Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/lT9L6MVpyFW_GTF_PsbzDR-3Ejc.roa
File: lT9L6MVpyFW_GTF_PsbzDR-3Ejc.roa (raw, json)
Hash identifier: oPv5X1H+Swql/OmbqIAW4my95GeotF7pJX8nSV42TCw=
Subject key identifier: 95:3F:4B:E8:C5:69:C8:55:BF:19:31:7F:3E:C6:F3:0D:1F:B7:12:37
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 018CC2DB2428D3829640A0DDABE4C8B4690E
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/lT9L6MVpyFW_GTF_PsbzDR-3Ejc.roa
Signing time: Mon 01 Jan 2024 02:29:50 +0000
ROA not before: Mon 01 Jan 2024 02:29:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3561
IP address blocks: 45.10.12.0/22 maxlen: 22
45.95.88.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:24:28:d3:82:96:40:a0:dd:ab:e4:c8:b4:69:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Jan 1 02:29:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=953f4be8c569c855bf19317f3ec6f30d1fb71237
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:97:53:4b:5f:97:53:cc:71:c5:f6:90:fe:7e:
19:f3:cf:45:67:91:d8:04:c4:10:32:0b:0d:15:c7:
6c:23:83:17:dc:d3:26:7b:8d:7d:1f:27:21:58:b5:
07:d8:43:21:3a:bc:82:da:21:9b:c6:47:45:13:a3:
06:d7:7d:33:c7:3d:53:c5:1b:65:e5:25:dc:1e:1f:
80:54:14:cb:06:56:90:60:31:d1:d5:36:ce:cc:8c:
76:ae:c6:7b:73:f9:8d:67:0b:4d:2f:95:54:55:d6:
b2:4a:af:3a:54:65:ef:fb:9b:0e:46:aa:cd:f3:c9:
3a:1b:9d:c1:11:62:82:0c:4b:4e:3d:09:99:14:11:
92:f9:fc:a4:22:53:f5:f1:61:af:68:18:d8:d0:fb:
6e:0e:ff:2f:03:b8:da:03:fc:14:70:18:3e:e3:84:
25:ad:e2:18:89:d8:b8:52:31:cb:05:6a:01:a3:dc:
b3:42:75:40:54:cf:77:8c:3d:b2:58:b0:6d:26:a8:
56:a8:74:c3:3b:7d:8f:a4:37:84:ac:62:0d:37:fd:
36:ed:5d:ba:e2:4a:93:55:9f:48:25:48:ee:14:52:
8f:a1:e3:b6:0a:99:26:7b:01:6a:46:8c:44:7f:8e:
a9:41:c8:45:8a:6e:8b:ab:c4:a2:65:16:db:5b:98:
c4:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:3F:4B:E8:C5:69:C8:55:BF:19:31:7F:3E:C6:F3:0D:1F:B7:12:37
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/lT9L6MVpyFW_GTF_PsbzDR-3Ejc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.12.0/22
45.95.88.0/22
Signature Algorithm: sha256WithRSAEncryption
35:76:b4:2e:d9:a7:cf:e6:ae:7e:5f:77:8f:c7:a9:ba:84:ad:
6d:94:2a:20:eb:97:50:e0:3e:a6:5d:09:a5:54:79:f0:d7:69:
18:28:48:66:bb:f5:e4:c0:80:62:80:24:c7:2f:8b:9d:f3:a0:
2d:c7:ea:aa:e8:02:c0:c3:10:ef:c5:44:9e:92:75:51:9c:88:
1d:17:02:a9:8f:a1:31:63:b6:10:c4:04:82:14:08:f7:e8:f2:
b9:b7:cf:f9:3e:57:5a:56:16:1e:25:0e:fe:ae:1b:2a:4e:13:
ac:0e:bc:9b:26:6e:74:23:ff:ee:50:96:97:ad:30:26:d2:64:
52:e7:1d:bd:3d:fb:4a:61:be:c7:6b:98:b9:a7:df:74:2f:62:
ac:d5:89:ae:29:37:0e:50:a2:bd:52:12:e6:b6:20:3f:bf:11:
25:c9:6f:70:bb:ff:45:6d:b8:82:67:76:32:98:54:36:c5:45:
44:b2:cb:ab:63:8f:cc:7f:56:a0:8d:2d:74:35:32:bc:69:ad:
71:d1:a5:0d:86:74:66:eb:03:1d:c0:82:15:db:9a:09:c0:cb:
c1:5f:f5:c1:a0:20:6c:a6:8d:3d:b6:71:b2:bc:0f:ed:dd:21:
8c:cc:9d:80:35:a4:b0:e0:a8:2e:a9:8d:b2:72:56:e3:20:4a:
bd:bb:0b:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 7 13:55:42 2024 by rpki-client on console-fra.rpki-client.org