Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/2171be-b083-479b-a580-6a06b7502bd7/1/pd2en6GZ-e5wWIVAaKg636-zW1g.roa
File: pd2en6GZ-e5wWIVAaKg636-zW1g.roa (raw, json)
Hash identifier: GT4Zw3Sb3bNVdJCRObQYBJkYj5v1JVcG3ArctWW9xr4=
Subject key identifier: A5:DD:9E:9F:A1:99:F9:EE:70:58:85:40:68:A8:3A:DF:AF:B3:5B:58
Certificate issuer: /CN=37ed49efac9795987771acdc77a0e228904277ad
Certificate serial: 0185162FE47E5211C6EDE7F9210869176AA5
Authority key identifier: 37:ED:49:EF:AC:97:95:98:77:71:AC:DC:77:A0:E2:28:90:42:77:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N-1J76yXlZh3cazcd6DiKJBCd60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/2171be-b083-479b-a580-6a06b7502bd7/1/pd2en6GZ-e5wWIVAaKg636-zW1g.roa
Signing time: Thu 15 Dec 2022 14:28:35 +0000
ROA not before: Thu 15 Dec 2022 14:28:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207967
IP address blocks: 109.172.45.0/24 maxlen: 24
178.130.136.0/21 maxlen: 21
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:16:2f:e4:7e:52:11:c6:ed:e7:f9:21:08:69:17:6a:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37ed49efac9795987771acdc77a0e228904277ad
Validity
Not Before: Dec 15 14:28:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a5dd9e9fa199f9ee7058854068a83adfafb35b58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:df:37:23:4f:1c:32:58:6e:3a:84:95:0e:05:
c0:57:e3:33:49:a1:3d:11:9c:69:f4:40:92:23:96:
64:19:ce:85:44:54:12:12:ee:8d:a0:c2:4a:9f:c4:
1a:89:85:70:7e:a2:52:2d:2c:1f:f5:a1:e3:65:c2:
a6:bf:c8:f3:b4:ec:8c:1b:fe:b7:b0:6f:99:77:86:
b7:d4:f2:7a:c6:8f:eb:6b:da:f0:f7:c1:aa:6c:45:
92:db:8e:84:72:c5:c4:fc:79:43:38:03:44:44:80:
79:31:42:69:1d:51:20:91:7d:4f:5d:24:59:98:58:
e8:30:34:93:16:ce:9c:dd:25:6c:19:e4:c0:cd:88:
09:e9:49:02:97:b2:a6:78:b8:8e:a1:73:93:98:d9:
c2:87:f0:d2:d1:9c:59:36:b9:3d:3e:91:37:bb:2f:
47:75:92:9b:3d:77:42:60:81:75:cc:da:53:2a:78:
7d:18:ed:32:4c:78:9f:6f:db:02:a2:b4:d5:78:3d:
fc:c7:0d:8d:ca:76:ba:84:66:a7:14:80:2e:a5:9f:
f0:5f:86:69:1e:ba:a5:cd:a3:2d:bb:95:fe:aa:81:
fa:5b:d8:ef:96:2f:cb:8b:b1:56:1e:ee:7f:82:6e:
85:ae:1f:09:fa:70:1a:77:ba:89:8f:1e:91:03:3b:
9b:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:DD:9E:9F:A1:99:F9:EE:70:58:85:40:68:A8:3A:DF:AF:B3:5B:58
X509v3 Authority Key Identifier:
keyid:37:ED:49:EF:AC:97:95:98:77:71:AC:DC:77:A0:E2:28:90:42:77:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N-1J76yXlZh3cazcd6DiKJBCd60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/2171be-b083-479b-a580-6a06b7502bd7/1/pd2en6GZ-e5wWIVAaKg636-zW1g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/2171be-b083-479b-a580-6a06b7502bd7/1/N-1J76yXlZh3cazcd6DiKJBCd60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.172.45.0/24
178.130.136.0/21
Signature Algorithm: sha256WithRSAEncryption
ad:90:3e:ec:13:c0:0b:c8:7c:80:08:8d:15:86:55:0a:eb:25:
33:15:19:9e:d4:9d:91:8b:26:3e:a4:1f:97:7c:ca:3a:47:fd:
3c:6e:f2:30:d6:f7:80:0d:a5:2d:4b:ee:75:4d:32:4d:46:77:
98:b6:68:7d:e0:01:ba:cb:a7:d7:14:f3:a4:b2:38:ae:de:25:
98:bd:d4:88:d4:ec:23:2a:fd:ca:18:19:be:f6:45:0b:6f:d7:
4f:3b:01:16:3e:c2:81:88:74:2f:99:dc:13:66:90:84:72:0b:
b5:dc:89:ad:04:1b:e9:a2:ea:ee:c9:1b:4b:45:5b:4a:90:13:
bf:14:5e:cd:db:8c:cc:14:e6:ae:4f:66:01:f2:35:1f:ea:89:
9e:99:64:78:3f:a9:62:85:de:45:f9:59:bc:f4:4f:a3:15:dc:
66:fc:cc:1b:ee:2e:04:1c:3f:0b:c5:62:2a:a8:45:6d:27:79:
ba:49:24:dc:83:60:a4:87:be:e8:ff:98:a4:66:c9:dc:32:8a:
83:58:2d:d5:20:1c:8a:57:1c:9a:cb:c2:2f:4d:64:97:b2:ea:
da:f2:15:0d:b4:31:8e:21:0f:b3:76:5e:00:eb:8c:1d:59:e3:
84:ca:10:04:64:be:f4:66:8a:2f:f1:64:54:a5:4e:e3:6c:41:
21:d2:3b:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:47 2023 by rpki-client on console-ams.rpki-client.org