Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/mK2BZxxgOIKh8gMKDVN_9a5UFHk.roa
File: mK2BZxxgOIKh8gMKDVN_9a5UFHk.roa (raw, json)
Hash identifier: w9rI+Xx6Auv+EFvoJ5lcU6CpMBbq5zqeke5K/2p2/P8=
Subject key identifier: 98:AD:81:67:1C:60:38:82:A1:F2:03:0A:0D:53:7F:F5:AE:54:14:79
Certificate issuer: /CN=2e8b24c76ad87a6c1fedffaf08d9b17b45249991
Certificate serial: 0181EDAA8AB0FEC79991CDAAE8E687745C85
Authority key identifier: 2E:8B:24:C7:6A:D8:7A:6C:1F:ED:FF:AF:08:D9:B1:7B:45:24:99:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Loskx2rYemwf7f-vCNmxe0UkmZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/mK2BZxxgOIKh8gMKDVN_9a5UFHk.roa
Signing time: Mon 11 Jul 2022 14:29:45 +0000
ROA not before: Mon 11 Jul 2022 14:29:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15516
IP address blocks: 82.192.128.0/19 maxlen: 19
89.19.128.0/19 maxlen: 19
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:ed:aa:8a:b0:fe:c7:99:91:cd:aa:e8:e6:87:74:5c:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e8b24c76ad87a6c1fedffaf08d9b17b45249991
Validity
Not Before: Jul 11 14:29:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=98ad81671c603882a1f2030a0d537ff5ae541479
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:01:d6:55:a7:09:52:51:0d:2c:cc:62:58:09:
d4:2a:76:70:70:6f:9b:90:e1:67:a0:fc:b2:b3:5f:
7b:c4:1a:93:8b:77:a0:ad:fa:83:a2:3c:06:d3:4c:
91:37:f7:e0:f3:57:3a:78:cb:9d:fb:9e:10:92:01:
e0:41:c8:35:38:68:dc:e1:18:2b:5f:58:59:99:72:
e0:43:d1:14:0d:41:7e:b4:3f:8f:aa:65:1a:8c:93:
3c:82:1d:e0:9b:6c:50:aa:b9:41:b6:87:a4:92:3d:
b9:f1:61:2c:95:5b:4d:1e:ed:4e:53:2d:43:c5:58:
1c:ca:32:f1:2d:d1:e5:cb:32:b3:5b:d1:35:60:9a:
a6:c6:71:b5:a0:69:f2:17:2e:a2:f5:3b:a8:de:c8:
0c:d2:a2:54:73:57:04:5a:62:03:d7:fc:32:c4:f1:
66:b2:ac:b3:a0:ee:b1:cd:26:80:03:d0:b2:df:28:
eb:5d:10:0b:58:62:4e:fa:d9:77:90:93:a6:53:eb:
cc:f1:69:d4:e4:9b:fe:33:6c:ab:4b:96:84:1b:fe:
2d:9d:86:3b:6a:8f:f6:4d:77:7f:bf:3b:70:51:75:
9c:c5:d5:72:73:32:2a:dd:95:b0:d3:a5:aa:08:99:
5d:38:bd:2c:17:4f:42:c4:99:c1:f0:0b:56:a6:58:
b0:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:AD:81:67:1C:60:38:82:A1:F2:03:0A:0D:53:7F:F5:AE:54:14:79
X509v3 Authority Key Identifier:
keyid:2E:8B:24:C7:6A:D8:7A:6C:1F:ED:FF:AF:08:D9:B1:7B:45:24:99:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Loskx2rYemwf7f-vCNmxe0UkmZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/mK2BZxxgOIKh8gMKDVN_9a5UFHk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.192.128.0/19
89.19.128.0/19
Signature Algorithm: sha256WithRSAEncryption
8a:c9:22:ff:f6:1b:b5:51:e5:ea:3d:b1:2a:a3:e8:aa:60:73:
8c:e3:a2:cb:4b:96:0e:d1:03:3c:19:b0:55:66:e1:14:1c:88:
3d:6c:4f:7c:8c:f1:bb:ea:ce:96:80:c8:8e:90:0e:4d:45:ca:
85:2f:38:42:41:54:08:62:3e:63:de:6c:0e:97:57:8e:c1:89:
a9:16:a3:0e:8f:9f:3f:66:ce:16:de:f2:d3:8a:c3:33:1a:61:
12:bd:d7:b1:bc:b3:60:a1:ec:44:ac:32:60:3a:71:d9:57:df:
99:1c:0f:ca:4f:bb:32:05:33:91:24:96:20:fe:3d:18:37:38:
a6:be:04:96:e3:0e:af:be:15:26:44:67:d3:09:d6:bd:4f:d0:
46:02:3f:76:c9:21:f3:8d:49:83:4f:58:88:d7:b6:16:ee:c8:
6a:30:ef:ea:f1:d9:85:62:1b:e2:70:a6:82:c7:68:80:05:57:
4d:df:3b:25:27:1d:26:f4:f0:29:1f:30:42:94:a6:61:35:bd:
fb:3f:ee:2a:3f:ae:2f:66:2f:4f:63:82:af:e3:07:2d:76:d1:
a5:f8:de:8d:ce:91:1c:2c:68:1f:9f:ed:02:06:02:86:0a:96:
40:fa:84:71:3f:0d:4c:a0:bf:cb:fb:4e:82:61:7b:d8:b8:54:
ff:3e:dc:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:00 2024 by rpki-client on console-fra.rpki-client.org