb:2b:b2:1c:3e:58:e5:00:b0:97:c3:e1:28:
2d:21:34:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:26 2024 by rpki-client on console-ams.rpki-client.org